[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. 2021/03/10 00:11:32 fuzzer started 2021/03/10 00:11:33 dialing manager at 10.128.0.169:37677 2021/03/10 00:11:33 syscalls: 3539 2021/03/10 00:11:33 code coverage: enabled 2021/03/10 00:11:33 comparison tracing: enabled 2021/03/10 00:11:33 extra coverage: enabled 2021/03/10 00:11:33 setuid sandbox: enabled 2021/03/10 00:11:33 namespace sandbox: enabled 2021/03/10 00:11:33 Android sandbox: enabled 2021/03/10 00:11:33 fault injection: enabled 2021/03/10 00:11:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/10 00:11:33 net packet injection: enabled 2021/03/10 00:11:33 net device setup: enabled 2021/03/10 00:11:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/10 00:11:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/10 00:11:33 USB emulation: enabled 2021/03/10 00:11:33 hci packet injection: enabled 2021/03/10 00:11:33 wifi device emulation: enabled 2021/03/10 00:11:33 802.15.4 emulation: enabled 2021/03/10 00:11:33 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/10 00:11:33 fetching corpus: 50, signal 51609/55307 (executing program) 2021/03/10 00:11:34 fetching corpus: 100, signal 90794/96014 (executing program) 2021/03/10 00:11:34 fetching corpus: 150, signal 119070/125732 (executing program) 2021/03/10 00:11:34 fetching corpus: 200, signal 128402/136599 (executing program) 2021/03/10 00:11:34 fetching corpus: 250, signal 137850/147525 (executing program) 2021/03/10 00:11:34 fetching corpus: 300, signal 151706/162692 (executing program) 2021/03/10 00:11:34 fetching corpus: 350, signal 165682/177932 (executing program) 2021/03/10 00:11:34 fetching corpus: 400, signal 180504/193937 (executing program) 2021/03/10 00:11:34 fetching corpus: 449, signal 196154/210683 (executing program) 2021/03/10 00:11:35 fetching corpus: 499, signal 207423/223027 (executing program) 2021/03/10 00:11:35 fetching corpus: 549, signal 219903/236506 (executing program) 2021/03/10 00:11:35 fetching corpus: 599, signal 228605/246287 (executing program) 2021/03/10 00:11:35 fetching corpus: 649, signal 234981/253724 (executing program) 2021/03/10 00:11:35 fetching corpus: 698, signal 240989/260819 (executing program) 2021/03/10 00:11:35 fetching corpus: 748, signal 248423/269273 (executing program) 2021/03/10 00:11:36 fetching corpus: 798, signal 257104/278890 (executing program) 2021/03/10 00:11:36 fetching corpus: 848, signal 264178/286918 (executing program) 2021/03/10 00:11:36 fetching corpus: 898, signal 270377/294031 (executing program) 2021/03/10 00:11:36 fetching corpus: 947, signal 280405/304857 (executing program) 2021/03/10 00:11:36 fetching corpus: 997, signal 287564/312796 (executing program) 2021/03/10 00:11:36 fetching corpus: 1045, signal 294680/320719 (executing program) 2021/03/10 00:11:36 fetching corpus: 1095, signal 300783/327670 (executing program) 2021/03/10 00:11:37 fetching corpus: 1145, signal 308054/335654 (executing program) 2021/03/10 00:11:37 fetching corpus: 1195, signal 314129/342482 (executing program) 2021/03/10 00:11:37 fetching corpus: 1245, signal 322244/351099 (executing program) 2021/03/10 00:11:37 fetching corpus: 1294, signal 325779/355466 (executing program) 2021/03/10 00:11:37 fetching corpus: 1344, signal 330685/361105 (executing program) 2021/03/10 00:11:37 fetching corpus: 1394, signal 336359/367422 (executing program) 2021/03/10 00:11:37 fetching corpus: 1444, signal 340694/372506 (executing program) 2021/03/10 00:11:38 fetching corpus: 1493, signal 344423/377038 (executing program) 2021/03/10 00:11:38 fetching corpus: 1543, signal 349485/382672 (executing program) 2021/03/10 00:11:38 fetching corpus: 1593, signal 354186/387993 (executing program) 2021/03/10 00:11:38 fetching corpus: 1642, signal 357008/391565 (executing program) 2021/03/10 00:11:38 fetching corpus: 1692, signal 360370/395615 (executing program) 2021/03/10 00:11:38 fetching corpus: 1742, signal 363340/399273 (executing program) 2021/03/10 00:11:38 fetching corpus: 1792, signal 368249/404661 (executing program) 2021/03/10 00:11:39 fetching corpus: 1842, signal 372869/409759 (executing program) 2021/03/10 00:11:39 fetching corpus: 1892, signal 377206/414637 (executing program) 2021/03/10 00:11:39 fetching corpus: 1942, signal 382484/420306 (executing program) 2021/03/10 00:11:39 fetching corpus: 1992, signal 386575/424888 (executing program) 2021/03/10 00:11:39 fetching corpus: 2042, signal 389010/427992 (executing program) 2021/03/10 00:11:39 fetching corpus: 2092, signal 392043/431593 (executing program) 2021/03/10 00:11:40 fetching corpus: 2142, signal 396123/436110 (executing program) 2021/03/10 00:11:40 fetching corpus: 2192, signal 403007/443057 (executing program) 2021/03/10 00:11:40 fetching corpus: 2240, signal 405810/446423 (executing program) 2021/03/10 00:11:40 fetching corpus: 2289, signal 411350/452141 (executing program) 2021/03/10 00:11:40 fetching corpus: 2338, signal 414350/455621 (executing program) 2021/03/10 00:11:41 fetching corpus: 2388, signal 417515/459174 (executing program) 2021/03/10 00:11:41 fetching corpus: 2437, signal 420568/462735 (executing program) 2021/03/10 00:11:41 fetching corpus: 2487, signal 424345/466802 (executing program) 2021/03/10 00:11:41 fetching corpus: 2537, signal 427960/470775 (executing program) 2021/03/10 00:11:41 fetching corpus: 2586, signal 431300/474486 (executing program) 2021/03/10 00:11:41 fetching corpus: 2635, signal 435497/478925 (executing program) 2021/03/10 00:11:41 fetching corpus: 2685, signal 438338/482156 (executing program) 2021/03/10 00:11:41 fetching corpus: 2734, signal 440804/485086 (executing program) 2021/03/10 00:11:42 fetching corpus: 2784, signal 445105/489475 (executing program) 2021/03/10 00:11:42 fetching corpus: 2834, signal 449774/494137 (executing program) 2021/03/10 00:11:42 fetching corpus: 2884, signal 452481/497194 (executing program) 2021/03/10 00:11:42 fetching corpus: 2934, signal 455646/500599 (executing program) 2021/03/10 00:11:42 fetching corpus: 2983, signal 458581/503793 (executing program) 2021/03/10 00:11:43 fetching corpus: 3033, signal 462359/507710 (executing program) 2021/03/10 00:11:43 fetching corpus: 3083, signal 465860/511301 (executing program) 2021/03/10 00:11:43 fetching corpus: 3133, signal 468400/514132 (executing program) 2021/03/10 00:11:44 fetching corpus: 3183, signal 471205/517169 (executing program) 2021/03/10 00:11:44 fetching corpus: 3232, signal 473578/519808 (executing program) 2021/03/10 00:11:44 fetching corpus: 3282, signal 475573/522164 (executing program) 2021/03/10 00:11:44 fetching corpus: 3332, signal 477907/524750 (executing program) 2021/03/10 00:11:44 fetching corpus: 3382, signal 481085/528027 (executing program) 2021/03/10 00:11:44 fetching corpus: 3431, signal 483330/530481 (executing program) 2021/03/10 00:11:44 fetching corpus: 3481, signal 486785/533946 (executing program) 2021/03/10 00:11:45 fetching corpus: 3531, signal 488468/535963 (executing program) 2021/03/10 00:11:45 fetching corpus: 3581, signal 493110/540368 (executing program) 2021/03/10 00:11:45 fetching corpus: 3631, signal 495586/542978 (executing program) 2021/03/10 00:11:45 fetching corpus: 3681, signal 498382/545876 (executing program) 2021/03/10 00:11:45 fetching corpus: 3731, signal 499969/547738 (executing program) 2021/03/10 00:11:45 fetching corpus: 3781, signal 502745/550552 (executing program) 2021/03/10 00:11:45 fetching corpus: 3831, signal 505425/553308 (executing program) 2021/03/10 00:11:46 fetching corpus: 3881, signal 507500/555568 (executing program) 2021/03/10 00:11:46 fetching corpus: 3931, signal 511145/559025 (executing program) 2021/03/10 00:11:46 fetching corpus: 3981, signal 514536/562310 (executing program) 2021/03/10 00:11:46 fetching corpus: 4031, signal 516959/564782 (executing program) 2021/03/10 00:11:46 fetching corpus: 4080, signal 518776/566767 (executing program) 2021/03/10 00:11:46 fetching corpus: 4130, signal 521285/569334 (executing program) 2021/03/10 00:11:46 fetching corpus: 4180, signal 522819/571044 (executing program) 2021/03/10 00:11:47 fetching corpus: 4230, signal 524862/573140 (executing program) 2021/03/10 00:11:47 fetching corpus: 4280, signal 527588/575789 (executing program) 2021/03/10 00:11:47 fetching corpus: 4330, signal 529493/577779 (executing program) 2021/03/10 00:11:47 fetching corpus: 4380, signal 531062/579485 (executing program) 2021/03/10 00:11:47 fetching corpus: 4430, signal 533856/582079 (executing program) 2021/03/10 00:11:47 fetching corpus: 4480, signal 535325/583729 (executing program) 2021/03/10 00:11:47 fetching corpus: 4528, signal 538145/586330 (executing program) 2021/03/10 00:11:48 fetching corpus: 4578, signal 540015/588233 (executing program) 2021/03/10 00:11:48 fetching corpus: 4628, signal 541888/590142 (executing program) 2021/03/10 00:11:48 fetching corpus: 4677, signal 543338/591747 (executing program) 2021/03/10 00:11:48 fetching corpus: 4726, signal 549406/596703 (executing program) 2021/03/10 00:11:48 fetching corpus: 4775, signal 551126/598498 (executing program) 2021/03/10 00:11:48 fetching corpus: 4825, signal 552740/600179 (executing program) 2021/03/10 00:11:48 fetching corpus: 4875, signal 554370/601859 (executing program) 2021/03/10 00:11:49 fetching corpus: 4924, signal 555643/603270 (executing program) 2021/03/10 00:11:49 fetching corpus: 4974, signal 558054/605475 (executing program) 2021/03/10 00:11:49 fetching corpus: 5024, signal 559495/606963 (executing program) 2021/03/10 00:11:49 fetching corpus: 5071, signal 561630/608952 (executing program) 2021/03/10 00:11:49 fetching corpus: 5121, signal 563802/610941 (executing program) 2021/03/10 00:11:50 fetching corpus: 5171, signal 565589/612674 (executing program) 2021/03/10 00:11:50 fetching corpus: 5221, signal 568460/615146 (executing program) 2021/03/10 00:11:50 fetching corpus: 5271, signal 569856/616590 (executing program) 2021/03/10 00:11:50 fetching corpus: 5321, signal 572648/618998 (executing program) 2021/03/10 00:11:50 fetching corpus: 5370, signal 575197/621175 (executing program) 2021/03/10 00:11:51 fetching corpus: 5418, signal 578031/623561 (executing program) 2021/03/10 00:11:51 fetching corpus: 5467, signal 579553/625044 (executing program) 2021/03/10 00:11:51 fetching corpus: 5516, signal 581062/626499 (executing program) 2021/03/10 00:11:51 fetching corpus: 5566, signal 583933/628913 (executing program) 2021/03/10 00:11:51 fetching corpus: 5616, signal 586046/630721 (executing program) 2021/03/10 00:11:51 fetching corpus: 5666, signal 588909/633131 (executing program) 2021/03/10 00:11:51 fetching corpus: 5716, signal 590081/634311 (executing program) 2021/03/10 00:11:52 fetching corpus: 5766, signal 593442/636923 (executing program) 2021/03/10 00:11:52 fetching corpus: 5816, signal 595045/638339 (executing program) 2021/03/10 00:11:52 fetching corpus: 5866, signal 596928/639979 (executing program) 2021/03/10 00:11:52 fetching corpus: 5916, signal 598877/641656 (executing program) 2021/03/10 00:11:52 fetching corpus: 5966, signal 600280/642938 (executing program) 2021/03/10 00:11:53 fetching corpus: 6016, signal 602216/644580 (executing program) 2021/03/10 00:11:53 fetching corpus: 6066, signal 603741/645943 (executing program) 2021/03/10 00:11:53 fetching corpus: 6116, signal 609168/649829 (executing program) 2021/03/10 00:11:54 fetching corpus: 6165, signal 610997/651362 (executing program) 2021/03/10 00:11:54 fetching corpus: 6215, signal 612517/652629 (executing program) 2021/03/10 00:11:54 fetching corpus: 6265, signal 614201/654034 (executing program) 2021/03/10 00:11:54 fetching corpus: 6315, signal 616352/655731 (executing program) 2021/03/10 00:11:54 fetching corpus: 6365, signal 618071/657145 (executing program) 2021/03/10 00:11:54 fetching corpus: 6415, signal 619888/658589 (executing program) 2021/03/10 00:11:54 fetching corpus: 6465, signal 621691/660076 (executing program) 2021/03/10 00:11:54 fetching corpus: 6515, signal 622608/660978 (executing program) 2021/03/10 00:11:55 fetching corpus: 6564, signal 624430/662450 (executing program) 2021/03/10 00:11:55 fetching corpus: 6614, signal 626373/663993 (executing program) 2021/03/10 00:11:55 fetching corpus: 6664, signal 627609/665068 (executing program) 2021/03/10 00:11:55 fetching corpus: 6714, signal 629369/666463 (executing program) 2021/03/10 00:11:55 fetching corpus: 6764, signal 630407/667383 (executing program) 2021/03/10 00:11:55 fetching corpus: 6814, signal 631962/668635 (executing program) 2021/03/10 00:11:56 fetching corpus: 6864, signal 633474/669814 (executing program) 2021/03/10 00:11:56 fetching corpus: 6914, signal 635085/671063 (executing program) 2021/03/10 00:11:56 fetching corpus: 6964, signal 636576/672234 (executing program) 2021/03/10 00:11:56 fetching corpus: 7014, signal 638230/673472 (executing program) 2021/03/10 00:11:56 fetching corpus: 7064, signal 639482/674506 (executing program) 2021/03/10 00:11:56 fetching corpus: 7114, signal 641743/676084 (executing program) 2021/03/10 00:11:56 fetching corpus: 7164, signal 643249/677246 (executing program) 2021/03/10 00:11:57 fetching corpus: 7214, signal 644390/678168 (executing program) 2021/03/10 00:11:57 fetching corpus: 7264, signal 645674/679136 (executing program) 2021/03/10 00:11:57 fetching corpus: 7314, signal 647379/680390 (executing program) 2021/03/10 00:11:57 fetching corpus: 7364, signal 649342/681784 (executing program) 2021/03/10 00:11:57 fetching corpus: 7414, signal 650400/682653 (executing program) 2021/03/10 00:11:57 fetching corpus: 7464, signal 652353/684020 (executing program) 2021/03/10 00:11:58 fetching corpus: 7513, signal 653699/684997 (executing program) 2021/03/10 00:11:58 fetching corpus: 7563, signal 655153/686053 (executing program) 2021/03/10 00:11:58 fetching corpus: 7613, signal 656994/687319 (executing program) 2021/03/10 00:11:58 fetching corpus: 7663, signal 658317/688299 (executing program) 2021/03/10 00:11:58 fetching corpus: 7713, signal 659396/689100 (executing program) 2021/03/10 00:11:58 fetching corpus: 7763, signal 660501/689893 (executing program) 2021/03/10 00:11:59 fetching corpus: 7812, signal 662529/691245 (executing program) 2021/03/10 00:11:59 fetching corpus: 7861, signal 663878/692263 (executing program) 2021/03/10 00:11:59 fetching corpus: 7911, signal 665099/693126 (executing program) 2021/03/10 00:11:59 fetching corpus: 7961, signal 666745/694260 (executing program) 2021/03/10 00:11:59 fetching corpus: 8011, signal 668276/695255 (executing program) 2021/03/10 00:11:59 fetching corpus: 8061, signal 669170/695891 (executing program) 2021/03/10 00:12:00 fetching corpus: 8110, signal 670187/696618 (executing program) 2021/03/10 00:12:00 fetching corpus: 8160, signal 671236/697317 (executing program) 2021/03/10 00:12:00 fetching corpus: 8210, signal 672689/698254 (executing program) 2021/03/10 00:12:00 fetching corpus: 8260, signal 673705/698960 (executing program) 2021/03/10 00:12:00 fetching corpus: 8310, signal 675636/700197 (executing program) 2021/03/10 00:12:01 fetching corpus: 8360, signal 677494/701335 (executing program) 2021/03/10 00:12:01 fetching corpus: 8410, signal 678483/702001 (executing program) 2021/03/10 00:12:01 fetching corpus: 8460, signal 679549/702754 (executing program) 2021/03/10 00:12:01 fetching corpus: 8510, signal 681700/704013 (executing program) 2021/03/10 00:12:01 fetching corpus: 8560, signal 683944/705317 (executing program) 2021/03/10 00:12:01 fetching corpus: 8610, signal 685144/706043 (executing program) 2021/03/10 00:12:01 fetching corpus: 8660, signal 686258/706758 (executing program) 2021/03/10 00:12:02 fetching corpus: 8710, signal 687212/707351 (executing program) 2021/03/10 00:12:02 fetching corpus: 8760, signal 688276/707969 (executing program) 2021/03/10 00:12:02 fetching corpus: 8810, signal 689407/708711 (executing program) 2021/03/10 00:12:02 fetching corpus: 8860, signal 690574/709467 (executing program) 2021/03/10 00:12:02 fetching corpus: 8910, signal 691657/710154 (executing program) 2021/03/10 00:12:02 fetching corpus: 8960, signal 692955/710912 (executing program) 2021/03/10 00:12:03 fetching corpus: 9010, signal 694324/711694 (executing program) 2021/03/10 00:12:03 fetching corpus: 9060, signal 696040/712622 (executing program) 2021/03/10 00:12:03 fetching corpus: 9110, signal 697258/713313 (executing program) 2021/03/10 00:12:03 fetching corpus: 9160, signal 698187/713842 (executing program) 2021/03/10 00:12:03 fetching corpus: 9210, signal 699378/714527 (executing program) 2021/03/10 00:12:03 fetching corpus: 9260, signal 700281/715049 (executing program) 2021/03/10 00:12:03 fetching corpus: 9310, signal 702636/716290 (executing program) 2021/03/10 00:12:04 fetching corpus: 9360, signal 703524/716823 (executing program) 2021/03/10 00:12:04 fetching corpus: 9410, signal 706670/718364 (executing program) 2021/03/10 00:12:04 fetching corpus: 9460, signal 708300/719315 (executing program) 2021/03/10 00:12:04 fetching corpus: 9510, signal 709148/719778 (executing program) 2021/03/10 00:12:04 fetching corpus: 9560, signal 710412/720422 (executing program) 2021/03/10 00:12:04 fetching corpus: 9610, signal 711489/721046 (executing program) 2021/03/10 00:12:05 fetching corpus: 9660, signal 712394/721491 (executing program) 2021/03/10 00:12:05 fetching corpus: 9710, signal 713686/722130 (executing program) 2021/03/10 00:12:05 fetching corpus: 9760, signal 714952/722750 (executing program) 2021/03/10 00:12:05 fetching corpus: 9810, signal 715791/723143 (executing program) 2021/03/10 00:12:05 fetching corpus: 9860, signal 717080/723742 (executing program) 2021/03/10 00:12:05 fetching corpus: 9910, signal 718326/724355 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724582 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724614 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724636 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724671 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724696 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724722 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724759 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724780 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724816 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724846 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724879 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724900 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724937 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724966 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/724999 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725028 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725059 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725092 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725128 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725147 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725183 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725216 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725248 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725275 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725302 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725334 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725367 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725416 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725440 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725469 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725505 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725536 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725558 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725594 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725614 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725645 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725669 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725697 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725724 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725756 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725780 (executing program) 2021/03/10 00:12:06 fetching corpus: 9943, signal 718775/725814 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725842 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725866 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725898 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725929 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725960 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/725990 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726015 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726052 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726074 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726094 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726116 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726155 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726191 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726229 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726262 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726285 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726312 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726330 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726361 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726386 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718778/726412 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726444 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726462 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726485 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726510 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726532 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726566 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726597 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726629 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726660 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726696 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726722 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726746 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726767 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726801 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726824 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726864 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726882 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726914 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726953 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/726984 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727015 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727046 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727076 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727112 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727136 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727155 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727182 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727207 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727237 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727265 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727291 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727326 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727360 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727393 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727426 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727453 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727481 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727515 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718783/727550 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727570 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727604 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727634 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727666 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727693 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727726 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727755 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727783 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727827 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727856 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727883 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727905 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727937 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727966 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/727995 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728020 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728049 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728076 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728108 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728146 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728165 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728192 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728219 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728247 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728275 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728301 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728324 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728347 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728378 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728411 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728431 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728467 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728498 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728517 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728543 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728578 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728610 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728643 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728663 (executing program) 2021/03/10 00:12:06 fetching corpus: 9944, signal 718784/728702 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728723 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728756 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728781 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728807 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728836 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728868 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728897 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728928 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728959 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/728995 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729027 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729052 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729083 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729112 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729139 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729167 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729192 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729215 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729246 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729269 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729309 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729332 (executing program) 2021/03/10 00:12:07 fetching corpus: 9944, signal 718784/729332 (executing program) 2021/03/10 00:12:08 starting 6 fuzzer processes 00:12:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) syzkaller login: [ 117.040980][ T37] audit: type=1400 audit(1615335129.071:8): avc: denied { execmem } for pid=8422 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:12:09 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797affff00000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:12:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000200000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) 00:12:09 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) 00:12:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000038, 0x0) 00:12:10 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000e4980210861a237594b3010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000089"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b1c, 0x1b09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 118.366419][ T8423] IPVS: ftp: loaded support on port[0] = 21 [ 118.601408][ T8425] IPVS: ftp: loaded support on port[0] = 21 [ 118.636553][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 118.750610][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.796906][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.815602][ T8423] device bridge_slave_0 entered promiscuous mode [ 118.846611][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 118.877205][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.885168][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.896114][ T8423] device bridge_slave_1 entered promiscuous mode [ 118.989998][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.033267][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.106974][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 119.121618][ T8423] team0: Port device team_slave_0 added [ 119.140690][ T8423] team0: Port device team_slave_1 added [ 119.261258][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.284627][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.328066][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.365513][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 119.380079][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.390591][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.418274][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.460235][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 119.528309][ T8423] device hsr_slave_0 entered promiscuous mode [ 119.555132][ T8423] device hsr_slave_1 entered promiscuous mode [ 119.716641][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 119.727293][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 119.897449][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.914716][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.927656][ T8427] device bridge_slave_0 entered promiscuous mode [ 119.951045][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.958966][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.968010][ T8427] device bridge_slave_1 entered promiscuous mode [ 120.007416][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 120.067160][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.091816][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.209691][ T8427] team0: Port device team_slave_0 added [ 120.252067][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.260311][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.269622][ T8425] device bridge_slave_0 entered promiscuous mode [ 120.280822][ T8427] team0: Port device team_slave_1 added [ 120.318263][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.337234][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.345920][ T8425] device bridge_slave_1 entered promiscuous mode [ 120.388309][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.397048][ T20] Bluetooth: hci0: command 0x0409 tx timeout [ 120.399963][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.411970][ T8429] device bridge_slave_0 entered promiscuous mode [ 120.419916][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.427205][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.453304][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.470138][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.477168][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.506773][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.553834][ T3081] Bluetooth: hci1: command 0x0409 tx timeout [ 120.570604][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.584659][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.592399][ T8429] device bridge_slave_1 entered promiscuous mode [ 120.602373][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.620009][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 120.666208][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.687043][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 120.701884][ T8427] device hsr_slave_0 entered promiscuous mode [ 120.710530][ T8427] device hsr_slave_1 entered promiscuous mode [ 120.717857][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.727600][ T8427] Cannot create hsr debugfs directory [ 120.751265][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.794050][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 120.804680][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.826689][ T8425] team0: Port device team_slave_0 added [ 120.860311][ T8425] team0: Port device team_slave_1 added [ 120.907254][ T8429] team0: Port device team_slave_0 added [ 120.921946][ T8429] team0: Port device team_slave_1 added [ 120.941634][ T8423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.972149][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.979515][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.006592][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.021393][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.028912][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.055667][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.055743][ T9158] Bluetooth: hci3: command 0x0409 tx timeout [ 121.081173][ T8423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.119091][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.127142][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.137262][ T8431] device bridge_slave_0 entered promiscuous mode [ 121.146703][ T8423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.159566][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.166960][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.193814][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.211387][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.220877][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.247613][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.271679][ T8423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.282938][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 121.291909][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.299760][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.308477][ T8431] device bridge_slave_1 entered promiscuous mode [ 121.333701][ T8425] device hsr_slave_0 entered promiscuous mode [ 121.347082][ T8425] device hsr_slave_1 entered promiscuous mode [ 121.354706][ T8425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.362269][ T8425] Cannot create hsr debugfs directory [ 121.390588][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.398040][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.408982][ T8466] device bridge_slave_0 entered promiscuous mode [ 121.457058][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.465128][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.474563][ T8466] device bridge_slave_1 entered promiscuous mode [ 121.496820][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.519663][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.537837][ T8429] device hsr_slave_0 entered promiscuous mode [ 121.545581][ T8429] device hsr_slave_1 entered promiscuous mode [ 121.552179][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.560185][ T8429] Cannot create hsr debugfs directory [ 121.592854][ T9158] Bluetooth: hci5: command 0x0409 tx timeout [ 121.621353][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.660529][ T8431] team0: Port device team_slave_0 added [ 121.680960][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.700598][ T8431] team0: Port device team_slave_1 added [ 121.791070][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.798766][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.827628][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.845298][ T8466] team0: Port device team_slave_0 added [ 121.858130][ T8466] team0: Port device team_slave_1 added [ 121.877952][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.885302][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.911943][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.961704][ T8427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.980927][ T8427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.028409][ T8427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.040828][ T8427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.073642][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.080635][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.107390][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.155693][ T8431] device hsr_slave_0 entered promiscuous mode [ 122.162659][ T8431] device hsr_slave_1 entered promiscuous mode [ 122.170562][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.179812][ T8431] Cannot create hsr debugfs directory [ 122.208308][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.216294][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.243942][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.319112][ T8466] device hsr_slave_0 entered promiscuous mode [ 122.342189][ T8466] device hsr_slave_1 entered promiscuous mode [ 122.349884][ T8466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.358156][ T8466] Cannot create hsr debugfs directory [ 122.364540][ T8425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.441114][ T8425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.452376][ T8425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.472334][ T8425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.483200][ T9158] Bluetooth: hci0: command 0x041b tx timeout [ 122.521349][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.631026][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.639092][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 122.667374][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.684803][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.699830][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.723649][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.735399][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.744242][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.751602][ T9158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.762314][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.771875][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.780932][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.788069][ T9158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.795757][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.808425][ T8429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.835695][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.849206][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.858990][ T8429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.883514][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 122.886423][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.922599][ T8429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.931860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.949224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.958781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.972588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.981663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.991267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.000788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.013843][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.021094][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.030098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.045442][ T8429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.072134][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.086024][ T8423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.099868][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.110729][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.120039][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.123325][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 123.131502][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.144068][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.153120][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.160287][ T9698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.168361][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.178259][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.186938][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.209740][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.219322][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.228894][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.236164][ T9158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.249843][ T8431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.299293][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.308637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.319219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.328520][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.335645][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.344213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.352996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.362131][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.369234][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.379693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.388719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.397752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.406893][ T9161] Bluetooth: hci4: command 0x041b tx timeout [ 123.424439][ T8431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.434400][ T8431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.470320][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.479697][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.492028][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.514179][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.524887][ T8431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.555149][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.562639][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.576322][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.587080][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.596999][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.642236][ T8425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.657962][ T8425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.675451][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.686072][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.695182][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.704544][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.713084][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.721373][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.730373][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.739399][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.748458][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.757422][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.772390][ T8427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.783358][ T3165] Bluetooth: hci5: command 0x041b tx timeout [ 123.792188][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.821845][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.831183][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.840085][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.850442][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.880133][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.892175][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.925035][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.933822][ T8466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.964895][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.972361][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.980845][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.989995][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.007730][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.015455][ T8466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.033789][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.055222][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.064979][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.075618][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.085171][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.094767][ T8466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.124805][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.144818][ T8423] device veth0_vlan entered promiscuous mode [ 124.155965][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.164604][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.172427][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.181503][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.190500][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.197640][ T9494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.205772][ T8466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.244700][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.261417][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.270491][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.283978][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.291047][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.300033][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.309311][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.323387][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.348239][ T8423] device veth1_vlan entered promiscuous mode [ 124.371202][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.379724][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.389754][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.399792][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.408962][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.418079][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.451126][ T8425] device veth0_vlan entered promiscuous mode [ 124.472325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.481424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.490446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.499315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.519769][ T8425] device veth1_vlan entered promiscuous mode [ 124.544709][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.551826][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.564267][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.572144][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.583781][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.592039][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.601135][ T9729] Bluetooth: hci0: command 0x040f tx timeout [ 124.606814][ T8423] device veth0_macvtap entered promiscuous mode [ 124.628521][ T8427] device veth0_vlan entered promiscuous mode [ 124.643520][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.651670][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.660057][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.668648][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.678109][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.703454][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.712260][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.734430][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.768832][ T8427] device veth1_vlan entered promiscuous mode [ 124.775061][ T9729] Bluetooth: hci1: command 0x040f tx timeout [ 124.788905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.807285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.818301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.827849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.837434][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.848689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.861332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.874476][ T8423] device veth1_macvtap entered promiscuous mode [ 124.885053][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.905409][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.915099][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.925086][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.954607][ T9732] Bluetooth: hci2: command 0x040f tx timeout [ 124.964386][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.976495][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.991192][ T8425] device veth0_macvtap entered promiscuous mode [ 125.003977][ T8425] device veth1_macvtap entered promiscuous mode [ 125.019385][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.052830][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.061481][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.072052][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.081627][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.091062][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.098177][ T9494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.106273][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.114854][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.124156][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.159684][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.171870][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.191301][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.202555][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 125.203611][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.225354][ T8427] device veth0_macvtap entered promiscuous mode [ 125.234124][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.242043][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.250808][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.259724][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.266880][ T9698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.275610][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.285548][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.294626][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.304147][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.313992][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.323460][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.331972][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.341219][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.355235][ T9698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.375160][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.384604][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.395829][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.407704][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.418782][ T8423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.433096][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 125.437350][ T8423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.450071][ T8423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.468574][ T8423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.481511][ T8427] device veth1_macvtap entered promiscuous mode [ 125.501908][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.510047][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.521240][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.531001][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.540075][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.549858][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.561951][ T8425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.571352][ T8425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.587508][ T8425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.596868][ T8425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.627280][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.638557][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.648238][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.657903][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.700799][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.711487][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.722352][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.734096][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.746925][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.764861][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.773523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.781774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.791569][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.800303][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.809228][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.818392][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.827220][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.840649][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.843126][ T9732] Bluetooth: hci5: command 0x040f tx timeout [ 125.859431][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.871042][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.881738][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.892126][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.903859][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.920242][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.937723][ T8429] device veth0_vlan entered promiscuous mode [ 125.978821][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.988141][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.999490][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.010200][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.019701][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.029364][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.038470][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.045614][ T9732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.053689][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.061151][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.069541][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.078552][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.087234][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.139694][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.156883][ T8427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.178865][ T8427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.189875][ T8427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.200625][ T8427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.221554][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.243794][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.252895][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.259974][ T9729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.341751][ T8429] device veth1_vlan entered promiscuous mode [ 126.374748][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.399593][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.468221][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.485379][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.505318][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.572411][ T8429] device veth0_macvtap entered promiscuous mode [ 126.622869][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.631473][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.644163][ T3165] Bluetooth: hci0: command 0x0419 tx timeout [ 126.658166][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.694186][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.716968][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.731544][ T8429] device veth1_macvtap entered promiscuous mode [ 126.764704][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.783563][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.791806][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.801457][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.809248][ T8] Bluetooth: hci1: command 0x0419 tx timeout [ 126.817867][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.827310][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.863112][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.871225][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.908343][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.924753][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.943929][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.963343][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.977328][ T8466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.013034][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.021320][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.030053][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.043667][ T8] Bluetooth: hci2: command 0x0419 tx timeout [ 127.053924][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.062331][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.081024][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.090294][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.099407][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.150952][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.180299][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.201391][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.213668][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.224785][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.235845][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.257289][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.265968][ T8431] device veth0_vlan entered promiscuous mode [ 127.274141][ T3165] Bluetooth: hci3: command 0x0419 tx timeout [ 127.293284][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.301956][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.339236][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.354397][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.358844][ T8431] device veth1_vlan entered promiscuous mode [ 127.390810][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.421803][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.450724][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.472659][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.488637][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.499994][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.514104][ T9158] Bluetooth: hci4: command 0x0419 tx timeout [ 127.521050][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.523691][ T9800] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.536142][ T8429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.547209][ T8429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.557867][ T8429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.576889][ T8429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.598235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.607990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.616882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.628528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.636239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.650977][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.659156][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.682315][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.712166][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.841498][ T9787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.893130][ T9787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.893498][ T9816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.910658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.949274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.967364][ T8431] device veth0_macvtap entered promiscuous mode [ 127.984334][ T8] Bluetooth: hci5: command 0x0419 tx timeout [ 128.024804][ T8431] device veth1_macvtap entered promiscuous mode [ 128.078158][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.090702][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.114602][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.146620][ T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.166774][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.196702][ T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.212084][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.227503][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.239734][ C0] hrtimer: interrupt took 36667 ns 00:12:20 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797affff00000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 128.257068][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.274299][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.301028][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.313974][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.326641][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.351185][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.383091][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.391185][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.412001][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.429764][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.442217][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.461122][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.472369][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.495055][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.506362][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.511309][ T9841] loop2: detected capacity change from 0 to 140 [ 128.517912][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.536184][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.549416][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.571558][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.580017][ T9841] EXT4-fs (loop2): invalid inodes per group: 16 [ 128.580017][ T9841] [ 128.585471][ T9844] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.602341][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.613960][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.614157][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.629688][ T8431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.640826][ T8431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.650132][ T8431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.659479][ T8431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.683269][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.694328][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.711659][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.796323][ T9841] loop2: detected capacity change from 0 to 140 [ 128.817059][ T9841] EXT4-fs (loop2): invalid inodes per group: 16 [ 128.817059][ T9841] 00:12:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 128.867324][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.885977][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 00:12:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000200000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 128.968577][ T8466] device veth0_vlan entered promiscuous mode [ 129.014565][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.030853][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.097449][ T8466] device veth1_vlan entered promiscuous mode 00:12:21 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) [ 129.176545][ T9865] loop2: detected capacity change from 0 to 140 [ 129.248503][ T9865] EXT4-fs (loop2): invalid inodes per group: 16 [ 129.248503][ T9865] [ 129.282727][ T9787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.324019][ T9787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:21 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797affff00000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 129.404902][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.454772][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.479611][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:12:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000200000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) 00:12:21 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) [ 129.509489][ T8466] device veth0_macvtap entered promiscuous mode [ 129.599788][ T8466] device veth1_macvtap entered promiscuous mode 00:12:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 129.648792][ T9787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.667657][ T9787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.684927][ T9894] loop2: detected capacity change from 0 to 140 [ 129.705481][ T9894] EXT4-fs (loop2): invalid inodes per group: 16 [ 129.705481][ T9894] [ 129.721895][ T9898] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.736471][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:12:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000200000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) 00:12:21 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) [ 129.841255][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.902306][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.918953][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.941691][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.966094][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.986073][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.009958][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.021909][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.042013][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.079908][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.111628][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.125752][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.147684][ T9911] loop2: detected capacity change from 0 to 140 [ 130.161416][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.170570][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.180820][ T9759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.195649][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.210197][ T9911] EXT4-fs (loop2): invalid inodes per group: 16 [ 130.210197][ T9911] [ 130.248558][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.340313][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.366263][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.391178][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.481454][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.503323][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.534230][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.584315][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.620334][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.682629][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.708824][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.725558][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.766439][ T8466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.802203][ T8466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.855691][ T8466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 00:12:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000038, 0x0) [ 130.906178][ T8466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.214233][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.241027][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.281341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.336769][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.347313][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.386331][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.742153][ T9602] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.981972][ T9602] usb 6-1: Using ep0 maxpacket: 16 [ 132.262701][ T9602] usb 6-1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice=b3.94 [ 132.272137][ T9602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.280114][ T9602] usb 6-1: Product: syz [ 132.286258][ T9602] usb 6-1: Manufacturer: syz [ 132.290876][ T9602] usb 6-1: SerialNumber: syz [ 132.301172][ T9602] usb 6-1: config 0 descriptor?? [ 132.365996][ T9602] ch341 6-1:0.0: ch341-uart converter detected [ 132.633037][ T3257] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.639764][ T3257] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.655324][ T9945] udc-core: couldn't find an available UDC or it's busy [ 133.664146][ T9945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.682777][ T9602] ch341-uart ttyUSB0: failed to read break control: -71 [ 133.690261][ T9602] ch341-uart: probe of ttyUSB0 failed with error -71 [ 133.703238][ T9602] usb 6-1: USB disconnect, device number 2 [ 133.718324][ T9602] ch341 6-1:0.0: device disconnected [ 134.454112][ T3081] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.712302][ T3081] usb 6-1: Using ep0 maxpacket: 16 00:12:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="180000007200030f00000000000000000700000085"], 0x18}}, 0x0) 00:12:27 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) 00:12:27 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797affff00000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:12:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 00:12:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000038, 0x0) 00:12:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 135.071575][ T3081] usb 6-1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice=b3.94 [ 135.091457][ T3081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.120448][ T9979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.124898][ T3081] usb 6-1: Product: syz [ 135.149458][ T9982] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000038, 0x0) 00:12:27 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) 00:12:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="180000007200030f00000000000000000700000085"], 0x18}}, 0x0) [ 135.274726][ T3081] usb 6-1: config 0 descriptor?? [ 135.341706][ T3081] usb 6-1: can't set config #0, error -71 [ 135.395738][ T3081] usb 6-1: USB disconnect, device number 3 00:12:27 executing program 4: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x0, 0x0, 0x38}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 00:12:27 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000000040), 0x0) 00:12:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="180000007200030f00000000000000000700000085"], 0x18}}, 0x0) 00:12:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="180000007200030f00000000000000000700000085"], 0x18}}, 0x0) 00:12:28 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={0x0, 0x0, 0x18}, 0xc) 00:12:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:12:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 00:12:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0xd0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) [ 136.338820][T10024] ipt_CLUSTERIP: Please specify an interface name [ 136.401303][T10026] ipt_CLUSTERIP: Please specify an interface name 00:12:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:12:28 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={0x0, 0x0, 0x18}, 0xc) 00:12:28 executing program 4: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x0, 0x0, 0x38}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 00:12:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0xd0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) 00:12:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x48}, 0x1, 0xb}, 0x0) [ 136.902363][T10035] ipt_CLUSTERIP: Please specify an interface name 00:12:29 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={0x0, 0x0, 0x18}, 0xc) 00:12:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 136.956680][T10039] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 00:12:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0xd0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) 00:12:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x48}, 0x1, 0xb}, 0x0) 00:12:29 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d00)={0x0, 0x0, 0x18}, 0xc) [ 137.207170][T10055] ipt_CLUSTERIP: Please specify an interface name [ 137.345470][T10060] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 00:12:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 00:12:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:12:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0xd0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) 00:12:29 executing program 4: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x0, 0x0, 0x38}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 00:12:29 executing program 1: prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x6, 0x7fa6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="0e023c6c8ac814d2232a34dcf79436e04c1f410865", 0x15}, {0x0}], 0x2, 0x2) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xea, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6}, r0, 0xa, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 00:12:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x48}, 0x1, 0xb}, 0x0) [ 137.664169][T10082] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 137.667099][T10080] ipt_CLUSTERIP: Please specify an interface name [ 137.789433][ T37] audit: type=1400 audit(1615335149.823:9): avc: denied { create } for pid=10076 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 00:12:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffa}) 00:12:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x48}, 0x1, 0xb}, 0x0) [ 138.054055][T10107] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 00:12:30 executing program 4: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x0, 0x0, 0x38}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 00:12:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffa}) 00:12:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffa}) 00:12:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 1: prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x6, 0x7fa6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="0e023c6c8ac814d2232a34dcf79436e04c1f410865", 0x15}, {0x0}], 0x2, 0x2) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xea, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6}, r0, 0xa, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 00:12:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) 00:12:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffa}) 00:12:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) 00:12:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:31 executing program 5: symlink(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 00:12:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x1}) sysinfo(&(0x7f00000007c0)=""/142) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(r2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 00:12:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) 00:12:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x128, 0xffffff80, 0x178, 0x128, 0xc7, 0x348, 0x258, 0x258, 0x348, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x4c]}, @mcast2, [], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@dev, @private1, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xbc, 0x4) writev(r2, 0x0, 0x0) r4 = creat(0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)=ANY=[], 0xb) fadvise64(r4, 0x40, 0x0, 0x4) rmdir(&(0x7f00000004c0)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000640)={{}, {0x0, 0xea60}}, 0x0) [ 139.373047][T10170] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 139.620995][ T20] usb 6-1: new full-speed USB device number 4 using dummy_hcd 00:12:31 executing program 1: prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x6, 0x7fa6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="0e023c6c8ac814d2232a34dcf79436e04c1f410865", 0x15}, {0x0}], 0x2, 0x2) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xea, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6}, r0, 0xa, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 00:12:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x128, 0xffffff80, 0x178, 0x128, 0xc7, 0x348, 0x258, 0x258, 0x348, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x4c]}, @mcast2, [], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@dev, @private1, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xbc, 0x4) writev(r2, 0x0, 0x0) r4 = creat(0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)=ANY=[], 0xb) fadvise64(r4, 0x40, 0x0, 0x4) rmdir(&(0x7f00000004c0)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000640)={{}, {0x0, 0xea60}}, 0x0) 00:12:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) 00:12:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 00:12:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x40}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:12:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x128, 0xffffff80, 0x178, 0x128, 0xc7, 0x348, 0x258, 0x258, 0x348, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x4c]}, @mcast2, [], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@dev, @private1, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xbc, 0x4) writev(r2, 0x0, 0x0) r4 = creat(0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)=ANY=[], 0xb) fadvise64(r4, 0x40, 0x0, 0x4) rmdir(&(0x7f00000004c0)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000640)={{}, {0x0, 0xea60}}, 0x0) [ 139.844374][T10191] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 00:12:31 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100013030000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003514497d000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 139.979470][T10198] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 139.991064][ T20] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.171691][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.192576][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.209997][ T20] usb 6-1: Product: syz [ 140.223747][ T20] usb 6-1: Manufacturer: syz [ 140.341546][ T20] usb 6-1: SerialNumber: syz [ 140.406564][ T20] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 140.609617][ T20] usb 6-1: USB disconnect, device number 4 00:12:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x128, 0xffffff80, 0x178, 0x128, 0xc7, 0x348, 0x258, 0x258, 0x348, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x4c]}, @mcast2, [], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@dev, @private1, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xbc, 0x4) writev(r2, 0x0, 0x0) r4 = creat(0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000100)=ANY=[], 0xb) fadvise64(r4, 0x40, 0x0, 0x4) rmdir(&(0x7f00000004c0)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000640)={{}, {0x0, 0xea60}}, 0x0) 00:12:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x40}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:12:33 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100013030000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003514497d000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 00:12:33 executing program 1: prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x6, 0x7fa6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="0e023c6c8ac814d2232a34dcf79436e04c1f410865", 0x15}, {0x0}], 0x2, 0x2) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xea, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6}, r0, 0xa, 0xffffffffffffffff, 0xb) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 00:12:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x0) 00:12:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 00:12:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 141.243762][T10246] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 00:12:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x0) 00:12:33 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100013030000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003514497d000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 00:12:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 00:12:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x40}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:12:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x0) 00:12:33 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000100013030000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003514497d000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 00:12:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 00:12:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x0) 00:12:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x57, &(0x7f0000000380)=[{&(0x7f0000000100)="1e8d048b2a3671889367d927a491079b0f9e23cff88a6d086d44712a7b1823833fd28001c9cf8895c4e15bd38d3de168deafc52ca456ae63a78f9cb6c6f06b8b2ef85b444922ed349286dc7b48fe808a882e6c3108316b13af8f0f701767b07ed275382e4a3f5a595a37d76ee7589f46c2b4ab4421e8f8ce47", 0x0, 0x8}, {&(0x7f0000000180)="e16b771d06dacf1c750cd4ff86e909c802db0b8ce0056afe4d2cf542a0ae4dea341c44ea8b23a46f9d5d815728b31149de64886b05c1fbcadfba907c84eb6bbff664dab5972e", 0x0, 0xff}, {&(0x7f0000000200)="c7c4dbb8ca3318edec4e94a58ca3934373ed869a41fbe1fe5ff058d9f378b3871cd94495636cec1573468b8751584589f566f4c099938ac0e3667e185550038306cebaa0b22bf926e9faea9d91cfa358fc0fe9b0e3c36c5e5b67c26dcca671084747ff877c33d847fc440a15c6b8f1c0fa06b853f48f29dda376b87cf3a24fc0d3957d2e7ff92898d80e3af210c8fe5262ed25b2cc7e01d86b30abb83f740f3a9272c69a3e2df47ecdfe567978a8c62c550fb7d96a4fee17b37b0c8c77094e7649a6b707f094be9cb27adc31b1837d44a3abb35e62fe67d49b25d66b", 0x0, 0x209}, {&(0x7f0000000040)="0352e377eddc98f5319bdd4ae2327de1c57abb391a3f1816689e302e431217019093c1788f8719417cf96309983215cd0eb1aead865255a190b38c0b05f16e1d", 0x0, 0x4}], 0x0, &(0x7f0000001700)) 00:12:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x40}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:12:34 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005c80)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1, 0xaad, 0x0) [ 142.219252][T10290] loop2: detected capacity change from 0 to 2176 [ 142.307741][T10290] hfsplus: unable to find HFS+ superblock [ 142.345026][ T37] audit: type=1800 audit(1615335154.383:10): pid=10261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="sda1" ino=14202 res=0 errno=0 00:12:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:34 executing program 4: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:34 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005c80)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1, 0xaad, 0x0) 00:12:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x57, &(0x7f0000000380)=[{&(0x7f0000000100)="1e8d048b2a3671889367d927a491079b0f9e23cff88a6d086d44712a7b1823833fd28001c9cf8895c4e15bd38d3de168deafc52ca456ae63a78f9cb6c6f06b8b2ef85b444922ed349286dc7b48fe808a882e6c3108316b13af8f0f701767b07ed275382e4a3f5a595a37d76ee7589f46c2b4ab4421e8f8ce47", 0x0, 0x8}, {&(0x7f0000000180)="e16b771d06dacf1c750cd4ff86e909c802db0b8ce0056afe4d2cf542a0ae4dea341c44ea8b23a46f9d5d815728b31149de64886b05c1fbcadfba907c84eb6bbff664dab5972e", 0x0, 0xff}, {&(0x7f0000000200)="c7c4dbb8ca3318edec4e94a58ca3934373ed869a41fbe1fe5ff058d9f378b3871cd94495636cec1573468b8751584589f566f4c099938ac0e3667e185550038306cebaa0b22bf926e9faea9d91cfa358fc0fe9b0e3c36c5e5b67c26dcca671084747ff877c33d847fc440a15c6b8f1c0fa06b853f48f29dda376b87cf3a24fc0d3957d2e7ff92898d80e3af210c8fe5262ed25b2cc7e01d86b30abb83f740f3a9272c69a3e2df47ecdfe567978a8c62c550fb7d96a4fee17b37b0c8c77094e7649a6b707f094be9cb27adc31b1837d44a3abb35e62fe67d49b25d66b", 0x0, 0x209}, {&(0x7f0000000040)="0352e377eddc98f5319bdd4ae2327de1c57abb391a3f1816689e302e431217019093c1788f8719417cf96309983215cd0eb1aead865255a190b38c0b05f16e1d", 0x0, 0x4}], 0x0, &(0x7f0000001700)) 00:12:34 executing program 0: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:34 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005c80)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1, 0xaad, 0x0) 00:12:34 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005c80)='/proc/capi/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1, 0xaad, 0x0) 00:12:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) [ 142.804486][T10320] loop2: detected capacity change from 0 to 2176 [ 142.828399][T10320] hfsplus: unable to find HFS+ superblock 00:12:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x57, &(0x7f0000000380)=[{&(0x7f0000000100)="1e8d048b2a3671889367d927a491079b0f9e23cff88a6d086d44712a7b1823833fd28001c9cf8895c4e15bd38d3de168deafc52ca456ae63a78f9cb6c6f06b8b2ef85b444922ed349286dc7b48fe808a882e6c3108316b13af8f0f701767b07ed275382e4a3f5a595a37d76ee7589f46c2b4ab4421e8f8ce47", 0x0, 0x8}, {&(0x7f0000000180)="e16b771d06dacf1c750cd4ff86e909c802db0b8ce0056afe4d2cf542a0ae4dea341c44ea8b23a46f9d5d815728b31149de64886b05c1fbcadfba907c84eb6bbff664dab5972e", 0x0, 0xff}, {&(0x7f0000000200)="c7c4dbb8ca3318edec4e94a58ca3934373ed869a41fbe1fe5ff058d9f378b3871cd94495636cec1573468b8751584589f566f4c099938ac0e3667e185550038306cebaa0b22bf926e9faea9d91cfa358fc0fe9b0e3c36c5e5b67c26dcca671084747ff877c33d847fc440a15c6b8f1c0fa06b853f48f29dda376b87cf3a24fc0d3957d2e7ff92898d80e3af210c8fe5262ed25b2cc7e01d86b30abb83f740f3a9272c69a3e2df47ecdfe567978a8c62c550fb7d96a4fee17b37b0c8c77094e7649a6b707f094be9cb27adc31b1837d44a3abb35e62fe67d49b25d66b", 0x0, 0x209}, {&(0x7f0000000040)="0352e377eddc98f5319bdd4ae2327de1c57abb391a3f1816689e302e431217019093c1788f8719417cf96309983215cd0eb1aead865255a190b38c0b05f16e1d", 0x0, 0x4}], 0x0, &(0x7f0000001700)) 00:12:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) [ 143.176173][T10337] loop2: detected capacity change from 0 to 2176 [ 143.207168][T10337] hfsplus: unable to find HFS+ superblock 00:12:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:35 executing program 4: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x57, &(0x7f0000000380)=[{&(0x7f0000000100)="1e8d048b2a3671889367d927a491079b0f9e23cff88a6d086d44712a7b1823833fd28001c9cf8895c4e15bd38d3de168deafc52ca456ae63a78f9cb6c6f06b8b2ef85b444922ed349286dc7b48fe808a882e6c3108316b13af8f0f701767b07ed275382e4a3f5a595a37d76ee7589f46c2b4ab4421e8f8ce47", 0x0, 0x8}, {&(0x7f0000000180)="e16b771d06dacf1c750cd4ff86e909c802db0b8ce0056afe4d2cf542a0ae4dea341c44ea8b23a46f9d5d815728b31149de64886b05c1fbcadfba907c84eb6bbff664dab5972e", 0x0, 0xff}, {&(0x7f0000000200)="c7c4dbb8ca3318edec4e94a58ca3934373ed869a41fbe1fe5ff058d9f378b3871cd94495636cec1573468b8751584589f566f4c099938ac0e3667e185550038306cebaa0b22bf926e9faea9d91cfa358fc0fe9b0e3c36c5e5b67c26dcca671084747ff877c33d847fc440a15c6b8f1c0fa06b853f48f29dda376b87cf3a24fc0d3957d2e7ff92898d80e3af210c8fe5262ed25b2cc7e01d86b30abb83f740f3a9272c69a3e2df47ecdfe567978a8c62c550fb7d96a4fee17b37b0c8c77094e7649a6b707f094be9cb27adc31b1837d44a3abb35e62fe67d49b25d66b", 0x0, 0x209}, {&(0x7f0000000040)="0352e377eddc98f5319bdd4ae2327de1c57abb391a3f1816689e302e431217019093c1788f8719417cf96309983215cd0eb1aead865255a190b38c0b05f16e1d", 0x0, 0x4}], 0x0, &(0x7f0000001700)) 00:12:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) [ 143.765362][T10351] loop2: detected capacity change from 0 to 2176 [ 143.786402][T10351] hfsplus: unable to find HFS+ superblock 00:12:36 executing program 2: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:36 executing program 4: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:36 executing program 1: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:12:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:36 executing program 2: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:37 executing program 4: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:37 executing program 1: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:37 executing program 2: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:38 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0xfffffeed) 00:12:38 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1299}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffe00}]) 00:12:38 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000780)="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", 0x209, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)=':', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000040)=""/27, 0x1b, &(0x7f00000001c0)={&(0x7f0000000140)={'wp384-generic\x00'}, &(0x7f0000000180)="ea1f15b4870372ece45429", 0xb}) 00:12:38 executing program 1: epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 00:12:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:38 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000780)="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", 0x209, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)=':', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000040)=""/27, 0x1b, &(0x7f00000001c0)={&(0x7f0000000140)={'wp384-generic\x00'}, &(0x7f0000000180)="ea1f15b4870372ece45429", 0xb}) 00:12:38 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1299}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffe00}]) 00:12:39 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000780)="2b972e6455807552085229b3f505007666d4bc6e7339affe751e53bfe41d105cc51ef6dc249ce6b245808b0103f2e56120df98b141665189ffc86657ab1ae290812b4f73e87b4d43c0db401b02d51e080c8eef337457e111708a31fb22232f88c5c9f91a820ad4c9847b9d7bc319c45513363efd210912c879806f560751b8c786f0013d80dd395b5f70bd88ae8515a71a7effa5334e357cdb3712ff9104b79498946e1b8bd6a00d00000000000000905b9d21170d40245e43b5361928334d40a41fa1f1c4b238af83ce644799061b362cff3928975e75be882f73b271eae8930be3623157ba4ba399e91a31e0a807f0bb39c82281bd7350e7fbe5737a72c2e54a42d1fb8f6f02c22634400a1bcd9152103c006812bf954e0000235a439bdb91281a68154be7dfcc6b722cdbee5a9e44f392eaa3218712bb6d9f835ae8f440217f241b55bbd6866858a5d3a5ec017dfea9fe2c355d903fbf61341e4be5219f82f8bb2f916f3be41c78cb96a7f681424d4634501f185aefe5e23a758dcc86ab42dcc45581cdddd8c90fd9d0ffcad94e1ca8b1c20e70d5b37f799f3f87e47f9bd983d4696467a8448923ea356a633f3d26f94b46f6bc4c920f3c1a05fcf067290d9c70d6d64ae5c766e89e276a8a9b6975811b0fc7a8038497bf57bbb29e0fc29de4f821e10ef8dc6f077063f7cd8ea42663b8da54b398e67345b36f6c6c558fdce5ed669d2c9e5e357a", 0x209, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)=':', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000040)=""/27, 0x1b, &(0x7f00000001c0)={&(0x7f0000000140)={'wp384-generic\x00'}, &(0x7f0000000180)="ea1f15b4870372ece45429", 0xb}) 00:12:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd08000000000000000001e0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x15a7e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x81, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r2}, {0x9, 0x2, 0xc204, 0x46da5312, 0x5, 0x1f, 0x800, 0x7fffffff}, {0x1ff, 0xdf3, 0x5, 0x6}, 0x8001, 0x6e6bb1, 0x2, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3506, 0x4, 0x3, 0x1, 0x0, 0x7}}, 0xe8) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x1591, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) 00:12:39 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1299}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffe00}]) 00:12:44 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0xfffffeed) 00:12:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f00000001c0)="a8c691019919da078a0098d1e0a57db040f762910000f2ffffffff21addee07bee0d6333b5cacd893169b618322ff6602022510153508b5a4496728c2a46e15aed79aeb36a093566e9f8fa32b482ded08e53f137ef2eb6d6cdecfb406cfc97beca3c4a6ab1aa792ab4267947d753252f082be1fd4c3e4e3057038ccacc047af596d249f43dbe39c9ae3ad43472286da028ee43f49c2e2f7aa08c4347a3f9c06fdcb2403d7a02692f8dfbaaffce2f1261b0b1f459808ff56c0ee084955db9d8991dd84e39206cc08d818d8061d2f7e04046119e0b839d9d07e6f91e8e1589cc9578f61c69fd258804de16cb923e7935e00f1efadef208378bcbc00fe5003a656389"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpid() tkill(r2, 0x2f) 00:12:44 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000780)="2b972e6455807552085229b3f505007666d4bc6e7339affe751e53bfe41d105cc51ef6dc249ce6b245808b0103f2e56120df98b141665189ffc86657ab1ae290812b4f73e87b4d43c0db401b02d51e080c8eef337457e111708a31fb22232f88c5c9f91a820ad4c9847b9d7bc319c45513363efd210912c879806f560751b8c786f0013d80dd395b5f70bd88ae8515a71a7effa5334e357cdb3712ff9104b79498946e1b8bd6a00d00000000000000905b9d21170d40245e43b5361928334d40a41fa1f1c4b238af83ce644799061b362cff3928975e75be882f73b271eae8930be3623157ba4ba399e91a31e0a807f0bb39c82281bd7350e7fbe5737a72c2e54a42d1fb8f6f02c22634400a1bcd9152103c006812bf954e0000235a439bdb91281a68154be7dfcc6b722cdbee5a9e44f392eaa3218712bb6d9f835ae8f440217f241b55bbd6866858a5d3a5ec017dfea9fe2c355d903fbf61341e4be5219f82f8bb2f916f3be41c78cb96a7f681424d4634501f185aefe5e23a758dcc86ab42dcc45581cdddd8c90fd9d0ffcad94e1ca8b1c20e70d5b37f799f3f87e47f9bd983d4696467a8448923ea356a633f3d26f94b46f6bc4c920f3c1a05fcf067290d9c70d6d64ae5c766e89e276a8a9b6975811b0fc7a8038497bf57bbb29e0fc29de4f821e10ef8dc6f077063f7cd8ea42663b8da54b398e67345b36f6c6c558fdce5ed669d2c9e5e357a", 0x209, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)=':', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000040)=""/27, 0x1b, &(0x7f00000001c0)={&(0x7f0000000140)={'wp384-generic\x00'}, &(0x7f0000000180)="ea1f15b4870372ece45429", 0xb}) 00:12:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:12:44 executing program 0: r0 = fork() r1 = fork() ioperm(0x0, 0x0, 0x0) migrate_pages(r1, 0x5, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0xffffffffffff9c01) fork() ptrace$getenv(0x4201, 0x0, 0x3, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x81, 0x0) migrate_pages(0x0, 0x0, &(0x7f0000000000), 0x0) r2 = fork() capset(&(0x7f0000000280)={0x0, r2}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000140)=""/14) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 00:12:44 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1299}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffe00}]) [ 152.819049][T10539] mmap: syz-executor.1 (10539) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:12:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpid() tkill(r2, 0x2f) 00:12:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:12:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:12:45 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0xfffffeed) 00:12:45 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2716, 0x0, 0xa04901) 00:12:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:12:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f00000001c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpid() tkill(r2, 0x2f) 00:12:45 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0xfffffeed) [ 153.322078][ T37] audit: type=1804 audit(1615335165.355:11): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/23/bus" dev="sda1" ino=14214 res=1 errno=0 00:12:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 153.460227][ T37] audit: type=1800 audit(1615335165.355:12): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14214 res=0 errno=0 00:12:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2716, 0x0, 0xa04901) 00:12:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:12:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x101, &(0x7f00000001c0)="a8c691019919da078a0098d1e0a57db040f762910000f2ffffffff21addee07bee0d6333b5cacd893169b618322ff6602022510153508b5a4496728c2a46e15aed79aeb36a093566e9f8fa32b482ded08e53f137ef2eb6d6cdecfb406cfc97beca3c4a6ab1aa792ab4267947d753252f082be1fd4c3e4e3057038ccacc047af596d249f43dbe39c9ae3ad43472286da028ee43f49c2e2f7aa08c4347a3f9c06fdcb2403d7a02692f8dfbaaffce2f1261b0b1f459808ff56c0ee084955db9d8991dd84e39206cc08d818d8061d2f7e04046119e0b839d9d07e6f91e8e1589cc9578f61c69fd258804de16cb923e7935e00f1efadef208378bcbc00fe5003a656389"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpid() tkill(r2, 0x2f) [ 153.596053][ T37] audit: type=1804 audit(1615335165.395:13): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/23/bus" dev="sda1" ino=14214 res=1 errno=0 00:12:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a459830a1e94740e06d94342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8cb095ca2295ab04c98a96c6ab88116842ce7f64cc68c1a51a5fd4f116ee673882c22c3cdf321ffaafe3a67796c702fc0d980d60de8d38e3bd5de1bb16ef821f804f87e483ef21e95586e80e8956c4f6d0dcc639a80c9470e14ba3c03d2df0af71cd833ae42eff3fcd234da2efd65ef3eebe56bd95042d7471b08db1094c6acc6f7b0a7b6380"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:12:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a459830a1e94740e06d94342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8cb095ca2295ab04c98a96c6ab88116842ce7f64cc68c1a51a5fd4f116ee673882c22c3cdf321ffaafe3a67796c702fc0d980d60de8d38e3bd5de1bb16ef821f804f87e483ef21e95586e80e8956c4f6d0dcc639a80c9470e14ba3c03d2df0af71cd833ae42eff3fcd234da2efd65ef3eebe56bd95042d7471b08db1094c6acc6f7b0a7b6380"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:12:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2716, 0x0, 0xa04901) [ 153.950684][ T37] audit: type=1804 audit(1615335165.985:14): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/23/bus" dev="sda1" ino=14214 res=1 errno=0 [ 154.051177][ T37] audit: type=1800 audit(1615335165.985:15): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14214 res=0 errno=0 00:12:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2716, 0x0, 0xa04901) 00:12:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) 00:12:46 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x402, 0x0) fork() ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000340)) 00:12:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 154.143311][ T37] audit: type=1804 audit(1615335165.985:16): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/23/bus" dev="sda1" ino=14214 res=1 errno=0 00:12:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:12:46 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) 00:12:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:12:46 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x402, 0x0) fork() ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000340)) [ 154.424490][ T37] audit: type=1804 audit(1615335166.455:17): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/24/bus" dev="sda1" ino=14196 res=1 errno=0 00:12:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) [ 154.545865][ T37] audit: type=1800 audit(1615335166.455:18): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14196 res=0 errno=0 00:12:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) [ 154.699714][ T37] audit: type=1804 audit(1615335166.495:19): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir504515659/syzkaller.0EZgKE/24/bus" dev="sda1" ino=14196 res=1 errno=0 [ 154.869749][ T37] audit: type=1804 audit(1615335166.565:20): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir363121311/syzkaller.OZe6r3/26/bus" dev="sda1" ino=14183 res=1 errno=0 00:12:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:47 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:47 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x402, 0x0) fork() ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000340)) 00:12:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) 00:12:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) 00:12:47 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r1, &(0x7f0000000000)="0121213998aaf000000000000000065219568600000000000000ff7ffeffffff", 0x20) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/106, 0x6a}], 0x1, 0x0, 0x0) 00:12:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = dup(r0) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050300c806023e0001ee41a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 00:12:47 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x402, 0x0) fork() ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000340)) 00:12:47 executing program 2: r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3, 0x0) 00:12:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = dup(r0) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050300c806023e0001ee41a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 00:12:48 executing program 2: r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3, 0x0) 00:12:48 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:48 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) 00:12:48 executing program 2: r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3, 0x0) 00:12:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = dup(r0) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050300c806023e0001ee41a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 00:12:48 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:48 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:48 executing program 2: r0 = fsopen(&(0x7f0000000000)='hfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3, 0x0) 00:12:48 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) 00:12:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = dup(r0) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050300c806023e0001ee41a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed) 00:12:49 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 00:12:49 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) 00:12:49 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) 00:12:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x9, 0xc0000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 00:12:49 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 00:12:49 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) dup3(r0, r1, 0x80000) 00:12:49 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) 00:12:49 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:12:49 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) [ 157.847049][T10730] loop0: detected capacity change from 0 to 131456 00:12:50 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) 00:12:50 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 00:12:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) 00:12:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) [ 158.158487][T10730] EXT4-fs error (device loop0): ext4_fill_super:4942: inode #2: comm syz-executor.0: iget: root inode unallocated [ 158.215838][T10730] EXT4-fs (loop0): get root inode failed 00:12:50 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) [ 158.275611][T10730] EXT4-fs (loop0): mount failed 00:12:50 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct]}}, &(0x7f0000000040)=""/211, 0x3e, 0xd3, 0x8}, 0x20) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x1) pipe(0x0) 00:12:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x9, 0xc0000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 00:12:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) 00:12:50 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 00:12:50 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:50 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x83, 0x80, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0x3ff, r0}, 0x38) 00:12:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x98fc, @dev={0xfe, 0x80, [], 0x27}, 0x80000000}, 0x1c) 00:12:50 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:50 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 158.694323][T10769] loop0: detected capacity change from 0 to 131456 00:12:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) [ 158.835252][T10769] EXT4-fs error (device loop0): ext4_fill_super:4942: inode #2: comm syz-executor.0: iget: root inode unallocated [ 158.873687][T10769] EXT4-fs (loop0): get root inode failed [ 158.911504][T10769] EXT4-fs (loop0): mount failed 00:12:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:51 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x83, 0x80, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0x3ff, r0}, 0x38) 00:12:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) 00:12:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x9, 0xc0000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 00:12:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}) 00:12:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) [ 159.416907][T10812] loop0: detected capacity change from 0 to 131456 [ 159.425764][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 159.425780][ T37] audit: type=1326 audit(1615335171.455:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10806 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x0 00:12:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1, &(0x7f00000062c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:12:51 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) [ 159.539847][T10812] EXT4-fs error (device loop0): ext4_fill_super:4942: inode #2: comm syz-executor.0: iget: root inode unallocated [ 159.596012][T10812] EXT4-fs (loop0): get root inode failed 00:12:51 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x83, 0x80, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0x3ff, r0}, 0x38) [ 159.639354][T10812] EXT4-fs (loop0): mount failed [ 159.710025][T10820] loop1: detected capacity change from 0 to 264192 00:12:51 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') r1 = gettid() tkill(r1, 0x5000000000016) write(r0, &(0x7f0000000100)="0a96", 0x2) 00:12:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x9, 0xc0000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef01", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 00:12:52 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x83, 0x80, 0xf}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0x3ff, r0}, 0x38) [ 160.208660][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.358238][T10849] loop0: detected capacity change from 0 to 131456 [ 160.402631][T10850] loop1: detected capacity change from 0 to 264192 00:12:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) [ 160.463552][T10849] EXT4-fs error (device loop0): ext4_fill_super:4942: inode #2: comm syz-executor.0: iget: root inode unallocated [ 160.490812][T10849] EXT4-fs (loop0): get root inode failed [ 160.503295][T10849] EXT4-fs (loop0): mount failed [ 160.648516][ T8] usb 6-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 160.657612][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.696425][ T8] usb 6-1: config 0 descriptor?? 00:12:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) [ 161.108746][ T8] usb 6-1: Cannot read MAC address [ 161.115020][ T8] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 161.203175][ T8] usb 6-1: USB disconnect, device number 5 [ 161.230169][T10878] loop1: detected capacity change from 0 to 264192 [ 161.848520][ T36] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.238615][ T36] usb 6-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 162.247720][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.283591][ T36] usb 6-1: config 0 descriptor?? 00:12:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:54 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) [ 162.649417][ T36] usb 6-1: Cannot read MAC address [ 162.654760][ T36] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 162.676344][T10908] loop1: detected capacity change from 0 to 264192 [ 162.863683][ T36] usb 6-1: USB disconnect, device number 6 00:12:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) [ 162.980093][T10926] loop2: detected capacity change from 0 to 264192 00:12:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, "c946a50067e1f4b0f92aa184167fbac53cf7d7749645f7e3ca0d728d5f026573836c185620c469fda8cb40f2cda39c1cdf53c86892dbb5129f9f9247bc13761f", "48d73fd66454b0750522d406d9db238eda8ce1381ee1536a8f31394236692fe398768f5576698f1fa8137b5486fa33eb050f515b2a58cc68e63c5fdc56d27e0f", "3d6e941291e4e1b7bb8a5e9d9279d452956817a22069988226aaa743660c74aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) setuid(0xee01) setresuid(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f00018000400edfc0e8000000000070000000000000800010048050000", 0x24) 00:12:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) [ 163.337149][ T36] usb 6-1: new high-speed USB device number 7 using dummy_hcd 00:12:55 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 163.496208][T10944] loop3: detected capacity change from 0 to 264192 [ 163.642845][T10946] loop1: detected capacity change from 0 to 264192 [ 163.742750][T10959] loop2: detected capacity change from 0 to 264192 [ 163.781003][ T36] usb 6-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 00:12:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{0x0}, {0x0}], 0x0, &(0x7f0000000380)) [ 163.790221][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.802805][ T36] usb 6-1: config 0 descriptor?? 00:12:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) [ 164.079288][T10963] tmpfs: Unknown parameter '00000000000000060928' [ 164.112102][T10961] overlayfs: failed to resolve './bus': -2 [ 164.276381][T10958] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 164.353131][T10963] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 164.358859][T10978] loop2: detected capacity change from 0 to 264192 [ 164.369160][T10961] overlayfs: 'file0' not a directory [ 164.387812][T10966] overlayfs: failed to resolve './file1': -2 [ 164.418524][ T36] usb 6-1: Cannot read MAC address [ 164.433964][T10980] tmpfs: Unknown parameter '00000000000000060928' [ 164.442278][T10968] gfs2: not a GFS2 filesystem [ 164.497380][ T36] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 164.558257][ T36] usb 6-1: USB disconnect, device number 7 00:12:56 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) 00:12:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:56 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:12:56 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:12:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{0x0}, {0x0}], 0x0, &(0x7f0000000380)) [ 164.948875][T11000] loop1: detected capacity change from 0 to 264192 [ 165.219370][T11012] overlayfs: overlapping lowerdir path [ 165.226820][T11011] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 165.240435][T11016] loop3: detected capacity change from 0 to 264192 [ 165.254747][T11006] overlayfs: overlapping lowerdir path 00:12:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) [ 165.398894][ T9732] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.464105][T11009] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 165.534405][T11015] gfs2: not a GFS2 filesystem [ 165.542017][T11023] tmpfs: Unknown parameter '00000000000000060928' [ 165.571757][T11012] overlayfs: failed to resolve './file1': -2 00:12:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{0x0}, {0x0}], 0x0, &(0x7f0000000380)) [ 165.702997][T11018] tmpfs: Unknown parameter '00000000000000060928' [ 165.719233][T11027] loop1: detected capacity change from 0 to 264192 [ 165.742371][T11014] overlayfs: './file0' not a directory 00:12:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x82) setrlimit(0xb, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x0, &(0x7f00000003c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000008c0)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x8, &(0x7f0000000800)=[{&(0x7f0000000300)="e2fb9b0ee5aba8783ce2fe7ac18b48ff1f8a75eec1d2f5f156d73da90cfe382e52b5007738b77a2a3ab4c8f7b78a480c947cf1f8ab7d6b7dba918af6461311147cc131f2fa30992a9ac64722aa1cf549fc6e82d164ab9b85f9906c40f82b0f8d44fa79c43f87ce3e339c70f46d10298621d052ab56db3e577f5cc1967db88892c02fb563baa0cf2eac0e97888a73b6f864a833144190d55407b522d0b51c73c470673dba67be4e4d1b6078ffeeb03d82c325571faa3bf73e7d07e01c85347cde6f4cc8aa44c2d83c2e5b15b71b7fc49cd5aae7268b940615cb0c2ef239bc2f9640b9207e035ffe0ed7a682be1b49bcf3a3fd2c549d96bb", 0xf7, 0x1f}, {&(0x7f0000000400)="1cba4a314e48ec1c9dd5c6a6a6bd298b317d51effd707c200a97a7ad044748ede371bfc8fc114b2ce898bd3edb6b4a21d2b59b758fba15630cf23e7dd704e64421b4c4810c0cb5", 0x47, 0xfffffffffffffffb}, {&(0x7f0000000480)="83b3e907aa547e669c89", 0xa, 0x101}, {&(0x7f00000004c0)="969602705a6a4e6bf8766c3ebcb57f287cf6722bab306120af40cf147c3557d84b99ec1e8ab72b2ece404326eaca57c0dcc056b9d5e41a68cd39e66c9f2b14f249dc204dcda212a7c2e96a508264a626a38727f43516946cf68dc77356c712738f839dcc6b939093a6b7a5a3eff9e5f2bd8fa6118392684684b3d3eb481d32471a650737a89735f85cc12c783fc74003be4998c453ca53ae46daa06b7f83", 0x9e, 0x10c331f6}, {&(0x7f00000005c0)="ea434229ed5499aa1c608e73d028ceece1342a973026f77f4ff7ed55fdf7a37f88a7c98e9f9c2e9e3742be64c824e5b1f31297d0cfc455265ae2872272a1a6f384ac37b3c40207a89d280c9e1abd8aa5072b9deb5dad69e0bca9265e676addec32ec01dcd20a532857b67e1469bee0fc0c6b0d1e586964484667522f90289eedf3591337cd0d49c587c1eb4735e546d0175d902b17155dfc20f64b3476e551b287816f6574880ab9b6a7a9d65a07dba06aede7638d2a779ee5529db7", 0xbc, 0x3}, {&(0x7f00000006c0)="73609fddd555310a8e0af1e84684b1e15f86235843a7c0d81a9adba0d7cf", 0x1e, 0xb75f}, {0x0, 0x0, 0x10001}, {&(0x7f00000007c0)="a320", 0x2, 0x4}], 0x4000, &(0x7f0000000900)={[{'+.['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xc, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xd9, 0xfffeffff}, 0x0) 00:12:57 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 165.789058][ T9732] usb 6-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 165.844121][ T9732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:12:57 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 165.922570][ T9732] usb 6-1: config 0 descriptor?? 00:12:58 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x2e9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e9}], 0x0, &(0x7f0000010300)) [ 166.265091][T11044] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 166.265854][T11038] gfs2: not a GFS2 filesystem [ 166.303969][ T9732] usb 6-1: Cannot read MAC address [ 166.311456][ T9732] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 166.333726][T11037] overlayfs: overlapping lowerdir path [ 166.393879][T11049] loop3: detected capacity change from 0 to 264192 [ 166.447537][ T9732] usb 6-1: USB disconnect, device number 8 [ 166.556214][T11056] tmpfs: Unknown parameter '00000000000000060928' [ 166.576958][T11053] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 166.615115][T11044] overlayfs: './file0' not a directory [ 166.703470][T11047] overlayfs: overlapping lowerdir path 00:12:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{0x0}, {0x0}], 0x0, &(0x7f0000000380)) 00:12:58 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:12:58 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000001140)=[{0x0}], 0x0, 0x0) 00:12:58 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) [ 166.903315][T11047] tmpfs: Unknown parameter '00000000000000060928' [ 166.951909][T11066] gfs2: not a GFS2 filesystem 00:12:59 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:12:59 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus/file0\x00', &(0x7f0000000540)='overlay\x00', 0x4000, &(0x7f0000000740)={[{@index_on='index=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, 'tmpfs\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@obj_role={'obj_role', 0x3d, '^'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) rename(&(0x7f0000000700)='./file2\x00', &(0x7f0000000f00)='./bus/file0\x00') mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs\x00', 0x10000, &(0x7f0000000a80)='tmpfs\x00P\x91\xaf?:;\xd3\xc4:\x1e\x89\xcf\xbeZ\xa4\x03g\xda\x8fT-y\xa0E7\xff') lsetxattr$trusted_overlay_upper(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='trusted.overlay.upper\x00', &(0x7f0000000840)={0x0, 0xfb, 0x5f, 0x4, 0x6, "7637ca8d6e899582acfaeeb6d4d1f27a", "b2e4fa4791290ce30694ba029561eb603fbb7c160cfbca3dc126b25d5e439769f1e00ff74a61e201e78c08c606a58542849434410b41d11589815d8476e964f871d0a943e15f7759de51"}, 0x5f, 0x2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x60, 0x10e, 0x0, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda55402"}, {0x10, 0x111, 0x52}, {0x10, 0x3a, 0x7}], 0x80}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0xee00, @ANYBLOB='\x00']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:12:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) [ 167.297852][ T9602] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 167.355963][T11084] overlayfs: overlapping lowerdir path [ 167.364538][T11087] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. 00:12:59 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 00:12:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) [ 167.557029][T11088] overlayfs: overlapping lowerdir path [ 167.570187][T11091] ntfs: (device nullb0): parse_options(): Unrecognized mount option tmpfs. [ 167.604036][T11087] tmpfs: Unknown parameter '00000000000000060928' 00:12:59 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) [ 167.718074][ T9602] usb 6-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 167.760117][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.786568][T11099] overlayfs: failed to resolve './file0': -2 [ 167.819572][T11102] tmpfs: Unknown parameter '00000000000000060928' [ 167.856459][ T9602] usb 6-1: config 0 descriptor?? 00:12:59 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 167.877513][T11091] overlayfs: './file0' not a directory [ 168.046838][T11084] overlayfs: './file0' not a directory 00:13:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:00 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 168.244228][ T9602] usb 6-1: Cannot read MAC address [ 168.254664][ T9602] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 00:13:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) [ 168.336314][ T9602] usb 6-1: USB disconnect, device number 9 00:13:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:00 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) 00:13:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) 00:13:01 executing program 5: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) 00:13:01 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) [ 169.406349][T11144] overlayfs: overlapping lowerdir path 00:13:01 executing program 5: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) 00:13:02 executing program 5: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:02 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:02 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fe0) 00:13:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:02 executing program 5: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0xc6, 0x40, 0xfe, 0x0, 0x1, 0xb09, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xae9, 0xe90}, 0x0, 0x3f, 0x0, 0x3, 0x7, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x80, 0x0, 0x1, 0x1f, 0x0, 0x0, 0xc0000, 0x1b, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8}, 0x16104, 0x80, 0x0, 0x3, 0x9, 0x0, 0x97f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = open(0x0, 0x141042, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x66) connect$inet(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x70, 0x8, 0xa9, 0xb6, 0x3, 0x0, 0xfffffffffffffeff, 0x40000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x1, 0x3, 0x5, 0x51, 0x5, 0x3f4b}, r1, 0xe, 0xffffffffffffffff, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000bfe6e807fd835b0000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0) 00:13:03 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:04 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000400)=0x22) sched_getscheduler(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x1}) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x28, 0x81, 0x0, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}], {0x10, 0x2}}, 0x34, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/241, 0xffd1) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) 00:13:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da000001000000f50000000008001200020001000000000000001d0030006c5465ba009f7eae0200dd00adb202000000001539da0000000000000001ec0014bb0000000000000023dbcd39a4030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 00:13:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 00:13:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)={0x60, r1, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @from_mac=@device_b, @device_a, @broadcast}}, {@type10={{}, {}, @random="4e1a951fa72b", @broadcast, @random="7b0e830ed1d0"}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x0) 00:13:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="0b7b77a69a3af2b286a8e3334f7a9667", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5368ad3c4897287ab0e48e00cb9d7a1c", 0x10) 00:13:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xd0, 0x0, &(0x7f0000000000)) 00:13:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da000001000000f50000000008001200020001000000000000001d0030006c5465ba009f7eae0200dd00adb202000000001539da0000000000000001ec0014bb0000000000000023dbcd39a4030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 00:13:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7a000000, 0x0, 0x0) 00:13:04 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000003d40)='IPVS\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x3, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001480)=""/47, 0x2f}], 0x3) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x10400) 00:13:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da000001000000f50000000008001200020001000000000000001d0030006c5465ba009f7eae0200dd00adb202000000001539da0000000000000001ec0014bb0000000000000023dbcd39a4030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 00:13:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="0b7b77a69a3af2b286a8e3334f7a9667", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5368ad3c4897287ab0e48e00cb9d7a1c", 0x10) 00:13:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xd0, 0x0, &(0x7f0000000000)) [ 172.793145][ T37] audit: type=1326 audit(1615335184.826:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x7ffc0000 [ 172.875970][ T37] audit: type=1326 audit(1615335184.826:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=298 compat=0 ip=0x465f69 code=0x7ffc0000 00:13:05 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000003d40)='IPVS\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x3, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001480)=""/47, 0x2f}], 0x3) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x10400) 00:13:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xd0, 0x0, &(0x7f0000000000)) [ 172.920038][T11234] loop0: detected capacity change from 0 to 264192 [ 173.001126][ T37] audit: type=1326 audit(1615335184.836:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x465f69 code=0x7ffc0000 00:13:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="0b7b77a69a3af2b286a8e3334f7a9667", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5368ad3c4897287ab0e48e00cb9d7a1c", 0x10) 00:13:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da000001000000f50000000008001200020001000000000000001d0030006c5465ba009f7eae0200dd00adb202000000001539da0000000000000001ec0014bb0000000000000023dbcd39a4030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 00:13:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xd0, 0x0, &(0x7f0000000000)) [ 173.225385][ T37] audit: type=1326 audit(1615335184.836:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x465f69 code=0x7ffc0000 00:13:05 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 00:13:05 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000003d40)='IPVS\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x3, 0x2) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001480)=""/47, 0x2f}], 0x3) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x10400) [ 173.284596][ T37] audit: type=1326 audit(1615335184.846:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=77 compat=0 ip=0x465f27 code=0x7ffc0000 [ 173.446127][ T37] audit: type=1326 audit(1615335184.876:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x419554 code=0x7ffc0000 [ 173.608940][T11234] ================================================================== [ 173.617489][T11234] BUG: KASAN: use-after-free in disk_part_iter_next+0x49d/0x530 [ 173.625149][T11234] Read of size 8 at addr ffff888066cb5068 by task syz-executor.0/11234 [ 173.633474][T11234] [ 173.635793][T11234] CPU: 1 PID: 11234 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 [ 173.644566][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.654616][T11234] Call Trace: [ 173.657889][T11234] dump_stack+0x141/0x1d7 [ 173.662232][T11234] ? disk_part_iter_next+0x49d/0x530 [ 173.667514][T11234] print_address_description.constprop.0.cold+0x5b/0x2c6 [ 173.674534][T11234] ? disk_part_iter_next+0x49d/0x530 [ 173.679815][T11234] ? disk_part_iter_next+0x49d/0x530 [ 173.685095][T11234] kasan_report.cold+0x7c/0xd8 [ 173.689858][T11234] ? disk_part_iter_next+0x49d/0x530 [ 173.695145][T11234] disk_part_iter_next+0x49d/0x530 [ 173.700269][T11234] ? disk_part_iter_init+0xe0/0xe0 [ 173.705377][T11234] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 173.711703][T11234] ? filemap_check_errors+0xa5/0x150 [ 173.716999][T11234] ? filemap_write_and_wait_range+0x14d/0x1c0 [ 173.723062][T11234] blk_drop_partitions+0x10a/0x180 [ 173.728170][T11234] ? bdev_resize_partition+0x200/0x200 [ 173.733746][T11234] bdev_disk_changed+0x238/0x430 [ 173.738692][T11234] __loop_clr_fd+0xc7c/0xff0 [ 173.743285][T11234] lo_ioctl+0x3b9/0x1620 [ 173.747535][T11234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 173.754049][T11234] ? loop_set_status_old+0x250/0x250 [ 173.759341][T11234] ? avc_ss_reset+0x170/0x170 [ 173.764039][T11234] ? trace_hardirqs_on+0x38/0x1c0 [ 173.769063][T11234] ? kfree+0x131/0x2b0 [ 173.773133][T11234] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 173.779460][T11234] ? tomoyo_path_number_perm+0x24e/0x590 [ 173.785177][T11234] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 173.791012][T11234] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 173.796917][T11234] ? blkdev_common_ioctl+0x119/0x17e0 [ 173.802288][T11234] ? blk_ioctl_discard+0x2e0/0x2e0 [ 173.807409][T11234] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 173.813297][T11234] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 173.819537][T11234] ? do_vfs_ioctl+0x27d/0x1090 [ 173.824299][T11234] ? generic_block_fiemap+0x60/0x60 [ 173.829499][T11234] ? selinux_inode_getsecctx+0x90/0x90 [ 173.834978][T11234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 173.841302][T11234] ? loop_set_status_old+0x250/0x250 [ 173.846590][T11234] blkdev_ioctl+0x2a1/0x6d0 [ 173.851102][T11234] ? blkdev_common_ioctl+0x17e0/0x17e0 [ 173.856988][T11234] ? __fget_files+0x288/0x3d0 [ 173.861663][T11234] block_ioctl+0xf9/0x140 [ 173.865987][T11234] ? blkdev_read_iter+0x180/0x180 [ 173.871114][T11234] __x64_sys_ioctl+0x193/0x200 [ 173.875875][T11234] do_syscall_64+0x2d/0x70 [ 173.880314][T11234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.887256][T11234] RIP: 0033:0x465d27 [ 173.891148][T11234] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 4d 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.910839][T11234] RSP: 002b:00007fafff8bfef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.919251][T11234] RAX: ffffffffffffffda RBX: 00007fafff8bff40 RCX: 0000000000465d27 [ 173.927309][T11234] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 173.935365][T11234] RBP: 00007fafff8c06bc R08: 0000000000000001 R09: 00007fafff8bfd90 [ 173.945158][T11234] R10: 00007fafff8bfc47 R11: 0000000000000246 R12: 0000000000000008 [ 173.953130][T11234] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fafff8bff80 [ 173.961204][T11234] [ 173.963519][T11234] Allocated by task 10137: [ 173.968007][T11234] kasan_save_stack+0x1b/0x40 [ 173.972685][T11234] __kasan_slab_alloc+0x73/0x90 [ 173.977540][T11234] kmem_cache_alloc+0x1c8/0x500 [ 173.982398][T11234] bdev_alloc_inode+0x18/0x80 [ 173.987074][T11234] alloc_inode+0x61/0x230 [ 173.991429][T11234] new_inode+0x27/0x2f0 [ 173.995603][T11234] bdev_alloc+0x20/0x2f0 [ 173.999840][T11234] add_partition+0x1ab/0x880 [ 174.004443][T11234] bdev_add_partition+0xb6/0x130 [ 174.009391][T11234] blkpg_do_ioctl+0x2d0/0x340 [ 174.014066][T11234] blkdev_ioctl+0x577/0x6d0 [ 174.018568][T11234] block_ioctl+0xf9/0x140 [ 174.022900][T11234] __x64_sys_ioctl+0x193/0x200 [ 174.027667][T11234] do_syscall_64+0x2d/0x70 [ 174.032083][T11234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 174.037991][T11234] [ 174.040304][T11234] Freed by task 37: [ 174.044097][T11234] kasan_save_stack+0x1b/0x40 [ 174.049119][T11234] kasan_set_track+0x1c/0x30 [ 174.053707][T11234] kasan_set_free_info+0x20/0x30 [ 174.058638][T11234] __kasan_slab_free+0xc7/0x100 [ 174.064006][T11234] kmem_cache_free+0x6d/0x1f0 [ 174.068676][T11234] i_callback+0x3f/0x70 [ 174.072826][T11234] rcu_core+0x74a/0x12f0 [ 174.077070][T11234] __do_softirq+0x29b/0x9f6 [ 174.081570][T11234] [ 174.083881][T11234] Last potentially related work creation: [ 174.089583][T11234] kasan_save_stack+0x1b/0x40 [ 174.094347][T11234] kasan_record_aux_stack+0xa4/0xd0 [ 174.099550][T11234] call_rcu+0xb1/0x740 [ 174.103622][T11234] destroy_inode+0x129/0x1b0 [ 174.108204][T11234] iput.part.0+0x57e/0x810 [ 174.112703][T11234] iput+0x58/0x70 [ 174.116329][T11234] disk_part_iter_next+0x9a/0x530 [ 174.121352][T11234] blk_drop_partitions+0x10a/0x180 [ 174.126471][T11234] bdev_disk_changed+0x238/0x430 [ 174.131411][T11234] loop_reread_partitions+0x29/0x50 [ 174.136612][T11234] loop_set_status+0x704/0x1050 [ 174.141480][T11234] lo_ioctl+0x4ca/0x1620 [ 174.145720][T11234] blkdev_ioctl+0x2a1/0x6d0 [ 174.150213][T11234] block_ioctl+0xf9/0x140 [ 174.154534][T11234] __x64_sys_ioctl+0x193/0x200 [ 174.159294][T11234] do_syscall_64+0x2d/0x70 [ 174.163706][T11234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 174.169593][T11234] [ 174.171904][T11234] The buggy address belongs to the object at ffff888066cb5040 [ 174.171904][T11234] which belongs to the cache bdev_cache of size 2792 [ 174.186214][T11234] The buggy address is located 40 bytes inside of [ 174.186214][T11234] 2792-byte region [ffff888066cb5040, ffff888066cb5b28) [ 174.199485][T11234] The buggy address belongs to the page: [ 174.205114][T11234] page:00000000812fa72a refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888066cb5fff pfn:0x66cb5 [ 174.216565][T11234] flags: 0xfff00000000200(slab) [ 174.221418][T11234] raw: 00fff00000000200 ffffea00017c6588 ffffea00017cf4c8 ffff888140055300 [ 174.229995][T11234] raw: ffff888066cb5fff ffff888066cb5040 0000000100000001 0000000000000000 [ 174.238563][T11234] page dumped because: kasan: bad access detected [ 174.245044][T11234] [ 174.247621][T11234] Memory state around the buggy address: [ 174.253236][T11234] ffff888066cb4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.265887][T11234] ffff888066cb4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.273960][T11234] >ffff888066cb5000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 174.282006][T11234] ^ [ 174.289533][T11234] ffff888066cb5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.297587][T11234] ffff888066cb5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.305656][T11234] ================================================================== [ 174.313700][T11234] Disabling lock debugging due to kernel taint [ 174.369717][ T37] audit: type=1326 audit(1615335184.896:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x465d27 code=0x7ffc0000 [ 174.395135][T11234] Kernel panic - not syncing: panic_on_warn set ... [ 174.401749][T11234] CPU: 0 PID: 11234 Comm: syz-executor.0 Tainted: G B 5.12.0-rc2-syzkaller #0 [ 174.411914][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.417272][ T37] audit: type=1326 audit(1615335185.006:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x465d27 code=0x7ffc0000 [ 174.421970][T11234] Call Trace: [ 174.421979][T11234] dump_stack+0x141/0x1d7 [ 174.453349][T11234] panic+0x306/0x73d [ 174.457266][T11234] ? __warn_printk+0xf3/0xf3 [ 174.461872][T11234] ? preempt_schedule_common+0x59/0xc0 [ 174.462463][ T37] audit: type=1326 audit(1615335185.126:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x465d27 code=0x7ffc0000 [ 174.467339][T11234] ? disk_part_iter_next+0x49d/0x530 [ 174.467365][T11234] ? preempt_schedule_thunk+0x16/0x18 [ 174.491559][ T37] audit: type=1326 audit(1615335185.576:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=4 compat=0 ip=0x464f66 code=0x7ffc0000 [ 174.496405][T11234] ? trace_hardirqs_on+0x38/0x1c0 [ 174.530574][T11234] ? trace_hardirqs_on+0x51/0x1c0 [ 174.535599][T11234] ? disk_part_iter_next+0x49d/0x530 [ 174.541438][T11234] ? disk_part_iter_next+0x49d/0x530 [ 174.546728][T11234] end_report.cold+0x5a/0x5a [ 174.551354][T11234] kasan_report.cold+0x6a/0xd8 [ 174.556109][T11234] ? disk_part_iter_next+0x49d/0x530 [ 174.561396][T11234] disk_part_iter_next+0x49d/0x530 [ 174.566523][T11234] ? disk_part_iter_init+0xe0/0xe0 [ 174.571618][T11234] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 174.577845][T11234] ? filemap_check_errors+0xa5/0x150 [ 174.583121][T11234] ? filemap_write_and_wait_range+0x14d/0x1c0 [ 174.589378][T11234] blk_drop_partitions+0x10a/0x180 [ 174.594544][T11234] ? bdev_resize_partition+0x200/0x200 [ 174.600009][T11234] bdev_disk_changed+0x238/0x430 [ 174.605018][T11234] __loop_clr_fd+0xc7c/0xff0 [ 174.609604][T11234] lo_ioctl+0x3b9/0x1620 [ 174.613837][T11234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 174.620066][T11234] ? loop_set_status_old+0x250/0x250 [ 174.625342][T11234] ? avc_ss_reset+0x170/0x170 [ 174.630021][T11234] ? trace_hardirqs_on+0x38/0x1c0 [ 174.635183][T11234] ? kfree+0x131/0x2b0 [ 174.639247][T11234] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 174.645494][T11234] ? tomoyo_path_number_perm+0x24e/0x590 [ 174.651120][T11234] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 174.657225][T11234] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 174.663289][T11234] ? blkdev_common_ioctl+0x119/0x17e0 [ 174.668668][T11234] ? blk_ioctl_discard+0x2e0/0x2e0 [ 174.673764][T11234] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 174.679744][T11234] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 174.686016][T11234] ? do_vfs_ioctl+0x27d/0x1090 [ 174.690968][T11234] ? generic_block_fiemap+0x60/0x60 [ 174.696270][T11234] ? selinux_inode_getsecctx+0x90/0x90 [ 174.701740][T11234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 174.707997][T11234] ? loop_set_status_old+0x250/0x250 [ 174.713279][T11234] blkdev_ioctl+0x2a1/0x6d0 [ 174.717764][T11234] ? blkdev_common_ioctl+0x17e0/0x17e0 [ 174.723268][T11234] ? __fget_files+0x288/0x3d0 [ 174.727975][T11234] block_ioctl+0xf9/0x140 [ 174.732297][T11234] ? blkdev_read_iter+0x180/0x180 [ 174.737417][T11234] __x64_sys_ioctl+0x193/0x200 [ 174.742214][T11234] do_syscall_64+0x2d/0x70 [ 174.746621][T11234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 174.752661][T11234] RIP: 0033:0x465d27 [ 174.756558][T11234] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 4d 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.776348][T11234] RSP: 002b:00007fafff8bfef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.784768][T11234] RAX: ffffffffffffffda RBX: 00007fafff8bff40 RCX: 0000000000465d27 [ 174.792727][T11234] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 174.800699][T11234] RBP: 00007fafff8c06bc R08: 0000000000000001 R09: 00007fafff8bfd90 [ 174.808670][T11234] R10: 00007fafff8bfc47 R11: 0000000000000246 R12: 0000000000000008 [ 174.816646][T11234] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fafff8bff80 [ 174.825379][T11234] Kernel Offset: disabled [ 174.829700][T11234] Rebooting in 86400 seconds..