ffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2754.306372][ T8731] usb 4-1: config 0 descriptor?? 20:27:38 executing program 2: 20:27:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2001, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x21e8c2, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2754.803400][ T8731] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 2754.826454][ T9472] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2754.856276][ T8731] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 2754.955076][ T9472] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2754.961877][ T9472] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2755.009752][ T8731] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2755.054565][ T9472] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2755.077314][ T9472] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2755.091691][ T9472] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2755.099118][ T9472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2756.817300][ T9495] usb 4-1: string descriptor 0 read error: -2 [ 2757.729539][T26602] usb 4-1: reset high-speed USB device number 14 using dummy_hcd 20:27:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:27:42 executing program 1: 20:27:42 executing program 5: 20:27:42 executing program 2: 20:27:42 executing program 0: 20:27:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2758.308197][T26602] usb 4-1: device descriptor read/all, error -71 [ 2758.632912][ T9514] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:27:42 executing program 2: 20:27:42 executing program 1: [ 2758.820563][ T9514] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2758.827132][ T9514] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2758.937210][ T9514] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2758.961128][ T9514] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2758.975457][ T9514] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2758.982443][ T9514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:27:43 executing program 0: 20:27:43 executing program 5: 20:27:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2759.247134][T26602] usb 4-1: reset high-speed USB device number 14 using dummy_hcd 20:27:43 executing program 1: [ 2760.059985][ T9529] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2760.076253][ T9529] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2760.083444][ T9529] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2760.109495][ T9529] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2760.129225][ T9529] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2760.143753][ T9529] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2760.150672][ T9529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:27:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:27:46 executing program 2: 20:27:46 executing program 0: 20:27:46 executing program 5: 20:27:46 executing program 1: 20:27:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2761.967739][ T8861] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 2762.175358][ T9543] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:27:46 executing program 0: 20:27:46 executing program 2: [ 2762.353156][ T9543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2762.359957][ T9543] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:27:46 executing program 5: [ 2762.521347][ T9543] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:27:46 executing program 1: [ 2762.587413][ T9543] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2762.602072][ T9543] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2762.609039][ T9543] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2762.718399][ T8861] usb 4-1: device descriptor read/64, error -71 20:27:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:47 executing program 0: [ 2763.478476][ T9560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2763.516390][ T9560] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2763.523326][ T9560] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2763.662328][ T9560] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2763.683902][ T9560] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2763.698262][ T9560] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2763.705032][ T9560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:27:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:27:49 executing program 2: 20:27:49 executing program 5: 20:27:49 executing program 1: 20:27:49 executing program 0: 20:27:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:49 executing program 1: 20:27:49 executing program 5: 20:27:50 executing program 2: 20:27:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:50 executing program 0: 20:27:50 executing program 1: [ 2766.309224][ T8861] usb 4-1: reset high-speed USB device number 14 using dummy_hcd 20:27:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:27:52 executing program 5: 20:27:52 executing program 0: 20:27:52 executing program 2: 20:27:52 executing program 1: 20:27:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:53 executing program 5: mkdir(&(0x7f0000002740)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x10140, 0x11) 20:27:53 executing program 0: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 20:27:53 executing program 2: setuid(0xee00) mlockall(0x1) 20:27:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1819c2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x80) 20:27:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2769.497757][ T8731] usb 4-1: reset high-speed USB device number 14 using dummy_hcd 20:27:53 executing program 5: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 20:27:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:27:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181240, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20) 20:27:56 executing program 1: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0/file0\x00', 0x28) 20:27:56 executing program 0: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.selinux\x00', 0x0, 0x0, 0x0) 20:27:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x18df41, 0x84) [ 2772.197897][T26602] usb 4-1: USB disconnect, device number 14 [ 2772.461555][ T27] audit: type=1400 audit(1603052876.537:52): avc: denied { mac_admin } for pid=9659 comm="syz-executor.0" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 20:27:56 executing program 5: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:27:56 executing program 2: mkdir(&(0x7f0000002740)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202, 0x0) 20:27:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:27:56 executing program 0: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'os2.', '/dev/null\x00'}) 20:27:56 executing program 1: mkdir(&(0x7f0000002740)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3f4ff8e7bff2da0f) [ 2773.093016][T26620] usb 4-1: new high-speed USB device number 15 using dummy_hcd 20:27:57 executing program 5: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') setxattr$security_ima(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2773.490433][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2773.502858][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2773.514247][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2773.524326][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2773.537604][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2773.546812][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2773.866028][T26620] usb 4-1: config 0 descriptor?? [ 2774.353729][T26620] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 2774.379998][T26620] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 2774.419020][T26620] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 20:28:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="000394000000"], 0x0, 0x0}, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:00 executing program 2: setuid(0xee00) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) 20:28:00 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x54b040, 0x38) 20:28:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000740), 0x0, 0x8040) 20:28:00 executing program 5: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2776.292399][ T8861] usb 4-1: USB disconnect, device number 15 20:28:00 executing program 5: [ 2776.654626][ T9735] EXT4-fs (loop4): bad geometry: block count 54 exceeds size of device (11 blocks) 20:28:00 executing program 2: 20:28:00 executing program 1: 20:28:00 executing program 0: 20:28:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:01 executing program 2: [ 2777.220103][T26620] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2777.598310][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2777.609490][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2777.620785][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2777.632126][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2777.645681][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2777.654996][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.671481][ T9750] EXT4-fs (loop4): bad geometry: block count 54 exceeds size of device (11 blocks) [ 2777.869389][T26620] usb 4-1: config 0 descriptor?? [ 2778.332228][T26620] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 2778.346651][T26620] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 2778.385726][T26620] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 20:28:04 executing program 1: 20:28:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:04 executing program 5: 20:28:04 executing program 0: 20:28:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:04 executing program 2: [ 2780.319581][ T4160] usb 4-1: USB disconnect, device number 16 [ 2780.605634][ T9789] EXT4-fs (loop4): bad geometry: block count 54 exceeds size of device (11 blocks) 20:28:04 executing program 2: 20:28:04 executing program 5: 20:28:05 executing program 1: 20:28:05 executing program 0: 20:28:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000040)) [ 2781.306364][T26620] usb 4-1: new high-speed USB device number 17 using dummy_hcd 20:28:05 executing program 2: 20:28:05 executing program 5: [ 2781.712338][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2781.724664][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2781.736112][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2781.746181][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2781.759428][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2781.768682][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2781.789510][T26620] usb 4-1: config 0 descriptor?? [ 2782.276906][T26620] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 2782.323437][T26620] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 2782.383782][T26620] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2783.937916][ T9820] usb 4-1: string descriptor 0 read error: -2 20:28:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:08 executing program 1: 20:28:08 executing program 0: 20:28:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000040)) 20:28:08 executing program 5: 20:28:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x8000, 0x2}) 20:28:08 executing program 5: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:28:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x81, &(0x7f0000000040)) 20:28:08 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 20:28:08 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0x80000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xfc}, {0x0, 0x0, 0x1}, {0x6, 0x2, 0xc4}]}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000140)="eb66e32088a492b70203e4fe56b856595b7fffc8b088e892e3f0156a211e24eb71df0ebe62a2da4ba5fba15d5d55668db1465d7755d09c7573e9bdaada1fed0768747b0cb75ccff605446bc13eca20cfb2dfb08edc40c6e0468d7dc525536f5b967e1d6c86d48e04bae0995c2c2c29c828ad38ba2c769843d7243b6fcc8dab83787734de9165", &(0x7f0000000080)=""/26, &(0x7f0000000200)="98404de7334402b5e0fc23b4b90b197b75269da3b15b789cad8e8a36605550ca0d647d2a7e152a633903acf594b7c8d802822c7ab40ac80b0adbefda83fd2f7e4a7d928b3aa77501a82238b2b19a4a88e06774dad51098f526bb13c11ac710ec9c103f68ae5a223fed3dfbee01dc700d1ac0e2e000b785102219c2c0222855747646543230640130e768d612ae1e6d3277c5192f78eeca6dfe13deddfcb139", &(0x7f00000002c0)="461885a29e8d244c65a33fbc3a575075d09190dfad53c81aa7b73e0888e0779d45e9855ecc8c9021ca62314e5bfa2ba97ee61092c1c255e4b7f928d3391e3e256f34bc73b9268434e722bef7fdea1c060253e9cfa3b46b0aee1af4ba81c231e426072b961efb9a79cd143a259f6a4bab129d0333b75fa938b31c56765c6dd685e63bd1ece5837fc3936e1e10b9ef9e5c5b2f37b352c7cd560aa693128343717e672e43454e921164aa7bfb71d365011afc8fcf10e4b1e70ba456a8995868ded99ef22ff593a9cd06e751f43d4d698270ca6320ccf90423d8a48d9ca73fb329d0739096099a4e143472446ae6c50dea0b", 0x101, r1, 0x4}, 0x38) 20:28:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="c5", 0x1, r0) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, r1) [ 2784.867785][ T8731] usb 4-1: reset high-speed USB device number 17 using dummy_hcd 20:28:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000040)) [ 2785.466336][ T9855] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2785.493968][ T9855] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2785.500698][ T9855] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2785.527714][ T9855] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2785.542175][ T9855] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2785.549130][ T9855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2786.022164][ T8861] usb 4-1: USB disconnect, device number 17 20:28:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:10 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 20:28:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x400000000000034, 0x0) 20:28:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000080)=0xffffffffffffffa5) 20:28:10 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x2a2c82, 0x0) 20:28:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000040)) [ 2786.806490][ T9882] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2786.932709][ T9882] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2786.939477][ T9882] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:11 executing program 2: futimesat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}) 20:28:11 executing program 5: perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:28:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) [ 2787.072732][ T9882] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2787.087524][ T9882] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2787.094292][ T9882] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:11 executing program 1: r0 = creat(&(0x7f0000003780)='./file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) [ 2787.238493][ T8731] usb 4-1: new high-speed USB device number 18 using dummy_hcd 20:28:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000040)) [ 2787.600419][ T8731] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2787.611577][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2787.623986][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2787.636373][ T8731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2787.650043][ T8731] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2787.659448][ T8731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:28:11 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000003600)='/proc/thread-self\x00', 0x0, 0x0) [ 2788.031442][ T8731] usb 4-1: config 0 descriptor?? [ 2788.155411][ T9907] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2788.192761][ T9907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2788.199470][ T9907] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2788.230827][ T9907] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2788.247991][ T9907] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2788.254793][ T9907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2788.525131][ T8731] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 2788.557958][ T8731] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 2788.587693][ T8731] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2789.747722][ T9890] usb 4-1: string descriptor 0 read error: -2 20:28:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:14 executing program 2: creat(&(0x7f0000003780)='./file0\x00', 0xc) 20:28:14 executing program 5: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 20:28:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:14 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 20:28:14 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 2790.550498][ T9933] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:14 executing program 2: [ 2790.590914][ T8861] usb 4-1: USB disconnect, device number 18 [ 2790.752873][ T9933] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2790.759996][ T9933] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:14 executing program 1: [ 2790.979292][ T9933] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2790.993683][ T9933] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2791.001114][ T9933] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:15 executing program 5: 20:28:15 executing program 0: [ 2791.167502][T26620] usb 4-1: new high-speed USB device number 19 using dummy_hcd 20:28:15 executing program 2: 20:28:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x1600}], 0x81, &(0x7f0000000040)) [ 2791.562640][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2791.573787][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2791.585524][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2791.595573][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2791.608840][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2791.618133][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.829256][T26620] usb 4-1: config 0 descriptor?? [ 2792.030411][ T9968] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2792.078285][ T9968] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2792.084933][ T9968] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2792.110042][ T9968] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2792.124495][ T9968] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2792.131482][ T9968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2792.397513][T26620] usbhid 4-1:0.0: can't add hid device: -71 [ 2792.405362][T26620] usbhid: probe of 4-1:0.0 failed with error -71 [ 2792.422301][T26620] usb 4-1: USB disconnect, device number 19 20:28:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:16 executing program 1: 20:28:16 executing program 5: 20:28:16 executing program 2: 20:28:16 executing program 0: 20:28:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x1600}], 0x81, &(0x7f0000000040)) [ 2793.124449][ T9990] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2793.342559][ T9990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2793.349450][ T9990] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:17 executing program 0: 20:28:17 executing program 5: [ 2793.540341][T26620] usb 4-1: new high-speed USB device number 20 using dummy_hcd 20:28:17 executing program 1: [ 2793.594421][ T9990] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2793.610342][ T9990] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2793.617433][ T9990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:17 executing program 2: r0 = socket(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) [ 2793.929102][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2793.940194][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2793.951435][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2793.961555][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2793.974913][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2793.985470][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:28:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x2000da, 0xeb) [ 2794.326257][T26620] usb 4-1: config 0 descriptor?? [ 2794.654199][T10009] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2794.678235][T10009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2794.684749][T10009] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2794.703149][T10009] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2794.717506][T10009] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2794.724278][T10009] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2794.867572][T26620] usbhid 4-1:0.0: can't add hid device: -71 [ 2794.874077][T26620] usbhid: probe of 4-1:0.0 failed with error -71 [ 2794.938998][T26620] usb 4-1: USB disconnect, device number 20 20:28:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:19 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0xd1000432) 20:28:19 executing program 0: lstat(&(0x7f00000001c0)='./file0\x00', 0x0) 20:28:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x1) 20:28:19 executing program 5: pselect6(0x45, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x100000000}, 0x0, 0x0) 20:28:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}], 0x81, &(0x7f0000000040)) [ 2795.582863][T10027] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2795.602856][T10027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2795.609573][T10027] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2795.635916][T10027] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2795.651673][T10027] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2795.658787][T10027] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:19 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 20:28:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "010400", "406fbb08f51b13fb1607920886e6bbe2", "8e9c9bb2", "8c0081f7480ab51d"}, 0x28) 20:28:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x400, 0x4) 20:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000140)) 20:28:20 executing program 5: statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x0, 0x0) [ 2796.257169][ T8861] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2796.629245][ T8861] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2796.643127][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2796.654685][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2796.664683][ T8861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2796.677941][ T8861] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2796.687198][ T8861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.778239][T10050] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2796.793791][T10050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2796.800888][T10050] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2796.819681][T10050] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2796.834032][T10050] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2796.840940][T10050] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2797.025797][ T8861] usb 4-1: config 0 descriptor?? [ 2797.577684][ T8861] usbhid 4-1:0.0: can't add hid device: -71 [ 2797.584104][ T8861] usbhid: probe of 4-1:0.0 failed with error -71 [ 2797.613705][ T8861] usb 4-1: USB disconnect, device number 21 20:28:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20000008}, 0x1c) 20:28:22 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x50000, 0x0) 20:28:22 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) 20:28:22 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0xaaaaaaaaaaaaaea, &(0x7f0000000ec0)=[{&(0x7f0000000780)="44b54e17d3a77d09", 0x8, 0xfffffffffffffff9}, {&(0x7f00000007c0)="f9", 0x1, 0x1e03}, {&(0x7f0000000800)="1c", 0xfe2d}, {&(0x7f0000000980)="12", 0x1, 0x415f6b99}, {&(0x7f0000000500)='&', 0x1, 0x80000000}], 0x80, 0x0) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000040)=""/66) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980)='/dev/full\x00', 0x0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @mss={0x2, 0xc9f}, @mss={0x2, 0xdf8}, @window={0x3, 0x906, 0x9}], 0x5) 20:28:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c8000020000000100008", 0x23, 0x1600}], 0x81, &(0x7f0000000040)) [ 2798.512799][T10074] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2798.647976][T10074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2798.654563][T10074] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2798.674730][T10074] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2798.694647][T10074] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2798.709060][T10074] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2798.715840][T10074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c8000020000000100008", 0x23, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:22 executing program 1: lstat(0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x202) epoll_create(0x0) 20:28:23 executing program 5: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000067dc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 20:28:23 executing program 2: r0 = socket(0x1, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/231, 0xe7}}], 0x1, 0x0, 0x0) [ 2799.277278][ T7662] usb 4-1: new high-speed USB device number 22 using dummy_hcd 20:28:23 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xfe391fc9364b008f, 0x0) [ 2799.570962][T10097] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2799.660147][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2799.671267][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2799.686937][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2799.696999][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 20:28:23 executing program 1: pipe(0x0) socket$inet_icmp(0x2, 0x2, 0x1) [ 2799.710276][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2799.719596][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2799.741377][T10097] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2799.748040][T10097] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2799.876358][ T7662] usb 4-1: config 0 descriptor?? [ 2799.953390][T10097] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2799.987489][T10097] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2800.002253][T10097] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2800.009378][T10097] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2800.437384][ T7662] usbhid 4-1:0.0: can't add hid device: -71 [ 2800.443886][ T7662] usbhid: probe of 4-1:0.0 failed with error -71 [ 2800.516095][ T7662] usb 4-1: USB disconnect, device number 22 20:28:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:25 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/75) 20:28:25 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x51, 0x0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x51) 20:28:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x7f, 0x4) 20:28:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c8000020000000100008", 0x23, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000180)) 20:28:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x3f}, &(0x7f00000001c0), 0x0) [ 2801.259621][T10125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:25 executing program 2: timer_create(0x0, 0x0, &(0x7f0000001140)) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) [ 2801.407354][T10125] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2801.413926][T10125] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2801.511044][T10125] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2801.524487][T10125] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2801.538981][T10125] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2801.545759][T10125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$char_raw(0x0, 0x1, 0x0) [ 2801.577042][T30876] usb 4-1: new high-speed USB device number 23 using dummy_hcd 20:28:25 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 20:28:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000", 0x34, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:25 executing program 2: set_mempolicy(0x91b3cee1222f3399, 0x0, 0x0) [ 2801.937517][T30876] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2801.949146][T30876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2801.960471][T30876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2801.972897][T30876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2801.986557][T30876] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2801.995918][T30876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.335200][T30876] usb 4-1: config 0 descriptor?? [ 2802.449978][T10149] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2802.488545][T10149] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2802.495091][T10149] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2802.517611][T10149] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2802.529887][T10149] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2802.544560][T10149] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2802.551712][T10149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2802.879627][T30876] usbhid 4-1:0.0: can't add hid device: -71 [ 2802.904840][T30876] usbhid: probe of 4-1:0.0 failed with error -71 [ 2802.933276][T30876] usb 4-1: USB disconnect, device number 23 20:28:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:27 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x440) 20:28:27 executing program 1: r0 = socket(0x1, 0x3, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001080)) 20:28:27 executing program 5: r0 = epoll_create(0x8) r1 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000012c0)) 20:28:27 executing program 2: r0 = socket(0x1, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000001380)) 20:28:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000", 0x34, 0x1600}], 0x81, &(0x7f0000000040)) [ 2803.652609][T10172] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2803.860411][T10172] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2803.867307][T10172] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:28 executing program 5: waitid(0x0, 0x0, 0x0, 0x6300000f, 0x0) 20:28:28 executing program 2: timer_create(0x0, &(0x7f0000001100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001140)) timer_settime(0x0, 0x0, &(0x7f00000011c0)={{}, {0x0, 0x989680}}, 0x0) 20:28:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'm\x00'}, 0x8) 20:28:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) [ 2804.113556][T10172] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2804.204137][T10172] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2804.219976][T10172] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2804.227858][T10172] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/net/tun\x00', 0x14b100, 0x0) close(r0) [ 2804.427115][T26602] usb 4-1: new high-speed USB device number 24 using dummy_hcd 20:28:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000", 0x34, 0x1600}], 0x81, &(0x7f0000000040)) [ 2804.809422][T26602] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2804.821154][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2804.832349][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2804.842403][T26602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2804.855679][T26602] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2804.864982][T26602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.071355][T26602] usb 4-1: config 0 descriptor?? [ 2805.104111][T10196] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2805.160791][T10196] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2805.167549][T10196] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2805.189617][T10196] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2805.202308][T10196] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2805.216551][T10196] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2805.223505][T10196] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2805.647911][T26602] usbhid 4-1:0.0: can't add hid device: -71 [ 2805.656205][T26602] usbhid: probe of 4-1:0.0 failed with error -71 [ 2805.730320][T26602] usb 4-1: USB disconnect, device number 24 20:28:30 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:28:30 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x101d0}, 0x0) 20:28:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:28:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000026000511d25a80648c63940d0124fc60100035400a74db43", 0x1c}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x200000}, 0x0, 0x0, 0x0, 0x1, 0xd40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000a400)={0x0, 0x0, 0x0}, 0x63) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[], 0x9) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="5ff7fbd19814b75ced13bb248e13e7d21f08e092d53f4b2a13e3051a5a39f264e29500c19e8cc84c216e72a2a467b2a8f2fc4ded7883b3ba04ad8e9367c1236913fc41f2c55d4405ed6701422327bf725d354b4e0800000012a9558d027acdf147cccc0804e07a029d80b6037d59afb76e0dc5d3c308000000ecc98101d3f7dd4aaa40228186993a14a65b9291d62e59551689ef3e73a0af7514aeccf380c600"/171], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000007c0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 2806.681664][T10219] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 2806.892204][T10219] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2806.899286][T10219] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:31 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000014600)={&(0x7f0000014480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000014500)=""/193, 0x31, 0xc1, 0x1}, 0x20) 20:28:31 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000005c0)=""/198, 0xc6}], 0x1}, 0x40) 20:28:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2807.225062][T10219] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2807.333672][T10219] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2807.347984][T10219] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2807.354758][T10219] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2807.461266][T10221] device wlan1 entered promiscuous mode [ 2807.470506][T10223] device wlan1 left promiscuous mode 20:28:31 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x1e, 0x0, @multicast1}, 0x10, 0x0}, 0x0) [ 2807.977796][T10230] device wlan1 entered promiscuous mode 20:28:32 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x4}, 0x0) 20:28:32 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="89", 0xffffffea}], 0x1}, 0x0) 20:28:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1400}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2808.474963][T10245] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2808.557648][T10245] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2808.564305][T10245] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) [ 2808.636410][T10245] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:32 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000500)={0x1, ':'}) [ 2808.778528][T10245] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2808.794094][T10245] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2808.801485][T10245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:28:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030", 0x3d, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000200)=""/234, 0x2a, 0xea, 0x1}, 0x20) 20:28:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 20:28:33 executing program 1: 20:28:33 executing program 0: [ 2809.615992][T10266] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2809.746103][T10266] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2809.755371][T10266] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:33 executing program 2: 20:28:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) [ 2810.073641][T10266] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:34 executing program 5: 20:28:34 executing program 1: [ 2810.171328][T10266] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2810.185735][T10266] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2810.194401][T10266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:34 executing program 0: 20:28:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002", 0x41, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:34 executing program 2: 20:28:34 executing program 1: 20:28:34 executing program 5: 20:28:35 executing program 0: [ 2811.117008][T10284] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2811.265181][T10284] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2811.272065][T10284] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:35 executing program 2: 20:28:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:35 executing program 0: [ 2811.600849][T10284] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:35 executing program 5: 20:28:35 executing program 1: [ 2811.657400][T10284] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2811.671708][T10284] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2811.678702][T10284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:36 executing program 2: 20:28:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002", 0x41, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:36 executing program 5: 20:28:36 executing program 1: 20:28:36 executing program 0: 20:28:36 executing program 2: 20:28:36 executing program 5: [ 2812.647765][T10302] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2812.666105][T10302] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2812.672897][T10302] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) [ 2812.700316][T10302] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2812.714906][T10302] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2812.730290][T10302] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2812.738088][T10302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:37 executing program 1: 20:28:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002", 0x41, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:37 executing program 0: 20:28:37 executing program 2: 20:28:37 executing program 5: 20:28:37 executing program 1: [ 2813.584280][T10317] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:37 executing program 0: [ 2813.702674][T10317] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2813.709610][T10317] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:37 executing program 2: 20:28:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) [ 2813.952438][T10317] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:38 executing program 5: [ 2814.061702][T10317] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2814.075975][T10317] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2814.084937][T10317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:38 executing program 1: 20:28:38 executing program 2: 20:28:38 executing program 0: 20:28:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030000000020000", 0x43, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:38 executing program 5: [ 2814.739871][T30876] usb 4-1: new high-speed USB device number 25 using dummy_hcd 20:28:38 executing program 1: 20:28:39 executing program 2: [ 2815.020601][T30876] usb 4-1: device descriptor read/64, error 18 [ 2815.028674][T10336] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:39 executing program 0: [ 2815.188607][T10336] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2815.195173][T10336] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2815.222426][T10336] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:39 executing program 1: [ 2815.234784][T10336] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2815.249206][T10336] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2815.255978][T10336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030000000020000", 0x43, 0x1600}], 0x81, &(0x7f0000000040)) [ 2815.422630][T30876] usb 4-1: device descriptor read/64, error 18 [ 2815.696957][T30876] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2815.767906][T10347] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2815.784830][T10347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2815.792723][T10347] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2815.815865][T10347] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2815.836341][T10347] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2815.850803][T10347] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2815.857986][T10347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2815.970171][T30876] usb 4-1: device descriptor read/64, error 18 [ 2816.366842][T30876] usb 4-1: device descriptor read/64, error 18 [ 2816.488556][T30876] usb usb4-port1: attempt power cycle [ 2817.219375][T30876] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2817.317350][T30876] usb 4-1: Invalid ep0 maxpacket: 0 20:28:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:41 executing program 5: 20:28:41 executing program 0: 20:28:41 executing program 2: 20:28:41 executing program 1: 20:28:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af302000400000000000000000000000200000030000000020000", 0x43, 0x1600}], 0x81, &(0x7f0000000040)) [ 2817.478025][T30876] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2817.741934][T10361] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:41 executing program 5: 20:28:41 executing program 2: [ 2817.876980][T10361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2817.883550][T10361] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:42 executing program 0: 20:28:42 executing program 1: [ 2817.957232][T30876] usb 4-1: device not accepting address 28, error -71 [ 2818.007328][T30876] usb usb4-port1: unable to enumerate USB device [ 2818.110702][T10361] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2818.123213][T10361] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2818.137730][T10361] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2818.147099][T10361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002000000", 0x44, 0x1600}], 0x81, &(0x7f0000000040)) [ 2818.507695][T30876] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2818.776993][T30876] usb 4-1: device descriptor read/64, error 18 [ 2819.176897][T30876] usb 4-1: device descriptor read/64, error 18 [ 2819.188988][T10375] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2819.293363][T10375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2819.300381][T10375] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) 20:28:43 executing program 5: [ 2819.349929][T10375] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2819.425461][T10375] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2819.440227][T10375] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2819.447174][T10375] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2819.478066][T30876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2819.747515][T30876] usb 4-1: device descriptor read/64, error 18 [ 2820.147953][T30876] usb 4-1: device descriptor read/64, error 18 [ 2820.267204][T30876] usb usb4-port1: attempt power cycle 20:28:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:45 executing program 2: 20:28:45 executing program 1: 20:28:45 executing program 0: 20:28:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002000000", 0x44, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:45 executing program 5: [ 2821.006626][T30876] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2821.292136][T10390] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:45 executing program 5: [ 2821.410064][T10390] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2821.416985][T10390] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2821.479785][T10390] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2821.496970][T30876] usb 4-1: device not accepting address 31, error -71 [ 2821.505567][T10390] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2821.520174][T10390] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2821.528015][T10390] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:45 executing program 1: 20:28:45 executing program 2: 20:28:45 executing program 0: 20:28:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af30200040000000000000000000000020000003000000002000000", 0x44, 0x1600}], 0x81, &(0x7f0000000040)) [ 2821.948473][T30876] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2822.038200][T30876] usb 4-1: Invalid ep0 maxpacket: 0 [ 2822.044277][T30876] usb usb4-port1: unable to enumerate USB device 20:28:46 executing program 5: [ 2822.510930][T10406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2822.610877][T10406] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2822.617857][T10406] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2822.638044][T10406] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2822.653834][T10406] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 2822.668124][T10406] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2822.674896][T10406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:48 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20:28:48 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000003e00)) 20:28:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="bc", 0x1}], 0x1, 0x0, 0x0, 0xfec00700}, 0x60) 20:28:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45}], 0x81, &(0x7f0000000040)) 20:28:48 executing program 0: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) [ 2824.864047][T10426] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:49 executing program 0: perf_event_open$cgroup(&(0x7f00000001c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2825.050842][T10426] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2825.057582][T10426] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 20:28:49 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 2825.211814][T10426] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2825.226076][T10426] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2825.233089][T10426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:49 executing program 5: r0 = syz_io_uring_setup(0x71fa, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x45f2, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 20:28:49 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 20:28:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 20:28:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45}], 0x81, &(0x7f0000000040)) [ 2825.666806][ T17] usb 4-1: new high-speed USB device number 33 using dummy_hcd 20:28:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000400)='net/nf_conntrack\x00') [ 2826.049084][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2826.063967][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2826.073516][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2826.243023][T10462] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2826.350369][T10462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2826.357177][T10462] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2826.358235][ T17] usb 4-1: config 0 descriptor?? [ 2826.442032][T10462] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2826.456832][T10462] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2826.463606][T10462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2826.659444][ T17] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 20:28:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 20:28:52 executing program 1: socket(0x11, 0x2, 0x1) 20:28:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5609, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, "a4adb22f223a2ce4e79981a5d746bebf35771d"}) 20:28:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x10000, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000001000000daa8000009000000000000003bf100"/48]) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x34e, 0x0, 0x0) mq_getsetattr(r5, &(0x7f0000000200)={0x3f, 0x8000, 0x2}, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x40000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x6c}}, 0x4000000) 20:28:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45}], 0x81, &(0x7f0000000040)) [ 2828.373307][ T4160] usb 4-1: USB disconnect, device number 33 [ 2828.641596][T10493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2828.687524][T10493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2828.687671][T10493] EXT4-fs error (device loop4): ext4_quota_enable:6125: comm syz-executor.4: Bad quota inode # 3 [ 2828.688883][T10493] EXT4-fs warning (device loop4): ext4_enable_quotas:6165: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2828.688923][T10493] EXT4-fs (loop4): Cannot turn on quotas: error -116 [ 2828.688995][T10493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:28:53 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0x1}, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x3, 0x40}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 20:28:53 executing program 2: socket$nl_sock_diag(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000180)={0x8}, &(0x7f0000000040)={0x6}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) [ 2829.036631][ T4160] usb 4-1: new high-speed USB device number 34 using dummy_hcd 20:28:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:53 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 20:28:53 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x200, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830a3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7000000000060000000"}, 0x28) [ 2829.401665][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2829.417074][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2829.426901][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.621085][ T4160] usb 4-1: config 0 descriptor?? 20:28:53 executing program 2: [ 2829.700022][ T4160] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2829.828814][T10522] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2829.917799][T10522] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2830.023782][T10522] EXT4-fs (loop4): get root inode failed [ 2830.029803][T10522] EXT4-fs (loop4): mount failed 20:28:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:55 executing program 1: 20:28:55 executing program 5: 20:28:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:55 executing program 2: 20:28:55 executing program 0: [ 2831.774937][T30876] usb 4-1: USB disconnect, device number 34 20:28:56 executing program 5: [ 2832.199047][T10549] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:56 executing program 2: 20:28:56 executing program 1: [ 2832.353125][T10549] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:28:56 executing program 0: [ 2832.398030][T10549] EXT4-fs (loop4): get root inode failed [ 2832.403874][T10549] EXT4-fs (loop4): mount failed 20:28:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:28:56 executing program 5: [ 2832.666586][ T17] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2833.058279][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2833.071393][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2833.080827][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.173432][T10563] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2833.268858][ T17] usb 4-1: config 0 descriptor?? [ 2833.284996][T10563] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2833.311984][T10563] EXT4-fs (loop4): get root inode failed [ 2833.318003][T10563] EXT4-fs (loop4): mount failed [ 2833.344859][ T17] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 20:28:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:28:59 executing program 0: 20:28:59 executing program 2: 20:28:59 executing program 1: 20:28:59 executing program 5: 20:28:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2835.357454][ T7662] usb 4-1: USB disconnect, device number 35 [ 2835.615607][T10592] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:28:59 executing program 1: [ 2835.777162][T10592] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:00 executing program 1: 20:29:00 executing program 0: [ 2835.977770][T10592] EXT4-fs (loop4): get root inode failed [ 2835.983721][T10592] EXT4-fs (loop4): mount failed 20:29:00 executing program 2: 20:29:00 executing program 5: openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0xf, &(0x7f0000000040)) 20:29:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2836.309787][ T4160] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2836.678763][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2836.689846][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2836.701188][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2836.711232][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2836.724472][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2836.733742][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.913676][T10610] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2836.955131][ T4160] usb 4-1: config 0 descriptor?? [ 2836.961742][T10610] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2837.011238][ T4160] usbhid 4-1:0.0: can't add hid device: -22 [ 2837.011483][T10610] EXT4-fs (loop4): get root inode failed [ 2837.017845][ T4160] usbhid: probe of 4-1:0.0 failed with error -22 [ 2837.031738][T10610] EXT4-fs (loop4): mount failed 20:29:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:03 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 20:29:03 executing program 1: getresgid(0x0, 0x0, &(0x7f0000000080)) 20:29:03 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f00000002c0)=0x2, 0x4) 20:29:03 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000001500)="9e74c92cd4637c70f2eb346149add30d0b99f58fc20f735c2050098a2faa65b4a982", 0x22, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 20:29:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2838.988243][T26620] usb 4-1: USB disconnect, device number 36 [ 2839.223415][T10635] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:29:03 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x28, 0x0, &(0x7f0000000080)) [ 2839.372217][T10635] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2839.459319][T10635] EXT4-fs (loop4): get root inode failed [ 2839.465248][T10635] EXT4-fs (loop4): mount failed 20:29:03 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000000)="f8aeea43424ac4865769cb5fffac7da5", 0x10) 20:29:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, [], 0x0}}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x48}, 0x0) 20:29:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 20:29:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2840.010361][ T4160] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2840.389057][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2840.400424][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2840.411625][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2840.421651][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 20:29:04 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) [ 2840.434973][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2840.444277][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2840.497224][ T4160] usb 4-1: config 0 descriptor?? [ 2840.523400][T10674] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2840.545853][ T4160] usbhid 4-1:0.0: can't add hid device: -22 [ 2840.553355][ T4160] usbhid: probe of 4-1:0.0 failed with error -22 [ 2840.715039][T10674] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2840.757105][T10674] EXT4-fs (loop4): get root inode failed [ 2840.762937][T10674] EXT4-fs (loop4): mount failed 20:29:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4a, 0x0, 0x0) 20:29:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)='\"', 0x1}, {0x0}, {&(0x7f0000001580)="15", 0x1}], 0x3}, 0x0) 20:29:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:06 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="a768a7fcb5f4a1701a69e1fb90678962ebb6fc818bede97ca97b801c43d931cb3716cbc1eb305dbd5767bd6bb103ce1ed1165a0d4be2bb78e973", 0x3a}], 0x1}, 0x0) 20:29:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 2842.632495][ T4160] usb 4-1: USB disconnect, device number 37 [ 2842.958391][T10712] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:29:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20155, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 2843.046930][T10712] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) [ 2843.182353][T10712] EXT4-fs (loop4): get root inode failed [ 2843.189087][T10712] EXT4-fs (loop4): mount failed 20:29:07 executing program 5: syz_emit_ethernet(0xf6, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv4}}, 0x0) [ 2843.439718][ T4160] usb 4-1: new high-speed USB device number 38 using dummy_hcd 20:29:07 executing program 0: getresuid(0x0, &(0x7f0000000040), 0x0) 20:29:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2843.810191][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2843.821810][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2843.833575][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2843.843856][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2843.859500][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2843.869123][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:08 executing program 1: r0 = socket(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) sendto(r0, 0x0, 0x0, 0x380, &(0x7f00000003c0)=@in={0x10, 0x2}, 0x10) [ 2844.242259][ T4160] usb 4-1: config 0 descriptor?? [ 2844.296639][ T4160] usbhid 4-1:0.0: can't add hid device: -22 [ 2844.303343][ T4160] usbhid: probe of 4-1:0.0 failed with error -22 [ 2844.315099][T10740] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2844.387987][T10740] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2844.413175][T10740] EXT4-fs (loop4): get root inode failed [ 2844.420274][T10740] EXT4-fs (loop4): mount failed 20:29:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:10 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @local, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @multicast2, @local}}}}, 0x0) 20:29:10 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000001500)="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", 0xfbe, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 20:29:10 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 20:29:10 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 20:29:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2846.244437][T26620] usb 4-1: USB disconnect, device number 38 [ 2846.606313][T10781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2846.796543][T10781] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000001080)={@loopback, @multicast1}, 0xc) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)=@in={0x10, 0x2}, 0x10) 20:29:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x8, 0x4) [ 2846.952456][T10781] EXT4-fs (loop4): get root inode failed [ 2846.958988][T10781] EXT4-fs (loop4): mount failed 20:29:11 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000001500)="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", 0x716, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 20:29:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom(r0, 0x0, 0x0, 0x81, 0x0, 0x0) 20:29:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2847.342400][ T4160] usb 4-1: new high-speed USB device number 39 using dummy_hcd 20:29:11 executing program 2: r0 = msgget(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/137}, 0x8d, 0x1, 0x0) [ 2847.708893][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2847.720328][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2847.732799][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2847.745278][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2847.759083][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2847.768525][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.990467][T10811] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2848.030360][ T4160] usb 4-1: config 0 descriptor?? [ 2848.135647][T10811] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2848.257421][T10811] EXT4-fs (loop4): get root inode failed [ 2848.263520][T10811] EXT4-fs (loop4): mount failed [ 2848.567831][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2848.574523][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2848.617648][ T4160] usb 4-1: USB disconnect, device number 39 20:29:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:13 executing program 5: utimensat(0xffffffffffffff9c, 0x0, 0x0, 0xfd5c701e1cbab8db) 20:29:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)=0x25) 20:29:13 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 20:29:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x900}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 20:29:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2849.475070][T10837] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2849.551971][T10837] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2849.593504][T10837] EXT4-fs (loop4): get root inode failed [ 2849.600062][T10837] EXT4-fs (loop4): mount failed 20:29:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000080), 0x4) 20:29:14 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)='m', 0x1}], 0x1, 0x0, 0x310}, 0x0) 20:29:14 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@un=@abs={0x8}, 0x8, 0x0}, 0x0) 20:29:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000140), 0x8) [ 2850.117458][ T17] usb 4-1: new high-speed USB device number 40 using dummy_hcd 20:29:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f00000000c0)="15", 0x1) [ 2850.513901][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2850.525292][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2850.538599][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2850.549109][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2850.562662][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2850.572407][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.658934][T10865] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2850.756072][T10865] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2850.770212][T10865] EXT4-fs (loop4): get root inode failed [ 2850.776006][T10865] EXT4-fs (loop4): mount failed [ 2850.983903][ T17] usb 4-1: config 0 descriptor?? [ 2851.578167][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 2851.584842][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 2851.615831][ T17] usb 4-1: USB disconnect, device number 40 20:29:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000300), 0x8) 20:29:16 executing program 5: setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080), 0x4) clock_getres(0xe, &(0x7f0000000140)) 20:29:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:16 executing program 1: getgroups(0x3, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0]) setregid(0x0, r0) setresgid(r0, 0x0, 0xffffffffffffffff) 20:29:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) execve(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) [ 2852.385427][T10892] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2852.467997][T10892] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x2018c, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 20:29:16 executing program 1: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 2852.650778][T10892] EXT4-fs (loop4): get root inode failed [ 2852.658483][T10892] EXT4-fs (loop4): mount failed 20:29:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) 20:29:16 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000180)=0x20100, 0x4) 20:29:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2852.910641][T30876] usb 4-1: new high-speed USB device number 41 using dummy_hcd 20:29:17 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000600)={0x1c, 0x1c, 0x1}, 0x1c) [ 2853.299429][T30876] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2853.310554][T30876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2853.321995][T30876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2853.332131][T30876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2853.345558][T30876] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2853.354998][T30876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.571990][T10917] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2853.683913][T30876] usb 4-1: config 0 descriptor?? [ 2853.693604][T10917] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2853.797486][T10917] EXT4-fs (loop4): get root inode failed [ 2853.803310][T10917] EXT4-fs (loop4): mount failed [ 2854.238727][T30876] usbhid 4-1:0.0: can't add hid device: -71 [ 2854.245170][T30876] usbhid: probe of 4-1:0.0 failed with error -71 [ 2854.296555][T30876] usb 4-1: USB disconnect, device number 41 20:29:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:18 executing program 2: fstat(0xffffffffffffff9c, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x0) 20:29:18 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f0000000000), 0xc) 20:29:18 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 20:29:18 executing program 1: getresgid(0x0, 0x0, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 20:29:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2855.034496][T10950] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:29:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) listen(r1, 0x0) [ 2855.143664][T10950] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2855.183537][T10950] EXT4-fs (loop4): get root inode failed 20:29:19 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="1ba0d13d8c5173878dbbcc4a08dc54d254c296adaf6ecb6ebf62e856ed9c9d1b0d288c7a921e514a1f95e5bdb05b2e01e6f1e3aaf8a9058f427c5d89f6d703c08438908fdd156e666a9e5920c1bfe09d1fd37279e94d89e5c8e8e4fd2d", 0x5d, 0x8, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 2855.189691][T10950] EXT4-fs (loop4): mount failed 20:29:19 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x9, 0x0, 0x0) [ 2855.391544][ T8861] usb 4-1: new high-speed USB device number 42 using dummy_hcd 20:29:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000100)="cbc8df311cece031217576fa69ecee5755ac55980680bca0b45fd67fa388c82beddbdb5e5ddf25c78c0400aff65d66384300512a1c7961080aa85195dcef2415942c28be89a85ea14ca6e9d21253020078b4cc9e63185bba8a9d8036282e5c999d8fea684013808ac15c107ac3c72cf0fad4107ae31acf347ff61df15783a6ef1caa4c622c55b833339dab01e7426350bc1f287c90edcc96d1f0cec2932b0ff77bd228c359bd635406a289547297574227c266541af1497a6156fbdc4d12a1988f9a46e4ca78e8b404bb585f0cea8865da3dfa45a6eeb8deafb3eac5c1e0421e39", 0xe1) 20:29:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2855.780196][ T8861] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2855.791379][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2855.802790][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2855.812832][ T8861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2855.826180][ T8861] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2855.837639][ T8861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:20 executing program 2: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000280)={@mcast1}, 0x14) [ 2856.202516][ T8861] usb 4-1: config 0 descriptor?? [ 2856.335641][T10982] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2856.354001][T10982] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2856.370490][T10982] EXT4-fs (loop4): get root inode failed [ 2856.377865][T10982] EXT4-fs (loop4): mount failed [ 2856.752243][ T8861] usbhid 4-1:0.0: can't add hid device: -71 [ 2856.758770][ T8861] usbhid: probe of 4-1:0.0 failed with error -71 [ 2856.805095][ T8861] usb 4-1: USB disconnect, device number 42 20:29:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:21 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 20:29:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 20:29:21 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180), 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, 0x0, 0x0) 20:29:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:21 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000000)=0x1, 0x4) [ 2857.474036][T11008] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2857.548107][T11008] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2857.595152][T11008] EXT4-fs (loop4): get root inode failed [ 2857.601921][T11008] EXT4-fs (loop4): mount failed 20:29:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000), 0x4) 20:29:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4000, &(0x7f0000000040)=0x400, 0x4) 20:29:22 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 20:29:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) [ 2858.277557][ T7662] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2858.696140][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2858.708880][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2858.709319][T11036] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2858.720102][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2858.720270][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2858.743521][T11036] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2858.753827][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2858.753969][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.777799][T11036] EXT4-fs (loop4): mount failed 20:29:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000280), &(0x7f0000000040)=0x20) [ 2859.236346][ T7662] usb 4-1: config 0 descriptor?? [ 2859.758620][ T7662] usbhid 4-1:0.0: can't add hid device: -71 [ 2859.765058][ T7662] usbhid: probe of 4-1:0.0 failed with error -71 [ 2859.828681][ T7662] usb 4-1: USB disconnect, device number 43 20:29:24 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000001500)="9e74c92cd4637c70f2eb346149add30d0b99f58fc20f735c2050098a2faa65b4a9828260be7e52b69fdb85c52bbdf826f162ac1a068ed068503f2fb3bcd4daebb64137ce259fe4e7791e2d0b83718fedf2c771485b43dada5df5a3048a834ed2351a973d07d0b874095bc66641d2ba4d16737dd669d864b41ca9b9cc3ac827e4a51e55c909101ac13ba7b1f8f25c2af8bba2b47966d7b07414353a4bb4467682b57a68eae85fbb067d832cf0666cb11596566f5540bdf713e10751a98a60a5de28865b7a1a0cd1cca0e409dfcb383a56ab8791fedc8aaaaa10ef51db8a7b7784308e1423d71e48bd4aa3e36060d6f8ab730fbead5425ad252ad7539dc75095fd564a0386251395b54bc43fe34560c82e5446ada7a31149e4f420c78a5c8b272c2cb86276209c0a6a29162b3ee94fb9bd2375b644f7c512e5740583142a7f8cb6965e5d319ef8ac573c2de38d7e5352435399d20c49301c8f067be455960bc7a5f9822b2af59846a79e6dec844a3638b6f5c8c451a6eb7c00eb7b4f9534362bf8d78a7313e17735144abe40e9d9b2cc6443d901474f2d420bf7540ea4b9450be8cdf624acce0b2cb30ca13d4f0221be015f03391dcff09348563c7e1610c4947da8938c97baa7aa8727e5f06db014ff882bb45a2f2fc32db69967373976191178af51ff5da237714492f6994213ab9e2597fc9d4689674ed7909414787989644b284393a92714a7942f9b866d4cbbd2d098a503d3fb461759bc8f64cd1e69e633f55a8e8b236b9fd2b411964fced0fc0cba03bcbb62c72ce7b51f033c6b713ce140a19da2614ea3ce50b183b8cd0894f42c6a1de81ce9d960c932d44b5135a7f0b81dc5a76fc5a00e7b3bdc2d036a18d33eee11ed3a68f567f8a7f81b2fafebe139782883cff9a11bdc70407b532c5d1c5a84a57aa1b2df86547a72fcbdb39d82a57aa727e63414bb29246092154933fdaf3f3e7fefa9e68aa8afa5c8d351f4f31bf74141ed87659da31da3bfe9cb12abf0256af56f1f5cc731e1b12b36d8f8a4a7817d633f4984685e4a602995a011cd1a63ca663553ab867acc414d88892d539fffe685a6456dcc5bbd847be42a9ffaa29898d3661f27889b814511cef299fa56f4201de0cd13b83ec56f2f0559c091bb86586b15cd16b0c206ec20cb46542c9bce2694d9aa84768a997f6312631caff0ff4ef1c70e74cda5a44e4b086205eb3f2ff042fcb29f2425081619ab1a63fc3765c468b8b9aa952f43c539b82b97458ba064318a44d31e7e23e5e16be96d0e56efbc2048e2de152160846afae0e3f47bb8b543724e091cb43807f1500ff7f01b7886f15703c31b360e7af79dddef2c80da6a3318365084f79534efff0b07eabbe049e72c69885018f3b2d7f614c4ea3563394c6ca533a78671ca8bdd023d3b7ea9c8cd9181547bbc6def1a6ea188dfc43e1099716106b827b81b446f478b8d57d91cb676398dc309d9d3944079a7488e2e2f527b11a64f6d8ceff625ce7bc5aeb1234fe10d84ac1f76fee64917d16fe2bae4fba28712a8a75b48ffcc696bec293915b0fb2882150b9f12f9ed77af45f283a975066ea2a3692c129b06db339e904203ec88130c5bb48ad53483914d5957c6f1e8d4588b5fa6c593940ab5375149485cc7f8b62c893d81605152a7caadb0f4911e6fecb02fc6a41952738ed40f5e99a1d22c4baed34e89835926f800b00ee120f6b6f8113f56133c7d61b6b12d1a92c8a49c0d9d492cf0b1639feaec4062e46318e1ce8564c1586e060353311e6edadedbfe4c2b8721f96e883f7b84e3b626d0af01a63c7ea01dff0564a19f381f02be004257ebaf68cd80ef96633ba684981a0a3edbd731e1ac99bd605224976ef8239e71d7d8d8301fb725ce1e7322462c1563986576e2f7809f94875be4ecd3ad20194f4e0e8c75e9a8d189fabc0aeb0fbebbf569f5ddd38f1bf7238c7151dd8b570f942df73e24ae3ee08ea0d58992b05fe4ba9bcc4a2024bada8d432309e0af3107b6eb094d6692e65eda5fe2d21f6fdc36717d2db623bde573b46f56bbadfee6582ce3b956d415f022b47879143f4fdb9d84cb70d4dc64a32f738af43716d249d9b0618d41821c4cf5a8f9fc3dcd7fc452e9702c1b6d12d11c4d0cf943301f05acfbc0e3a6c446c368e6e747acd6241e50290868e0c029eabf97376ca05b3d1728b2c5c1738c1a149de353ce1f128936d73693dce3449cbc7ffa9d4ef787ce804774c62cef2493838fd1243d59fba7448f43a57f5f4afbaa95270c5af2cb0ff9a6e5ede13350e79a0e350f3ba92be346927b55063544912d1818148714e408c535f5832dfeb6a7245b70cbd4007f0dded2213b7c64ca13a564af0a66843ab6ff40f23e48ebc01f0a03f25fb205c4c5abd48ec893b1a9ae92b3c7454b0b0b3520d85ef393385635b6d2ea63b5493e5674ecc7cf872383e6b1f7fde7170a56423c63b09027255eb19926c1c1e34bfd07bb1e313cc1340716b056aae04a45852a46bd0815f96a9ccd6324c417baa938c13d7498acefaa4bde9836f7baf7a64577f64b9cd8dcb669438210b798e77a827b33ce20c4051886c89875549480e8b2da2dd2e5d4dc09d3f6005b6ae7deb0dbebe76215f92bee48929987e30243ab34da8243db6f2da058b883e910acef11189cbefb4c226c825050edfeb0d4485aabe9e389ea67056e02c580c37c53bb0cacfe130411ccb50eab4f6484ae956342f8a2ab50aaf914ad8482387483222cacb04f1a98a66821406c60b3915fd74b86b3e5dffa239c55099a51801cad8450371bcaf0154153d167c7712cda5f5cb592d49666091abe0dabd2c1c74098d271a9bab627f6ff7ddb4749188c276ae4cac4fb2f0e71093b8a27c6ee748ab58cb36ab56260b83b35cc1c27814118941ad367a81e1a6a585203c4c03c004daf70ce36f621147a170dacb81a0c73f59aaccffd4dcb55e430ae058734d2bd416e50d24e68762d164311f04a1ba5124d67642b0ed0e197e222f9a0f0350bfb7f6e2baf19cf532bac4c444fedca42781b217c4c4b4e30c470c10e95f99d64edd0517ef45ae3e1c11a1cc74b4a0bbf457a61ca4b43da2d4687ca3ebbd9a12fdf35a9ebef5fea3d32eff529585ea92e176080de14f8bbaaf6ff86889b7227066ee9a19a807669f9775a502ad29a9ac86998313498343fe100e6996e52870eeccc9da5335c349fb26887449723d8bf7726764afe57ac60baf7193547699b67531c7e861dea8e89a7049d3a9dec33d659a13bd00097bf9fd53abfaccf6d2252de542b7b496312bd1c0ae13adf7586aa7233fd35c67a25793284c50b3e320b69b33334b67ef8cd0508ea8720f2e20d9de5296822b9955778af33362b3c7c8d187ecad665220d63d00d55308f12a4eccece42f23a66d2f591c69ec78428fab9314c522fb408f7cfc782ffe534c6261bc136da4165d167a63511b4a6eef9d01f400c1aaf62407b262ec18f5c80f62c046c3bb6c238ec9623396d810e5f23c9b1162d18270c6fef2d957aa64222f20bebc214041ebde9f52b604c8362c25698d45f1a8ce5eced41453352e511b24e7cfed773717b32087655d74b0212805844a75af8eba99976ab07fb7a539e825687d5fc1ae47b55d1a39d7369a1283990a6868556764fc02037b28990eb7b137d3635947fb8b38831dc38a8232525a0488a474872b2cbd0a77035dba0298442e6867b24f6da9e188142f3fd137af3c2ab19a9fb126fdef4d5234abad9676f6bf859a40f59975ff13889b681eb78ad8392d66528ce1bf262099cc816a640b5d531e014c6a442eddc8306449a1c6630943a4e5aee7f7749923720cf1c6328f7b8de43ecc4535982138d4f4b07c6a4b25621e6621067bb25ede70666776419cd52af1093f38e4939a459ba3d5e59ea6750b7eba850b0e5559cb244d90d21669f290da0a494a595edb037301c737adaaf4f6e281e2db6a91a6621676192093bf83bd9b6edd671586b88ae6f67b2f27ad9271dc8afdb6a038616d5480c97ebc4f2520c2a414fefefa78459547793897684ea65044521611d5ee7e4657cea10aa6abcc3204abe6fe9fcca2753d0f0d2ba5ecbab82edcf417561bb0210cc9b02b1b590afdef0039d4e3fdf8b94c320f598133ed91aac82638412a9554a46d28cccb28cf81881d75ccb51b8dd2e16fb9b6c4bf4073c4ac8f9d9f96bd4510b4d85a387227748ec3f17e89a02288f997e50995434346b5b6b8f29bfa421f01f595df633c4fa0db4305259f58bc0dc982c152c9ef64c6842e046befd429c2881c05e3f1f2d76d3addf2af14b2703587aeac1c85599f92ce1b0ae54f82e2b5e5edd02d65ba57c729459e478e107fd45a0ce14189a1b058acd1bee9964db77dc04e158349ccc32098bc4df89c16f0b01a9591a4d8648ebe18a5bdbd5db94c59e88ca789b29d36664dbb892dc4f675e3a3cc7ed232bc3006a7a43aa198273752f4f4b43713cb552807e07b4bdcb335ea084353d2aeb453736644679ec0e60173e1e530b71ab90740faf2b3b160c43858df26af8b16dfa173f61f389289bf828130ab6251faf327a836140a398f27aaec84f1fc87865323c2043feaff6dc6f26734a72e5bf044c8dd87ab502ee1bf72ed7720ad10b79c69b5f36834c44bcfe2888f33e6dcb01cfd6612ee723339b8148e0c39d268ed45a7cd1c12d5674848248d375dd13b98033dde5f1340a3168857d77662482b42c7c8cde83fb140a66c80e63bd05e8e16b4a2c997e5c64283ebe95b53a5eccc08554b8db5a3ba9352573b4e40ecac0ba7794e98f752ff1c98513c4e11202a428eb97fb84919261ad4271cebfcc4603e55e057aee40ec9b15a131e2dde141c51d985a7e025ce80b3ad3a07b6b376ff92f7cf77078855335207067b58fd2a8c98f5b1195b930114899fef1a901780314636d301a62fed0dc85f2c34cf903dc7184ea5bb46752a2b60453f48b7b6351d07d0915112c23e04cefd56804e9933f0af9fdde673a5ade391497704274aafed7839872df1c36924f9dfd9a2d3e848eabb9bf090c202a28c01c9f6fd2542e4840aeb04ba26811d815f177ac11e151c67668edb49f3950805ecad689769cd0c41bb579278a400fd555099626a5a690d23186d7b8b26e79c41b616adae61775999eeceefc2766ba852df45d29cc2ecfd092155370c0ca402484e9f7b17222bf14d8ffcd680a8fde760a43b440b76f8ee05f9e01649048092f8500f0180de7be3a7662eaca6309c63b72cdaadfa224c552bd807867d8fbd4602811b535063d5a4a44f362c2757071c3ed98005c2be6c9662640276e9b94a5a8e95ff968f29b44474ead393ddc326f06608137b2950fb0a07bbbc3414b75739ccd5b4feda6223d9eb0b58972ed166596f546581dfe34dfa3b0447db0b24010c0baea9626ad37f5aaae5aeb3a8c6d61cdc1b2974e382273f6c1a6e1ed6be666c0cff2609d1f5b5337867bb47b8c1aee526f79c10461e8a7a1cf947c1486c0c45b1a1108bfaf98e5fe9e3255ae1ae1569df8b6e2b3bba9b59c2772466acee89311f9b177a5fc420ce38a12493156b2fe4b56ec6f7428d84741c9057c5a478e8af280710cc2a3747576c2cae82dfd0ea46d58c4be86cd48468bfafcb6a2a6be44707197405ec4b1ef850c341461f74d2bc629ae2579171940ff722f8a5e460703d3703009cf1bf82ccd4b8445a15ddb8140be8a90dc45d3dc0a65e607b840381b7b413421b21ecd7eaad0f8b334b9d1c8a8bd3dc3057d78cb062e0cc71e2b1e27ad30f338", 0xffc, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 20:29:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:24 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000080)={0x0, 0x17, [], [@ra, @jumbo, @enc_lim, @ra, @pad1, @pad1, @generic={0x0, 0x97, "586aab7f939a46a6a75afdd34808009414ccf76c499d553661ad6bed8b322e20817aae37cc7c26d2387b35184c86e55f2dfce64f1a33827d4bb50ae640cbe2bc046eed3b184b167193781f2a590d241921337876ffcdfdc3fef49bed11f5a0423c692b96b437aea3617ca18604111a06250637e860044451c6208fae373cf62783801f2584f065c995cb7cdd98827c479aed3c38a7f0b1"}, @ra, @ra]}, 0xc0) 20:29:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:24 executing program 0: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x10, 0x0) 20:29:24 executing program 2: socket$inet6_sctp(0x1c, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)="2242d28c66ae97438c3c6d6f948b068b76831749330d4197dcaf231caeda917473948e83c314b95ee544b8cc98a100282033ebaa2f956e46444a9f2bd79996609ef98827fbacaffb8c2c2f24e4a4b4f2e2a572c29c5ff4bcf786cd3127935f52fa1e616021a1973d082969af941734ea69945543e46b2a99829abf458620b5748af86a1e7198ba0ae1d09617bc3a299498a21f68aaf149d6f553e84bdfb437565298a22f9a6ee953a6747919fbb01c315f4e741d66931e01108538f9a74acaec203048f19cfe525e3c706661", 0xcc}, {&(0x7f00000001c0)="0e3b8322d0285038fa34978411f11cd4c53a452d9504f33197024fe9f86ade9baae686", 0x23}, {&(0x7f0000000200)="e1d20720e183c211d709b844b298bdacd8887241cf7f7e4edcd1297cf2649530da89e2f68734b5e007cbfc51716e9e2b8a83bbfc76489b21c5f11b37f28cccfe110fb30429583a8c3e2dd227d5d165754b3cf8e8a4b59e43a3898ea57dcedef373b29d6a15a430b8ce06a99c88ddd4978e0f8ff080524d26c5b19d227ae8ff804181f2ad", 0x84}, {&(0x7f00000002c0)="62b2a686248948dc49210db06b9e74fa5f22076c7f7eadb21f4a3bf0f2b0a291f7be06dfdb4d3420392eddbc5621a809462e1297a0fbf8e1b2af406d811c3190197b67ceab0bc79f248af6", 0x4b}, {&(0x7f0000000340)="529bfb698527ad15f6879f0573731f1f76564057804a3f054ddd6ed16b5e2e564f0539d06509d60b30f03da419c8195996785c99930c8a10a3f83dc6a51011cb591bf8994721bf7aa68b40ba1e", 0x4d}, {&(0x7f00000003c0)="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", 0xdf6}], 0x6, &(0x7f0000002840)=[@cred, @rights], 0x2c}, 0x0) [ 2860.595272][T11071] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:29:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000006c0)={0x1c, 0x1c, 0x3}, 0x1c) [ 2860.801213][T11071] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2860.808171][T11071] EXT4-fs (loop4): mount failed 20:29:25 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/151, 0x97}, 0x400c2) 20:29:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r0, r1) 20:29:25 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c}, 0x1c) [ 2861.132933][ T8861] usb 4-1: new high-speed USB device number 44 using dummy_hcd 20:29:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2861.500462][ T8861] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2861.511907][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2861.523189][ T8861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2861.533211][ T8861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2861.546470][ T8861] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2861.555765][ T8861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:25 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) [ 2861.829765][T11104] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2861.878501][ T8861] usb 4-1: config 0 descriptor?? 20:29:26 executing program 2: getgroups(0x3, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0]) setresgid(0x0, 0x0, r0) getresgid(0x0, 0x0, &(0x7f00000000c0)=0x0) setregid(r1, 0x0) [ 2861.981571][T11104] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 2861.988481][T11104] EXT4-fs (loop4): mount failed [ 2862.428494][ T8861] usbhid 4-1:0.0: can't add hid device: -71 [ 2862.435051][ T8861] usbhid: probe of 4-1:0.0 failed with error -71 [ 2862.514856][ T8861] usb 4-1: USB disconnect, device number 44 20:29:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:27 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001280)) 20:29:27 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000000180)="17bb8ccf90796f90cb139c6ee8b712a235b9738c024f2e3513151aa32fd51e2b284ce847957713915e0e", 0x2a, 0x80, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 20:29:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000140)="c96b6c242170304cdf34f119e902c117af7e439f81f61874dcd8f72ecc59d7b6231b75fc6b5c1af4281cca66c403858b815f42db773b556f9acc982f461d51c8283524246b090ac3d6935fc3b3b090f52bedb8b9eff34783155fbf22bd731a4161530bb0", 0x64, 0x84, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 20:29:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000180), &(0x7f00000010c0)=0x8) 20:29:27 executing program 0: [ 2863.310000][T11135] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2863.433578][T11135] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2863.463689][T11135] EXT4-fs (loop4): get root inode failed [ 2863.470269][T11135] EXT4-fs (loop4): mount failed 20:29:27 executing program 5: 20:29:27 executing program 2: 20:29:27 executing program 1: 20:29:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:27 executing program 0: [ 2863.892137][T31648] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2864.259872][T31648] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2864.271112][T31648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2864.282697][T31648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2864.292707][T31648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2864.305937][T31648] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2864.315275][T31648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2864.372885][T11153] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2864.434620][T11153] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2864.503700][T11153] EXT4-fs (loop4): get root inode failed [ 2864.509534][T11153] EXT4-fs (loop4): mount failed [ 2864.543348][T31648] usb 4-1: config 0 descriptor?? [ 2865.078592][T31648] usbhid 4-1:0.0: can't add hid device: -71 [ 2865.085013][T31648] usbhid: probe of 4-1:0.0 failed with error -71 [ 2865.145069][T31648] usb 4-1: USB disconnect, device number 45 20:29:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:29 executing program 2: 20:29:29 executing program 5: 20:29:29 executing program 1: 20:29:29 executing program 0: 20:29:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2866.085931][T11173] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:29:30 executing program 0: [ 2866.184622][T11173] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:30 executing program 0: [ 2866.358689][T11173] EXT4-fs (loop4): get root inode failed [ 2866.364584][T11173] EXT4-fs (loop4): mount failed 20:29:30 executing program 2: 20:29:30 executing program 1: 20:29:30 executing program 5: 20:29:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2866.878171][ T7662] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2867.289406][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2867.301438][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2867.312770][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2867.322753][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2867.335983][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2867.345229][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2867.431988][T11188] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2867.524935][T11188] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2867.571488][T11188] EXT4-fs (loop4): get root inode failed [ 2867.577292][T11188] EXT4-fs (loop4): mount failed [ 2867.597165][ T7662] usb 4-1: config 0 descriptor?? [ 2868.150350][ T7662] usbhid 4-1:0.0: can't add hid device: -71 [ 2868.156794][ T7662] usbhid: probe of 4-1:0.0 failed with error -71 [ 2868.211107][ T7662] usb 4-1: USB disconnect, device number 46 20:29:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:32 executing program 0: 20:29:32 executing program 2: 20:29:32 executing program 1: 20:29:32 executing program 5: 20:29:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2868.989737][T11212] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2869.018628][T11212] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:33 executing program 2: [ 2869.047038][T11212] EXT4-fs (loop4): get root inode failed [ 2869.053022][T11212] EXT4-fs (loop4): mount failed 20:29:33 executing program 1: [ 2869.132001][ T4160] usb 4-1: new high-speed USB device number 47 using dummy_hcd 20:29:33 executing program 5: 20:29:33 executing program 0: 20:29:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2869.502126][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2869.513295][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2869.524585][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2869.534631][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2869.547899][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2869.559422][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:33 executing program 1: [ 2869.865259][ T4160] usb 4-1: config 0 descriptor?? [ 2870.129187][T11224] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2870.197182][T11224] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2870.261963][T11224] EXT4-fs (loop4): get root inode failed [ 2870.269045][T11224] EXT4-fs (loop4): mount failed [ 2870.409625][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2870.416058][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2870.452398][ T4160] usb 4-1: USB disconnect, device number 47 20:29:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:35 executing program 2: 20:29:35 executing program 5: 20:29:35 executing program 0: 20:29:35 executing program 1: 20:29:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2871.156869][T11244] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 20:29:35 executing program 5: [ 2871.236588][T11244] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:35 executing program 0: [ 2871.344652][T11244] EXT4-fs (loop4): get root inode failed [ 2871.350611][T11244] EXT4-fs (loop4): mount failed 20:29:35 executing program 1: 20:29:35 executing program 2: 20:29:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:35 executing program 5: [ 2871.878497][ T4160] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2872.208218][T11257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2872.248413][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2872.259562][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2872.270821][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2872.280834][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2872.294124][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2872.303444][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2872.328517][ T4160] usb 4-1: config 0 descriptor?? [ 2872.342626][T11257] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2872.385524][T11257] EXT4-fs (loop4): get root inode failed [ 2872.391457][T11257] EXT4-fs (loop4): mount failed [ 2872.868663][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2872.875206][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2872.922251][ T4160] usb 4-1: USB disconnect, device number 48 20:29:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:37 executing program 0: 20:29:37 executing program 1: 20:29:37 executing program 2: 20:29:37 executing program 5: 20:29:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2873.563935][T11279] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 20:29:37 executing program 1: [ 2873.697002][T11279] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2873.816254][T11279] EXT4-fs (loop4): get root inode failed [ 2873.822325][T11279] EXT4-fs (loop4): mount failed 20:29:37 executing program 5: 20:29:38 executing program 2: 20:29:38 executing program 0: 20:29:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:38 executing program 1: [ 2874.368139][ T17] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2874.616038][T11294] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2874.749875][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2874.762111][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2874.763156][T11294] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2874.773319][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2874.773461][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2874.773631][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2874.773757][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2874.839100][T11294] EXT4-fs (loop4): get root inode failed [ 2874.844825][T11294] EXT4-fs (loop4): mount failed [ 2874.978827][ T17] usb 4-1: config 0 descriptor?? [ 2875.538674][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 2875.545110][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 2875.619486][ T17] usb 4-1: USB disconnect, device number 49 20:29:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:40 executing program 5: 20:29:40 executing program 0: 20:29:40 executing program 1: 20:29:40 executing program 2: 20:29:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2876.338470][T11311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 20:29:40 executing program 1: [ 2876.490736][T11311] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:40 executing program 5: [ 2876.604997][T11311] EXT4-fs (loop4): get root inode failed [ 2876.610991][T11311] EXT4-fs (loop4): mount failed 20:29:40 executing program 0: 20:29:40 executing program 2: [ 2876.977974][ T17] usb 4-1: new high-speed USB device number 50 using dummy_hcd 20:29:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:41 executing program 1: [ 2877.375281][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2877.386366][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2877.397672][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2877.407682][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2877.421172][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2877.430569][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.597132][T11324] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2877.754491][T11324] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2877.884775][T11324] EXT4-fs (loop4): get root inode failed [ 2877.891345][T11324] EXT4-fs (loop4): mount failed [ 2877.962702][ T17] usb 4-1: config 0 descriptor?? [ 2878.551795][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 2878.558322][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 2878.620914][ T17] usb 4-1: USB disconnect, device number 50 20:29:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:43 executing program 5: 20:29:43 executing program 0: 20:29:43 executing program 2: 20:29:43 executing program 1: 20:29:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:43 executing program 0: 20:29:43 executing program 1: [ 2879.226040][T11345] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) 20:29:43 executing program 2: [ 2879.328467][T11345] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2879.364861][T11345] EXT4-fs (loop4): get root inode failed [ 2879.371272][T11345] EXT4-fs (loop4): mount failed 20:29:43 executing program 5: 20:29:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:44 executing program 0: [ 2879.922130][T19331] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2880.263765][T11361] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2880.331214][T19331] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2880.336015][T11361] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2880.343524][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2880.355565][T11361] EXT4-fs (loop4): get root inode failed [ 2880.365627][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2880.371378][T11361] EXT4-fs (loop4): mount failed [ 2880.381163][T19331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2880.381337][T19331] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2880.408340][T19331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.750041][T19331] usb 4-1: config 0 descriptor?? [ 2881.488320][T19331] usbhid 4-1:0.0: can't add hid device: -71 [ 2881.494748][T19331] usbhid: probe of 4-1:0.0 failed with error -71 [ 2881.541119][T19331] usb 4-1: USB disconnect, device number 51 20:29:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:46 executing program 1: 20:29:46 executing program 2: 20:29:46 executing program 5: 20:29:46 executing program 0: 20:29:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2882.098305][T11385] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2882.136814][T11385] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2882.152216][T11385] EXT4-fs (loop4): get root inode failed [ 2882.158260][T11385] EXT4-fs (loop4): mount failed 20:29:46 executing program 0: 20:29:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:46 executing program 5: 20:29:46 executing program 1: 20:29:46 executing program 2: [ 2882.743152][T11398] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2882.775330][T11398] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2882.813745][T11398] EXT4-fs (loop4): get root inode failed [ 2882.819877][T11398] EXT4-fs (loop4): mount failed [ 2882.901442][T19331] usb 4-1: new high-speed USB device number 52 using dummy_hcd 20:29:47 executing program 0: [ 2883.320356][T19331] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2883.331670][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2883.342879][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2883.352881][T19331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2883.366330][T19331] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2883.376482][T19331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2883.545254][T19331] usb 4-1: config 0 descriptor?? [ 2884.288393][T19331] usbhid 4-1:0.0: can't add hid device: -71 [ 2884.297501][T19331] usbhid: probe of 4-1:0.0 failed with error -71 [ 2884.357367][T19331] usb 4-1: USB disconnect, device number 52 20:29:48 executing program 5: 20:29:48 executing program 1: 20:29:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:48 executing program 2: 20:29:48 executing program 0: [ 2884.998715][T11430] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) 20:29:49 executing program 0: [ 2885.152674][T11430] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:49 executing program 0: [ 2885.256878][T11430] EXT4-fs (loop4): get root inode failed [ 2885.262950][T11430] EXT4-fs (loop4): mount failed 20:29:49 executing program 1: 20:29:49 executing program 2: 20:29:49 executing program 5: [ 2885.348577][ T4160] usb 4-1: new high-speed USB device number 53 using dummy_hcd 20:29:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000", 0x7, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2885.708534][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2885.719728][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2885.733763][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2885.744053][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2885.757377][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2885.766758][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:50 executing program 1: [ 2886.100994][ T4160] usb 4-1: config 0 descriptor?? [ 2886.257114][T11447] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2886.335468][T11447] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2886.382350][T11447] EXT4-fs (loop4): get root inode failed [ 2886.388317][T11447] EXT4-fs (loop4): mount failed [ 2886.848475][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2886.854904][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2886.891771][ T4160] usb 4-1: USB disconnect, device number 53 20:29:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 20:29:51 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = dup2(r0, r1) bind$inet6(r2, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0xa) 20:29:51 executing program 0: r0 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 20:29:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, 0x0) 20:29:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2887.576673][T11474] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2887.755987][T11474] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2887.878411][T11474] EXT4-fs (loop4): get root inode failed [ 2887.886648][T11474] EXT4-fs (loop4): mount failed 20:29:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0xffffffffffffffee, 0x2}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 20:29:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0xdc}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0xb) 20:29:52 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000, 0xbf}, 0x14) 20:29:52 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x44, 0x0, &(0x7f0000000040)) 20:29:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2888.369586][ T8731] usb 4-1: new high-speed USB device number 54 using dummy_hcd 20:29:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)="a6", 0x1}], 0x1}, 0x0) [ 2888.707612][T11499] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2888.740325][ T8731] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2888.751525][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2888.763046][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2888.773138][ T8731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2888.786479][ T8731] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2888.795836][ T8731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.860878][T11499] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2888.900296][ T8731] usb 4-1: config 0 descriptor?? [ 2888.927614][T11499] EXT4-fs (loop4): get root inode failed [ 2888.933623][T11499] EXT4-fs (loop4): mount failed [ 2889.648514][ T8731] usbhid 4-1:0.0: can't add hid device: -71 [ 2889.655013][ T8731] usbhid: probe of 4-1:0.0 failed with error -71 [ 2889.721515][ T8731] usb 4-1: USB disconnect, device number 54 20:29:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:54 executing program 2: mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) 20:29:54 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000000040)=ANY=[], 0x38) getsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, &(0x7f0000000140)) 20:29:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:54 executing program 1: r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r1 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmdt(r2) shmdt(r2) 20:29:54 executing program 0: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000), 0x8c) [ 2890.724531][T11537] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28213!=0) [ 2890.800469][T11537] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2890.816083][T11537] EXT4-fs (loop4): get root inode failed [ 2890.822104][T11537] EXT4-fs (loop4): mount failed 20:29:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 20:29:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000004c0), 0x10) [ 2891.028822][ T4160] usb 4-1: new high-speed USB device number 55 using dummy_hcd 20:29:55 executing program 2: r0 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 20:29:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 2891.430140][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2891.441795][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2891.453186][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2891.465993][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2891.479593][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2891.488934][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.831963][T11560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 20:29:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x1400}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x1c}], 0x1c}, 0x0) [ 2892.048606][T11560] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2892.101477][ T4160] usb 4-1: config 0 descriptor?? [ 2892.114757][T11560] EXT4-fs (loop4): get root inode failed [ 2892.120825][T11560] EXT4-fs (loop4): mount failed [ 2892.829709][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2892.836149][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2892.880604][ T4160] usb 4-1: USB disconnect, device number 55 20:29:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:29:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000140)="c96b6c242170304cdf34f119e902c117af7e439f81f61874dcd8f72ecc59d7b6231b75fc6b5c1af4281cca66c403858b815f42db773b556f9acc982f461d51c8283524246b090ac3d6935fc3b3b090f52bedb8b9eff34783155fbf22bd731a4161", 0x61, 0x0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 20:29:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) write$P9_RGETATTR(r1, 0x0, 0x0) 20:29:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:29:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, &(0x7f00000000c0)) 20:29:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 2893.667752][T11587] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 20:29:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 20:29:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)='E', 0x1}], 0x1}, 0x0) [ 2893.838533][T11587] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated 20:29:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000040)=""/69, 0xfffffffffffffcf1, 0x0, 0x0, 0x0) 20:29:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x1) [ 2893.932518][T11587] EXT4-fs (loop4): get root inode failed [ 2893.938423][T11587] EXT4-fs (loop4): mount failed [ 2894.088322][ T4160] usb 4-1: new high-speed USB device number 56 using dummy_hcd 20:29:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2894.450240][ T4160] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2894.461457][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2894.472762][ T4160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2894.482889][ T4160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2894.496293][ T4160] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2894.505668][ T4160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:29:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 2894.847240][T11611] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 2894.924898][ T4160] usb 4-1: config 0 descriptor?? [ 2894.931265][T11611] EXT4-fs error (device loop4): ext4_fill_super:4709: inode #2: comm syz-executor.4: iget: root inode unallocated [ 2895.012288][T11611] EXT4-fs (loop4): get root inode failed [ 2895.018417][T11611] EXT4-fs (loop4): mount failed [ 2895.679293][ T4160] usbhid 4-1:0.0: can't add hid device: -71 [ 2895.685736][ T4160] usbhid: probe of 4-1:0.0 failed with error -71 [ 2895.719269][ T4160] usb 4-1: USB disconnect, device number 56 20:30:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:00 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 20:30:00 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="822f136a4e53b9fc32d5d096a147eed33fffabe203976462eae6c073b4e91d2db59dce714d11cce6", 0x28}], 0x1}, 0x0) 20:30:00 executing program 2: setitimer(0x0, &(0x7f00000001c0)={{}, {0x0, 0xbc0}}, 0x0) setitimer(0x0, &(0x7f0000000800), 0x0) 20:30:00 executing program 0: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) 20:30:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2896.656326][T11646] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2896.827378][T11646] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2896.834024][T11646] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 20:30:01 executing program 1: r0 = socket(0x1c, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 20:30:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 2897.066319][T11646] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:30:01 executing program 5: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 20:30:01 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) poll(&(0x7f0000000140)=[{r0, 0x2000}], 0x1, 0x0) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) [ 2897.388707][ T17] usb 4-1: new high-speed USB device number 57 using dummy_hcd 20:30:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2897.778985][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2897.790892][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2897.802107][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2897.813233][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2897.826705][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2897.836048][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:30:02 executing program 5: r0 = socket(0x2, 0x3, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) [ 2898.346871][ T17] usb 4-1: config 0 descriptor?? [ 2898.364120][T11680] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2898.533713][T11680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2898.540329][T11680] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2898.583583][T11680] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2899.102078][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 2899.108674][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 2899.164673][ T17] usb 4-1: USB disconnect, device number 57 20:30:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:03 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r1, &(0x7f0000000080)=""/117, 0x75) writev(r0, &(0x7f00000022c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0xe76}], 0x2) 20:30:03 executing program 0: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) listen(r2, 0x0) 20:30:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)='E', 0x1}], 0x1}, 0x0) 20:30:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/125, 0x7d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x40042) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r3, 0x0) [ 2899.826656][T11707] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2899.979660][T11707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2899.986206][T11707] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 20:30:04 executing program 1: r0 = socket$inet6(0x1c, 0x30000001, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000080)) 20:30:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0x1, 0x0, 0xfffffffffffffe4e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/89, 0x59}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) r6 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400001803c1, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0) shutdown(r5, 0x0) [ 2900.218339][T11707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2900.231711][ T17] usb 4-1: new high-speed USB device number 58 using dummy_hcd 20:30:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect(r0, &(0x7f0000000180)=@un=@abs={0x8}, 0x8) [ 2900.644370][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2900.655709][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2900.667017][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2900.677205][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2900.691469][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2900.700876][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:30:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:05 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="a7", 0x1}], 0x1}, 0x0) 20:30:05 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c) [ 2901.070486][ T17] usb 4-1: config 0 descriptor?? [ 2901.434622][T11751] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2901.471018][T11751] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2901.478206][T11751] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2901.493666][T11751] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2901.821104][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 2901.827539][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 2901.919284][ T17] usb 4-1: USB disconnect, device number 58 20:30:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:06 executing program 0: r0 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 20:30:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f00000001c0)={0x0, 0x0, 0x8001}, 0x8) 20:30:06 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000000040)=ANY=[], 0x38) getsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, &(0x7f0000000080)) 20:30:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:06 executing program 1: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x14) [ 2902.544865][T11775] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:30:06 executing program 2: r0 = socket(0x2, 0x3, 0x0) recvfrom(r0, &(0x7f0000000bc0)=""/145, 0x91, 0x80, 0x0, 0x0) 20:30:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x1c}], 0x1c}, 0x0) [ 2902.717654][T11775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2902.724500][T11775] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 20:30:06 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x53, &(0x7f0000000180)={0x0, {{0x1c, 0x1c}}, {{0x1c, 0x1c, 0x3}}}, 0x108) [ 2902.868817][T11775] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:30:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:07 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000240)="a7", 0x1}], 0x1}, 0x0) 20:30:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x14) [ 2903.530540][T26602] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2903.822000][T11812] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2903.894382][T11812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2903.901408][T11812] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2903.914792][T26602] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2903.926224][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2903.937390][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2903.947418][T26602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2903.961543][T26602] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2903.971089][T26602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2903.990634][T11812] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2904.005278][T26602] usb 4-1: config 0 descriptor?? [ 2904.739281][T26602] usbhid 4-1:0.0: can't add hid device: -71 [ 2904.745730][T26602] usbhid: probe of 4-1:0.0 failed with error -71 [ 2904.764678][T26602] usb 4-1: USB disconnect, device number 59 20:30:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:09 executing program 0: 20:30:09 executing program 1: 20:30:09 executing program 2: 20:30:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:09 executing program 5: [ 2905.608433][T11839] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2905.739318][T11839] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2905.745797][T11839] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 20:30:09 executing program 5: 20:30:09 executing program 0: [ 2905.836201][T11839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:30:10 executing program 1: 20:30:10 executing program 2: 20:30:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:10 executing program 0: [ 2906.409646][ T17] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2906.800379][ T17] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2906.813640][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2906.825952][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2906.836127][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2906.849417][ T17] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2906.858787][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.873029][T11852] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2906.878451][ T17] usb 4-1: config 0 descriptor?? [ 2906.986491][T11852] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2906.993155][T11852] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2907.065926][T11852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2907.384722][ T17] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 2907.409367][ T17] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 2907.455920][ T17] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2907.586518][T26602] usb 4-1: USB disconnect, device number 60 20:30:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:12 executing program 5: 20:30:12 executing program 2: 20:30:12 executing program 1: 20:30:12 executing program 0: 20:30:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:12 executing program 5: [ 2908.600199][T11889] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 20:30:12 executing program 2: [ 2908.723624][T11889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2908.730193][T11889] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2908.759115][T11889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:30:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:12 executing program 1: 20:30:13 executing program 0: [ 2909.331194][T19331] usb 4-1: new high-speed USB device number 61 using dummy_hcd 20:30:13 executing program 2: [ 2909.483096][T11901] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2909.586093][T11901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2909.593896][T11901] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2909.672156][T11901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2909.720474][T19331] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2909.732888][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2909.744366][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2909.754373][T19331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2909.767622][T19331] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2909.776915][T19331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2910.053491][T19331] usb 4-1: config 0 descriptor?? [ 2910.523506][T19331] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 2910.539015][T19331] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 2910.620909][T19331] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2910.735409][T31648] usb 4-1: USB disconnect, device number 61 20:30:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:15 executing program 5: 20:30:15 executing program 1: 20:30:15 executing program 0: 20:30:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:15 executing program 2: 20:30:15 executing program 5: [ 2911.580338][T11934] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2911.692685][T11934] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2911.699323][T11934] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2911.722958][T11934] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 20:30:15 executing program 2: 20:30:15 executing program 0: 20:30:15 executing program 1: 20:30:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2911.948507][T26602] usb 4-1: new high-speed USB device number 62 using dummy_hcd 20:30:16 executing program 5: [ 2912.332371][T26602] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2912.343474][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2912.355690][T26602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2912.365880][T26602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2912.379102][T26602] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2912.388351][T26602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.723965][T26602] usb 4-1: config 0 descriptor?? [ 2912.774729][T11949] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2912.854839][T11949] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2912.861614][T11949] EXT4-fs error (device loop4): ext4_orphan_get:1269: comm syz-executor.4: bad orphan inode 33554432 [ 2912.881127][T11949] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2913.223373][T26602] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 2913.259668][T26602] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 2913.302741][T26602] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2913.426165][T31648] usb 4-1: USB disconnect, device number 62 20:30:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:18 executing program 2: 20:30:18 executing program 0: 20:30:18 executing program 5: 20:30:18 executing program 1: 20:30:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:18 executing program 5: [ 2914.306632][T11986] EXT4-fs (loop4): unsupported descriptor size 0 20:30:18 executing program 1: 20:30:18 executing program 0: 20:30:18 executing program 2: 20:30:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2914.848640][T31648] usb 4-1: new high-speed USB device number 63 using dummy_hcd 20:30:19 executing program 5: [ 2915.210850][T31648] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2915.221928][T31648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2915.233182][T31648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2915.243254][T31648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2915.256492][T31648] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2915.265782][T31648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2915.312025][T31648] usb 4-1: config 0 descriptor?? [ 2915.418449][T12001] EXT4-fs (loop4): unsupported descriptor size 0 [ 2915.803595][T31648] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 2915.829764][T31648] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 2915.883631][T31648] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2916.096555][T19331] usb 4-1: USB disconnect, device number 63 20:30:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:20 executing program 0: 20:30:20 executing program 1: 20:30:20 executing program 2: 20:30:20 executing program 5: 20:30:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2917.154837][T12035] EXT4-fs (loop4): unsupported descriptor size 0 20:30:21 executing program 5: 20:30:21 executing program 1: 20:30:21 executing program 2: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 20:30:21 executing program 0: r0 = msgget(0x1, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) 20:30:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2917.578772][ T7662] usb 4-1: new high-speed USB device number 64 using dummy_hcd 20:30:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) getdents(r0, 0x0, 0x0) [ 2917.963635][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2917.974795][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2917.987448][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2917.997553][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2918.010821][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2918.020122][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.077363][T12049] EXT4-fs (loop4): unsupported descriptor size 0 [ 2918.418666][ T7662] usb 4-1: config 0 descriptor?? [ 2918.905875][ T7662] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 2918.943481][ T7662] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 2919.003658][ T7662] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2919.181710][ T4160] usb 4-1: USB disconnect, device number 64 20:30:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000500)={0x1, ':'}) 20:30:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2}, 0xc) 20:30:23 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 20:30:23 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000240), 0xc) clock_gettime(0x0, &(0x7f0000000180)) 20:30:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs, 0x8) [ 2920.279560][T12096] EXT4-fs (loop4): unsupported descriptor size 0 20:30:24 executing program 0: socket$inet6(0x18, 0x3, 0x2) 20:30:24 executing program 2: r0 = msgget(0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r1 = msgget(0x1, 0x0) msgsnd(r1, 0x0, 0x0, 0x0) 20:30:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 20:30:24 executing program 1: utimes(0x0, &(0x7f00000000c0)={{}, {0x0, 0xfffffffffffffffa}}) 20:30:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2920.789694][ T7662] usb 4-1: new high-speed USB device number 65 using dummy_hcd 20:30:25 executing program 0: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 2921.158990][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2921.170994][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2921.182428][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2921.192412][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2921.205636][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2921.214897][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.458764][ T7662] usb 4-1: config 0 descriptor?? [ 2921.465462][T12117] EXT4-fs (loop4): unsupported descriptor size 0 [ 2921.962984][ T7662] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 2922.025157][ T7662] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 2922.103487][ T7662] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2922.275769][ T7662] usb 4-1: USB disconnect, device number 65 20:30:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 20:30:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 20:30:26 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 20:30:26 executing program 0: r0 = socket(0x18, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) 20:30:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 20:30:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001280)='l2tp\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001440)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600)='nl80211\x00') socket(0x23, 0x4, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 20:30:27 executing program 2: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880)='nl80211\x00') sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) socket(0x8, 0x0, 0x0) [ 2923.214648][T12150] EXT4-fs (loop4): unsupported descriptor size 0 20:30:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003700)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000003480)=[{&(0x7f0000000100)="65a528f0b3fcad522f1b454756f620dbe8c816e8ce4651bbb168fcec7539d0c40efa37be5995ad47f3e957f565e84aadcbfc153809f1067dac0064d1e2609506e3bb8da5af651741fc4c719de466c06559509081a97a62f9395f565e4e47cb9ad4829d0adae7281d5078ed369dc4ade945b10d510d7adb8430cf2cfa900875827b5f7616211c1d4af2bba591c4f58c853d", 0x91}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="b5e264f05d611b8b305f1c586454a8c9ec4284294b577261f0c06428136867f76eb0de91b0d0bb8c0e745e315411b36f491be338e883716fc7a3f7d55b4880b9609cd5c2b40a63c5a5b8ecbbb45ffe8ebabe4eb00d10aa3d529fb242e06ec7123e8eacffae6761e11edcc01da2f129df95123d01d13d61dd0b62c1a0f3b8addec620e3210e1cbb440cb522f354b5a0c52b283f02d85fce1fd002ca1ae03b93d7da9d979a235d2ce8ae154fa819ad674efa32630c7d0c623b92a70c5308fb447d53a761e8870738fbf899dd62bfdfe2e0ea040db17d709603", 0xd8}, {&(0x7f00000012c0)="72433f98d1046ecc7ca877c99959b80ace878239199174341f71d897e57bf6ffdfb31e401c901b601eb110401d71aa09b603a2e14ea0539ca8adebfba45a0b0cd574a64c2b5e9a79a9b1f059b93e6239fb1c602a6ae86a749b7517e49be9", 0x5e}, {&(0x7f0000001340)="f966ae8e570df239f7db34868e3c955ca171d53373ac23f5bdaa44f454f46ff5d8b7d5d80b17daef0bcbf0ff6c3fa8b3b875d44507e903a0fcee9961971086fb98dc5272cec37db43bbed7066d3138dd602b49bf93353628f66533bad9155d79c7ca0ae15f34873cf9d81df358c0bb932497997ad94d41d71540aea13b1c16b6a915036cb44fdfe0668b8fde2935c1d153b12d9be8cf87f2081dbfc186a74126db6c76ac192f88bc74d231232a145d6c37830fd5ae81ba2a3fef3c84bd6f168af836c45c4b775bf3dc8aab8a000e752344bc7998781cd082bf01", 0xda}, {&(0x7f0000001440)="d70ae0a267a0c66f8df9280b967a79e213b0586f2cc01353962075bddc07a766b776e1cc993f049af7b394", 0x2b}, {&(0x7f0000001480)="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", 0xd25}], 0x7}, 0x0) 20:30:27 executing program 5: 20:30:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:27 executing program 1: [ 2923.898674][T26620] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2924.128823][T12173] EXT4-fs (loop4): unsupported descriptor size 0 [ 2924.288892][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2924.300179][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2924.311414][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2924.321438][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2924.335778][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2924.345273][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.570684][T26620] usb 4-1: config 0 descriptor?? [ 2925.034114][T26620] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 2925.065854][T26620] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 2925.117420][T26620] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2925.317187][T31648] usb 4-1: USB disconnect, device number 66 20:30:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 20:30:30 executing program 0: 20:30:30 executing program 2: 20:30:30 executing program 5: 20:30:30 executing program 1: 20:30:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2926.277540][T12212] EXT4-fs (loop4): unsupported descriptor size 0 20:30:30 executing program 5: 20:30:30 executing program 0: 20:30:30 executing program 2: 20:30:30 executing program 1: [ 2926.779427][T26620] usb 4-1: new high-speed USB device number 67 using dummy_hcd 20:30:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:31 executing program 0: [ 2927.194032][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2927.205991][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2927.217386][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2927.227374][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2927.240600][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2927.249843][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2927.462210][T12225] EXT4-fs (loop4): unsupported descriptor size 0 [ 2927.472509][T26620] usb 4-1: config 0 descriptor?? [ 2927.964550][T26620] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 2927.980137][T26620] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 2928.010866][T26620] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2928.238201][ T8731] usb 4-1: USB disconnect, device number 67 20:30:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 20:30:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000040)) 20:30:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x24}}], 0x10}, 0x0) 20:30:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="d6", 0x1) 20:30:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1f) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000180)) 20:30:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2929.088174][T12258] EXT4-fs (loop4): unsupported descriptor size 0 20:30:33 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) 20:30:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000006060b0b0000000000000000000000020900030073797a30000085000900030073797a30000000000900030073790000f5"], 0x4c}}, 0x0) 20:30:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000100001"], 0x24}}, 0x0) 20:30:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003e80)=@deltfilter={0x24, 0x2d, 0x1505}, 0x24}}, 0x0) [ 2929.593777][T26620] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2929.667781][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2929.731605][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2929.849604][T12276] EXT4-fs (loop4): unsupported descriptor size 0 20:30:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x13, 0x0, 0x0) [ 2929.989922][T26620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2930.002382][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2930.013905][T26620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2930.023893][T26620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2930.037121][T26620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2930.046377][T26620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.389678][T26620] usb 4-1: config 0 descriptor?? [ 2930.884198][T26620] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 2930.914004][T26620] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 2930.938250][T26620] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2931.164715][ T7662] usb 4-1: USB disconnect, device number 68 20:30:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)) 20:30:35 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="080100001200110727bd7000fedbdf252c08000000000000000000800600000000080000bd8900001f620000b6d3000000", @ANYBLOB="0900000007000000010000000000000096000100ff"], 0x108}}, 0x0) 20:30:35 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000100)={@random="753a63ce6000", @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "db9dcb", 0x4c, 0x2c, 0x0, @remote, @local, {[@fragment={0x2f}]}}}}}, 0x0) 20:30:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x40}, 0x40) 20:30:35 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000680)) 20:30:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf}, 0x40) 20:30:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x50}}, 0x0) [ 2932.115617][T12317] EXT4-fs (loop4): unsupported descriptor size 0 20:30:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@mark={{0x14}}], 0x18}, 0x0) 20:30:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x6, "336f47914feb"}}) 20:30:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2932.559973][ T7662] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2932.741403][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2932.827534][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:30:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2932.980797][ T7662] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2932.991872][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2933.003080][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2933.013758][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2933.026990][ T7662] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2933.036250][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2933.319778][T12334] EXT4-fs (loop4): unsupported descriptor size 0 [ 2933.430618][ T7662] usb 4-1: config 0 descriptor?? [ 2933.916783][ T7662] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 2933.928387][ T7662] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 2933.983872][ T7662] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2934.208481][ T7662] usb 4-1: USB disconnect, device number 69 20:30:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)) 20:30:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f0000000040)) 20:30:38 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000740)='ethtool\x00') 20:30:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000040), &(0x7f0000000100)=0xfffffffffffffd12) 20:30:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0), 0x4) 20:30:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2935.021579][T12368] EXT4-fs (loop4): unsupported descriptor size 0 20:30:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000001dc0)={&(0x7f0000001bc0)=@can, 0x80, 0x0}, 0x0) 20:30:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10, 0x2}}], 0x10}, 0x0) 20:30:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x40815) 20:30:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xf1, &(0x7f0000000100)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2935.458238][T19331] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2935.772331][T12385] EXT4-fs (loop4): unsupported descriptor size 0 [ 2935.840645][T19331] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2935.851883][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2935.863104][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2935.873102][T19331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 20:30:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB='\a']}) [ 2935.886346][T19331] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2935.895636][T19331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.225558][T19331] usb 4-1: config 0 descriptor?? [ 2936.713315][T19331] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 2936.749481][T19331] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 2936.793618][T19331] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2937.006353][T19331] usb 4-1: USB disconnect, device number 70 20:30:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)) 20:30:41 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'vlan1\x00'}) 20:30:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001e00)={'\x00', 0x0}) 20:30:41 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000680)={@random="753a63ce00", @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "cb9d8b", 0x44, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 20:30:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0), 0x4) [ 2937.925239][T12435] EXT4-fs (loop4): unsupported descriptor size 0 20:30:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x2, 0x10, 0x401}, 0x14}}, 0x0) 20:30:42 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x1}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000b00)=""/202, 0x46, 0xca, 0x1}, 0x20) 20:30:42 executing program 2: pipe(&(0x7f0000000880)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000001740)={@rand_addr=' \x01\x00', @empty, @private2}) 20:30:42 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000680)) 20:30:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2938.409734][T19331] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2938.789044][T19331] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2938.800481][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2938.813065][T19331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2938.824076][T19331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 20:30:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}], 0x20}, 0x0) [ 2938.837306][T19331] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2938.846571][T19331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2939.004210][T12453] EXT4-fs (loop4): unsupported descriptor size 0 [ 2939.442252][T19331] usb 4-1: config 0 descriptor?? [ 2939.923217][T19331] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 2939.940591][T19331] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 2939.990627][T19331] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 2940.193856][T19331] usb 4-1: USB disconnect, device number 71 20:30:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1b, 0x19}, 0x40) 20:30:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x40}, 0x40) 20:30:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x4}}, {0x8}, {0x6}, {0x8}}]}, 0x50}}, 0x0) 20:30:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:44 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14}, 0x14}}, 0x0) 20:30:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0)=0x10000, 0x4) [ 2941.152947][T12492] EXT4-fs (loop4): unsupported descriptor size 0 [ 2941.197745][T12498] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2941.206631][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:30:45 executing program 2: socket$inet6(0xa, 0x0, 0x7f) 20:30:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:45 executing program 5: 20:30:45 executing program 0: 20:30:45 executing program 1: 20:30:46 executing program 3: [ 2942.083491][T12510] EXT4-fs (loop4): unsupported descriptor size 0 20:30:46 executing program 5: 20:30:46 executing program 2: 20:30:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:46 executing program 0: 20:30:46 executing program 1: 20:30:46 executing program 3: 20:30:47 executing program 5: [ 2943.146898][T12527] EXT4-fs (loop4): unsupported descriptor size 0 20:30:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:47 executing program 2: 20:30:47 executing program 0: 20:30:47 executing program 1: 20:30:47 executing program 3: [ 2943.870834][T12535] EXT4-fs (loop4): unsupported descriptor size 0 20:30:48 executing program 2: 20:30:48 executing program 5: 20:30:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:48 executing program 0: 20:30:48 executing program 1: 20:30:48 executing program 3: 20:30:48 executing program 5: 20:30:48 executing program 2: [ 2944.796281][T12547] EXT4-fs (loop4): unsupported descriptor size 0 20:30:49 executing program 3: 20:30:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:49 executing program 0: 20:30:49 executing program 1: 20:30:49 executing program 5: 20:30:49 executing program 2: 20:30:49 executing program 0: 20:30:49 executing program 3: [ 2945.555051][T12558] EXT4-fs (loop4): unsupported descriptor size 0 20:30:49 executing program 5: 20:30:49 executing program 1: 20:30:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:50 executing program 2: 20:30:50 executing program 0: 20:30:50 executing program 5: [ 2946.397255][T12569] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:50 executing program 3: 20:30:50 executing program 1: 20:30:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:50 executing program 2: 20:30:51 executing program 0: 20:30:51 executing program 5: 20:30:51 executing program 3: [ 2947.296295][T12579] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:51 executing program 1: 20:30:51 executing program 2: 20:30:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:51 executing program 0: 20:30:51 executing program 3: 20:30:52 executing program 5: 20:30:52 executing program 1: [ 2948.121896][T12591] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:52 executing program 0: 20:30:52 executing program 2: 20:30:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:52 executing program 3: 20:30:52 executing program 5: 20:30:52 executing program 1: 20:30:52 executing program 0: 20:30:53 executing program 2: [ 2949.003380][T12601] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:53 executing program 3: 20:30:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2949.991912][T12613] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:54 executing program 5: 20:30:54 executing program 0: 20:30:54 executing program 2: 20:30:54 executing program 1: 20:30:54 executing program 3: 20:30:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:54 executing program 5: 20:30:54 executing program 0: 20:30:55 executing program 2: 20:30:55 executing program 1: [ 2950.878117][T12623] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:55 executing program 3: 20:30:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:55 executing program 5: 20:30:55 executing program 0: 20:30:55 executing program 3: 20:30:55 executing program 1: 20:30:55 executing program 2: [ 2951.828469][T12633] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:56 executing program 3: 20:30:56 executing program 5: 20:30:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:56 executing program 0: 20:30:56 executing program 1: 20:30:56 executing program 2: 20:30:56 executing program 3: 20:30:56 executing program 5: [ 2952.708622][T12646] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:57 executing program 0: 20:30:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:57 executing program 1: 20:30:57 executing program 2: 20:30:57 executing program 5: 20:30:57 executing program 3: 20:30:57 executing program 0: [ 2953.607987][T12658] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:57 executing program 1: 20:30:57 executing program 5: 20:30:57 executing program 2: 20:30:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$NS_GET_PARENT(r0, 0x5421, 0x748000) 20:30:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8980, 0x0) 20:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 20:30:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 20:30:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x840) [ 2954.654217][T12672] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x10e, 0x5, 0x0, 0x0) 20:30:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:30:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:30:59 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5421, &(0x7f0000000080)) 20:30:59 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) 20:30:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$sock_proto_private(r1, 0x5451, 0x0) 20:30:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKDISCARD(r1, 0x1277, 0x0) [ 2955.695983][T12694] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:30:59 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) 20:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}}, 0x90) 20:31:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x2f, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]}, 0x1c}}, 0x0) 20:31:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) [ 2956.365486][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:31:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="9bdb21f8f9cdc5d2477d1d82a9f8a3162ed4ac427c76c8ee53f085fedf2264440f5dc6898d9c9783f7cb1eb9d3b2c0ca7a468eb100fdd7ebc4379ebb582c3d4a431b99a0b2d9d0c65ff5daa72b086c1da78b2f99fdf69eacc3cd7a6bbbba380c4a9ef8019fc85424f0c332996250a2bf41a9d4c637596d79f20b0e1a8239b06cfad4219c079381b594ccc39538505da085465b9bb872ff9144db8a6b321ab489a7f4a944831f6b1bec42f71106106af2c667cea96fca4c8c76fc770a403a21f0ab5e0f7ece50587de188bc147cd739c76cc5e26f2245a7dca1bedd6c2e6f3063ca15cce30c046aa599e8572e8ce20101d1023ce7574f0c", 0x0, 0x890, 0x0, 0xfffffffffffffd1f) [ 2956.415204][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) write$9p(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = gettid() tkill(r2, 0x1000000000016) 20:31:00 executing program 1: futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) [ 2956.855623][T12730] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:31:01 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 20:31:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write$binfmt_aout(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) 20:31:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) 20:31:01 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:31:01 executing program 1: r0 = epoll_create(0x2) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:31:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x125f, 0x0) [ 2957.775996][T12757] EXT4-fs (loop4): invalid first ino: 0 20:31:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x5451, r1) 20:31:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:02 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x5421, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 20:31:02 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 20:31:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2958.494475][T12773] EXT4-fs (loop4): invalid first ino: 0 20:31:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004) write$P9_RMKDIR(r1, 0x0, 0x0) shutdown(r1, 0x0) 20:31:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:03 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r1 = dup(r0) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, 0x0) 20:31:03 executing program 2: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:03 executing program 1: setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x4, [], [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @mcast2}]}, 0xffffffffffffff18) 20:31:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xf, &(0x7f0000000000)={0x0, 'macvtap0\x00'}, 0x18) 20:31:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2959.532594][T12797] EXT4-fs (loop4): invalid first ino: 0 20:31:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 20:31:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1ee1d5e4b2d8ef670ffbaae834ccc8ffe1ea4d"}) 20:31:03 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:31:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:04 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14}, 0x14) [ 2960.233956][T12821] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000087c6c74645bb073b8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) 20:31:04 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000140)) 20:31:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = creat(&(0x7f0000001900)='./file0\x00', 0x0) dup2(r0, r1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b44, &(0x7f0000000240)) 20:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x15, 0x0, &(0x7f0000000140)) 20:31:05 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 20:31:05 executing program 2: r0 = epoll_create(0x800) close(r0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2961.036327][T12841] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x50) 20:31:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:05 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 20:31:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980)='/proc/thread-self\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 20:31:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) [ 2961.787073][T12859] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, 0x0) 20:31:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) 20:31:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 20:31:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001ec0)='/dev/vcs#\x00', 0x0, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) 20:31:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) 20:31:06 executing program 2: r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) 20:31:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x4b, 0x0, 0x73) [ 2962.876621][T12876] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:07 executing program 1: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0, 0x34}}, 0x0) 20:31:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040000) 20:31:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:31:07 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 20:31:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x5452, &(0x7f0000000000)) 20:31:07 executing program 1: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) [ 2963.936994][T12901] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:08 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 20:31:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004010) 20:31:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffb5}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() tkill(r2, 0xa001004000000016) 20:31:08 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0x5) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) 20:31:08 executing program 3: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 20:31:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x244203, 0x2) 20:31:09 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioprio_get$uid(0x3, r0) [ 2965.019535][T12925] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:09 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20040, 0x0) r0 = getgid() lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) 20:31:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 20:31:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2966.354807][T12943] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:10 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) pread64(r1, 0x0, 0x0, 0x0) 20:31:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001080), 0x8) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:31:10 executing program 5: r0 = socket(0x2, 0x3, 0x20) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)) 20:31:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x0) ioctl$EVIOCGID(r0, 0x80084502, 0x0) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x400000841, 0x0) dup3(r0, r1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 20:31:11 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, 0x0, 0x0) 20:31:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2967.372105][T12967] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e27edc0dfffbff120061fffff300"}) r1 = syz_open_pts(r0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) 20:31:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) 20:31:11 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8903, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x531, 0x0, 0xfffffffffffffed0, 0x0, 0x0}) [ 2967.918077][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:31:12 executing program 1: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000000)) r0 = socket(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 20:31:12 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) write$P9_RSTATu(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) [ 2968.297286][T12990] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff43}}, 0x0) 20:31:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 20:31:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) 20:31:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040000) [ 2969.461645][T13009] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp\x00') r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:14 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffee3}}, 0x0) 20:31:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:14 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 20:31:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x5421, 0x400002) 20:31:14 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) 20:31:14 executing program 2: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2970.572210][T13031] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:14 executing program 1: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:15 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000400)) 20:31:15 executing program 2: 20:31:15 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2971.095826][T13041] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 20:31:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20008040) 20:31:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:15 executing program 1: uname(&(0x7f0000000180)=""/70) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) 20:31:15 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 20:31:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xe163c41135e34c3e, 0x0) 20:31:16 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 20:31:16 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2972.119802][T13058] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:31:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:31:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 20:31:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:16 executing program 5: r0 = inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) bind$netlink(r2, &(0x7f0000000040), 0x44) 20:31:16 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x18041, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20:31:17 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:31:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1128467587f1b541, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4008000, 0x0, 0xfe55) 20:31:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5451, 0x0) [ 2973.253414][T13085] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:31:17 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000140)) 20:31:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f0000000040)) 20:31:17 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:31:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x24000000) 20:31:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 20:31:18 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2974.769996][T13113] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:31:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') write$9p(r0, 0x0, 0x0) 20:31:19 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x5450, 0x0) 20:31:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x0, &(0x7f0000000040)) 20:31:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x2004c814) 20:31:19 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4) 20:31:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000680)) [ 2975.720075][T13133] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2975.729717][T13133] EXT4-fs (loop4): group descriptors corrupted! 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x540b, 0x0) 20:31:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 20:31:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 20:31:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x0, &(0x7f0000000040)) 20:31:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() tkill(r2, 0x401004000000016) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:31:20 executing program 5: r0 = socket(0x11, 0xa, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) 20:31:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) inotify_init() r2 = gettid() tkill(r2, 0x13) 20:31:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x90) [ 2976.687612][T13152] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2976.697257][T13152] EXT4-fs (loop4): group descriptors corrupted! 20:31:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xffffffffffffffc9) setuid(r1) 20:31:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x0, &(0x7f0000000040)) 20:31:21 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x2004c814) 20:31:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 20:31:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FIONREAD(r0, 0x8953, &(0x7f0000000200)) [ 2977.656317][T13174] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2977.665887][T13174] EXT4-fs (loop4): group descriptors corrupted! 20:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:31:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@routing, 0x8) 20:31:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, 0x0) 20:31:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0) 20:31:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc, 0x0, 0x0) 20:31:22 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:31:22 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002440)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:23 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FIONCLEX(r0, 0x5450) 20:31:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, 0x0) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x540a, 0x0) 20:31:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x400c050) 20:31:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 20:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) tkill(r2, 0x1000000000016) 20:31:23 executing program 1: r0 = open(&(0x7f00000009c0)='./file0\x00', 0x40440, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:31:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, 0x0) 20:31:23 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 20:31:23 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x5452, &(0x7f0000000000)) 20:31:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:31:24 executing program 1: r0 = socket(0x10, 0x3, 0x2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:24 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 20:31:24 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x89001, 0x0) write$tun(r0, 0x0, 0x0) 20:31:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 20:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x8901, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @local}}) 20:31:25 executing program 1: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:31:26 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x541b, 0x960000) 20:31:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) write$P9_RSETATTR(r4, 0x0, 0x0) dup2(r4, r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:31:26 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/51, 0x33}], 0x1}, 0x0) shutdown(r0, 0x0) 20:31:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) 20:31:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, &(0x7f0000001440)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x3200}}], 0x1c}, 0x0) 20:31:26 executing program 1: r0 = memfd_create(&(0x7f0000000300)='c\x9c\\\xd4\xa4-K\x98.U\xb4#\xe1)\x94:\x04\xff\x96\x13\xae\x83\x1d##\xe8A\x0fB\x13\xb7\xc9\xcc\x8c\xacn(sN\xe4\xfb?\xc5\xd0\"`\n)\xf0\xfc\xfb\x8fY\xa8\xc8\xa6\xe7\x97\xac3\'\x02m\xc1\xbfBR\xbe\xef\xb16\xe57\xb9\x13\xc4\x81j\x10\xaf\x95e|\x90\xf7\x99V\xfa\xc0&\xf2\xb8N\xb6\x1d\x8cG\xb9\xe7\xa5\x1d&\xc1\b\x8b\x88\x144r?3\xb6\x01#\xe2\x8c`QV\x9eA\xe4\x88C\x81\xc5\x01P\xd1^=', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xa5ff) creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) 20:31:26 executing program 2: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) close(r0) socket$inet(0x10, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:27 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) 20:31:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 20:31:27 executing program 0: r0 = memfd_create(&(0x7f0000000280), 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_cred(r0, 0x29, 0x14, 0x0, 0x300) 20:31:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:28 executing program 4: timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000003c40)="c2f54b4d90c42a066e07ad57a02cf08c872c96e04bfa5df0ab86", 0x1a}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r0, r2, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 20:31:28 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:31:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 20:31:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) dup2(r1, r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 20:31:29 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:31:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:31:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x114) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 20:31:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 20:31:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 20:31:29 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x890c, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) 20:31:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:30 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) close(r0) creat(&(0x7f0000000600)='./file1\x00', 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 20:31:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) write$P9_RLERROR(r1, 0x0, 0x0) 20:31:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480)=0x100000001, 0x4) r1 = gettid() tkill(r1, 0x1000000000016) 20:31:30 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x13, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0x2c) 20:31:30 executing program 5: r0 = inotify_init() close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000440)) 20:31:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000000)={@rand_addr=' \x01\x00'}, 0x20) 20:31:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x5451, 0x0) 20:31:31 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x12, 0x0, 0x0) 20:31:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:31 executing program 5: sched_rr_get_interval(0x0, &(0x7f00000002c0)) 20:31:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000005c0)=0x6, 0x4) 20:31:31 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000005540)='./file0\x00', 0x4840, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x2d8a00, 0x0) 20:31:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x3) 20:31:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) write$P9_RREADDIR(r1, 0x0, 0x0) 20:31:32 executing program 3: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5411, 0xd04a00) [ 2988.394240][ T27] audit: type=1800 audit(1603053092.466:53): pid=13378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15907 res=0 errno=0 [ 2988.416058][ T27] audit: type=1800 audit(1603053092.486:54): pid=13378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15907 res=0 errno=0 20:31:32 executing program 1: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x21, 0x0, &(0x7f0000000180)) 20:31:32 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 20:31:32 executing program 4: process_vm_readv(0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, &(0x7f0000002880)=[{&(0x7f0000001400)=""/88, 0x58}], 0x1, 0x0) 20:31:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 20:31:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x29, 0x14, 0x0, 0x300) 20:31:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0xa, 0x3, 0x1f) r2 = gettid() tkill(r2, 0x1000000000016) 20:31:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, &(0x7f0000000000)={'wlan1\x00'}) 20:31:33 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5450, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000000)) 20:31:33 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) dup2(r1, r0) pwrite64(r0, 0x0, 0x0, 0x0) 20:31:33 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) 20:31:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, 0x0) 20:31:34 executing program 5: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 20:31:34 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:34 executing program 1: r0 = socket(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup2(r0, r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 20:31:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = dup3(r2, r5, 0x0) ioctl$KDDISABIO(r6, 0x4b37) 20:31:34 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 20:31:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0xc, 0x0, 0x0) 20:31:34 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) 20:31:35 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000), 0x4) 20:31:35 executing program 4: r0 = eventfd(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x802c542a, &(0x7f0000000180)) 20:31:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 20:31:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) 20:31:35 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000a80)) 20:31:35 executing program 1: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0xc000, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 20:31:35 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:31:36 executing program 4: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8901, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8901, &(0x7f0000000040)={'syztnl0\x00', 0x0}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x8041, 0x33, @initdev={0xfe, 0x88, [], 0xfd, 0x0}, 0xa}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8901, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8901, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@remote, 0x1b, r6}) r7 = dup(r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2992.086649][T13459] device lo entered promiscuous mode [ 2992.134616][T13457] device lo left promiscuous mode 20:31:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x8800) [ 2992.180713][T13462] device lo entered promiscuous mode [ 2992.227976][T13457] device lo left promiscuous mode 20:31:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 20:31:36 executing program 3: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 20:31:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2) write$P9_RSTATFS(r0, 0x0, 0x0) 20:31:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:31:37 executing program 2: r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r3 = dup2(r1, r2) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 20:31:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000040)) 20:31:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000180)={0x6, 'macvlan0\x00'}) 20:31:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 20:31:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:31:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) write$vga_arbiter(r1, 0x0, 0x0) 20:31:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:31:38 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_aout(r1, 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r0, 0x1000000000015) 20:31:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0xb, 0x0, &(0x7f00000000c0)) 20:31:38 executing program 1: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/232) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x80) r1 = socket(0x2, 0x3, 0x7fffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000740)={&(0x7f0000000480), 0xc, &(0x7f0000000700)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfff}) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x7) 20:31:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x50}}, 0x4) 20:31:38 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) 20:31:38 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TCSETXF(r1, 0x540a, 0x0) 20:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4048084) 20:31:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) ioctl$TCSETXW(r1, 0x5427, 0x0) 20:31:39 executing program 3: r0 = socket(0x10, 0x3, 0x2) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x17, 0x0, 0x0) 20:31:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 20:31:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:31:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:31:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) write$evdev(r1, 0x0, 0x0) 20:31:39 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 20:31:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 20:31:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setown(r0, 0x8, 0x0) 20:31:40 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) unlink(&(0x7f0000000680)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) dup2(r1, r2) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file1\x00') readlinkat(r2, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/71, 0x47) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:31:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x800) 20:31:40 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:31:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f00000000c0)) 20:31:40 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x146b6e9ec0eb48ce) 20:31:41 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x10000000000001, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r3, 0x0) dup2(r3, r2) accept4$inet(r2, 0x0, 0x0, 0x0) 20:31:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r0) creat(&(0x7f0000000300)='./file0\x00', 0x0) tkill(r1, 0x1000000000016) 20:31:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffe72}}, 0x0) 20:31:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) 20:31:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(r0, 0x5452, &(0x7f0000000080)) 20:31:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x24000000) 20:31:42 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 20:31:42 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000700)='gtp\x00') 20:31:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) tkill(r2, 0x1000000000016) 20:31:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x2000c0d1) 20:31:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 20:31:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) tkill(r2, 0x401004000000016) 20:31:42 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 20:31:43 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) bind$inet6(r0, 0x0, 0x28) 20:31:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 20:31:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x10000, 0x0) flistxattr(r0, 0x0, 0x0) 20:31:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xc373d0b) unlink(&(0x7f0000000680)='./file0\x00') stat(&(0x7f0000000080)='./file1\x00', 0x0) 20:31:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x8008) 20:31:44 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4085) 20:31:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000080)={0x0, 0x2a5, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:46 executing program 2: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) signalfd4(r1, &(0x7f00000005c0), 0x8, 0x0) 20:31:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:46 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:31:50 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc0) 20:31:50 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000001ac0)=""/11, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 20:31:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x5452, &(0x7f0000000000)={'wg0\x00'}) 20:31:50 executing program 5: r0 = eventfd(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={0x0}}, 0x0) 20:31:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 20:31:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) 20:31:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x46, 0x0, 0xffcc) 20:31:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) 20:31:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000ca070000000000000003bcb0d800"}) r1 = syz_open_pts(r0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x2, 0x960000) 20:31:50 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETXW(r0, 0x5427, 0x0) 20:31:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r1, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:31:51 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$inet6(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 20:31:51 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20442, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 20:31:51 executing program 3: socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:31:51 executing program 0: r0 = epoll_create(0x10000) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)) 20:31:52 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x42, 0x0) 20:31:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x200000100000001, 0x1eb) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) write$cgroup_type(r1, 0x0, 0x0) 20:31:52 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 20:31:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 20:31:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:31:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) setsockopt(r1, 0x1, 0x5, &(0x7f00000002c0)="7054d63f", 0x4) 20:31:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 3008.859298][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:31:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000040)={'batadv_slave_0\x00'}) 20:31:53 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:31:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000000480)=0x100000001, 0x6c64f6956a8bc116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RATTACH(r1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:31:53 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x623, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x5452, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 20:31:53 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:31:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) 20:31:53 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x2000, 0x0) 20:31:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 20:31:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/190) bind$netlink(r0, &(0x7f0000000040), 0xc) 20:31:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:31:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 20:31:55 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x19, 0x0, 0x0) 20:31:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:31:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4c040) 20:31:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000000480)=0x100000001, 0x6c64f6956a8bc116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RATTACH(r1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:31:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:31:56 executing program 1: r0 = inotify_init() close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000003c0), 0x4) 20:31:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "1cab26be6bd976a6c16bc5b10724cd2e3d14ed"}) 20:31:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000001) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x400) tkill(r2, 0x1000000000016) 20:31:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) ioctl$TUNSETVNETHDRSZ(r0, 0x5452, &(0x7f0000000040)) 20:31:57 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x43, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 20:31:57 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4804) 20:31:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) 20:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040000) 20:31:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_rr_get_interval(r1, &(0x7f0000000080)) 20:31:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bridge0\x00'}) 20:31:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000000480)=0x100000001, 0x6c64f6956a8bc116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RATTACH(r1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:31:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 20:31:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x90) 20:31:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f00000001c0)={@dev, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00'}) 20:31:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_buf(r1, 0x0, 0x22, &(0x7f0000000140)="8c", 0x1) 20:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r0, 0x10e, 0x5, 0x0, 0x3) 20:31:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001900)) 20:31:59 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 20:31:59 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:31:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x29, 0x3e, 0x0, 0x0) 20:32:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) 20:32:00 executing program 4: prctl$PR_GET_FPEXC(0x23, 0x0) 20:32:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000013, &(0x7f0000000480)=0x100000001, 0x6c64f6956a8bc116) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RATTACH(r1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:32:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) dup2(r0, r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcsa\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) 20:32:01 executing program 2: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={0x0}}, 0x0) 20:32:01 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 20:32:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2a, 0x0, &(0x7f0000000000)) 20:32:01 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') flock(r0, 0x5) 20:32:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:32:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200003d9) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:32:02 executing program 4: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:32:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0) 20:32:02 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52842, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1008, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) 20:32:03 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:03 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={0x0}}, 0x0) 20:32:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x2) tkill(r1, 0x1000000000016) 20:32:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x538) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r3) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0xf, 0x0, &(0x7f0000000100)=0xba) 20:32:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x2d3) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:32:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$BLKBSZSET(r0, 0x5452, &(0x7f00000001c0)) 20:32:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001200), 0x0, 0x10101, 0x0) 20:32:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5450, 0x0) 20:32:04 executing program 5: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:32:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8902, &(0x7f0000000340)={'\x00', {0x2, 0x0, @empty}}) 20:32:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop-control\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 20:32:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') dup3(r0, r1, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:32:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x10040) 20:32:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x3e) 20:32:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) mmap(&(0x7f00001ea000/0x2000)=nil, 0x2000, 0x0, 0x1031, r0, 0x0) 20:32:05 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) dup3(r1, r0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 20:32:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 20:32:05 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:32:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x2b) 20:32:06 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 20:32:06 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 20:32:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001840)=0x80) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) 20:32:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, 0x0) 20:32:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x29, 0x30, 0x0, 0xfd40) 20:32:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:32:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x10, 0x0, 0x15d0) 20:32:07 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:32:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) read$eventfd(r2, 0x0, 0x0) 20:32:07 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x10, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:32:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x14, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 20:32:07 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x10e, 0x4, 0x0, 0x0) 20:32:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000200)=0x80) ioctl$sock_SIOCADDRT(r1, 0x5421, &(0x7f0000000180)={0x0, @nl=@unspec, @isdn, @in={0x2, 0x0, @broadcast}}) 20:32:07 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000180)) 20:32:08 executing program 0: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) 20:32:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) write$cgroup_int(r1, 0x0, 0x0) 20:32:08 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 20:32:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) r2 = gettid() tkill(r2, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) 20:32:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0}}, 0x4800) 20:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r1) dup(r0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x540c, 0x0) 20:32:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x67a) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 20:32:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x88) 20:32:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x14, &(0x7f00000059c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 20:32:09 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003000000c8"], 0x28) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:32:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000b80)=0x80) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x2, &(0x7f0000000080)) 20:32:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10002080) 20:32:10 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0) 20:32:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x5451, 0x0) 20:32:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_RELDISP(r1, 0x5605) 20:32:14 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:32:14 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) 20:32:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x1d2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f0000000000)={@rand_addr=' \x01\x00'}, 0x20) 20:32:14 executing program 3: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0) 20:32:14 executing program 0: capset(&(0x7f0000000800)={0x19980330}, &(0x7f0000000840)) r0 = creat(&(0x7f0000000700)='./file0\x00', 0x0) fsetxattr(r0, &(0x7f0000000440)=@known='user.syz\x00', 0x0, 0x0, 0x0) 20:32:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x0) 20:32:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffff88}}, 0x0) 20:32:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400000a03600003000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 20:32:15 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:32:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000015c0)) 20:32:15 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 20:32:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMSET(r0, 0x541b, &(0x7f0000000000)) 20:32:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2000c804) 20:32:15 executing program 0: r0 = socket(0xa, 0x3, 0xffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:32:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x36, 0x0, &(0x7f0000000000)) 20:32:16 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x708}}, 0x0) 20:32:16 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2}}) 20:32:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0x0) 20:32:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 20:32:16 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0xfffffff9) 20:32:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 20:32:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:32:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40400c1) 20:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 20:32:17 executing program 0: r0 = geteuid() ioprio_get$uid(0x3, r0) 20:32:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RFSYNC(r0, 0x0, 0x0) 20:32:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 20:32:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:32:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:32:18 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:18 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) getpeername(r1, 0x0, &(0x7f00000000c0)) 20:32:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320af) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RXATTRWALK(r0, 0x0, 0xfffffeca) 20:32:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x190}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x5450, 0x0) 20:32:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xff7fb939}, 0x1c) tkill(r2, 0x1000000000016) 20:32:24 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28) write(r1, 0x0, 0x0) r2 = dup2(r1, r0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:32:24 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 20:32:24 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001380)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 20:32:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x8050) 20:32:24 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSABS20(r0, 0x5451, 0x0) 20:32:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 20:32:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 20:32:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TUNSETSNDBUF(r1, 0x5452, &(0x7f0000000000)) 20:32:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 20:32:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 20:32:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 20:32:25 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) 20:32:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) 20:32:25 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) write$nbd(r0, &(0x7f00000000c0), 0x10) 20:32:26 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x5452, &(0x7f0000000080)) 20:32:26 executing program 4: r0 = epoll_create1(0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:26 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xffffffe8) r1 = dup(r0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) 20:32:26 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) 20:32:26 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000180)={0x0, "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"}) 20:32:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKRRPART(r0, 0x5450, 0x0) 20:32:27 executing program 0: setrlimit(0x7, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) 20:32:27 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x10) 20:32:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:32:27 executing program 3: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x1) 20:32:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00'}) 20:32:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:32:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={0x0}}, 0x20000000) 20:32:32 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:32 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 20:32:32 executing program 5: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) sendto(r0, &(0x7f00000007c0), 0x0, 0x4000800, 0x0, 0x0) 20:32:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) dup(r1) 20:32:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) 20:32:32 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x88040, 0xb8) 20:32:33 executing program 3: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) 20:32:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:32:33 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 20:32:33 executing program 1: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8800, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 20:32:33 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f00000000c0)) 20:32:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x29, 0x6, 0x0, 0x0) 20:32:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/185, 0xb9) 20:32:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x5078ff) 20:32:34 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) 20:32:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:32:34 executing program 2: r0 = epoll_create(0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x5451, 0x0) 20:32:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0) 20:32:34 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 20:32:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) ioctl(r1, 0x2, &(0x7f0000000100)) 20:32:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x68001) write$P9_RREMOVE(r0, 0x0, 0x0) 20:32:35 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5428, 0x0) 20:32:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1fc}}, 0x0) 20:32:35 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 20:32:35 executing program 1: r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:35 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') ioctl$TUNSETNOCSUM(r0, 0x541b, 0x805400) 20:32:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) 20:32:35 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 20:32:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 20:32:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3, 0x1c) 20:32:36 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000380)=ANY=[], 0x0, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 20:32:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmmsg$sock(r0, &(0x7f0000003e80)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x2, 0xa, 0x0) tkill(r1, 0x1000000000016) 20:32:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x8000) 20:32:36 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = epoll_create(0xba0) dup3(r0, r1, 0x0) write$vga_arbiter(r1, 0x0, 0x0) 20:32:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 20:32:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x2021, 0x0, 0x0) 20:32:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4004004) 20:32:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:32:37 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$netlink(r0, 0x0, &(0x7f0000000140)) 20:32:37 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x140, 0x0) 20:32:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@multicast1, @multicast2, r2}, 0xc) 20:32:37 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = fcntl$dupfd(r0, 0x0, r2) recvfrom$unix(r3, 0x0, 0xfffffdb2, 0x10002, 0x0, 0xfffffffffffffe1c) 20:32:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f00000000c0)) 20:32:37 executing program 4: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 20:32:37 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) 20:32:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) 20:32:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 20:32:38 executing program 0: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) 20:32:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x10e, 0x5, 0x0, 0x0) 20:32:38 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1b, &(0x7f0000000080)={0x0}}, 0x4010) 20:32:38 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5409, 0x0) 20:32:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSPGRP(r0, 0x5451, 0x0) 20:32:39 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:32:39 executing program 4: r0 = socket(0x2, 0x3, 0x1f) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:39 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)) 20:32:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) lstat(&(0x7f0000000800)='.\x00', &(0x7f0000000100)) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) 20:32:40 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x1019c0, 0xa) 20:32:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000100)) 20:32:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:32:40 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x5452, &(0x7f00000000c0)={0xffffffffffffff9d, 0x0}) 20:32:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:32:40 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vga_arbiter\x00', 0x202, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 20:32:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x5, 0x0, 0x0) 20:32:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) read$eventfd(r0, 0x0, 0x0) 20:32:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:32:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:32:40 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000033c0)='./file0\x00', 0x240, 0x10) 20:32:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0x29, 0x0, &(0x7f0000000180)) 20:32:41 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 20:32:41 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCCONS(r3, 0x541d) 20:32:41 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:32:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x102b1) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:32:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:32:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 20:32:42 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4c000, 0x0) 20:32:42 executing program 1: r0 = open(&(0x7f00000007c0)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:32:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 20:32:42 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x1, 0x6, 0x10, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x740, 0x1, 0x20, 0x6}}) 20:32:42 executing program 3: getrlimit(0x613d87931b00abaa, 0x0) 20:32:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) r1 = dup2(r0, r0) write$P9_RFSYNC(r1, 0x0, 0x0) 20:32:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:32:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x0) 20:32:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x200008c0) 20:32:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 20:32:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, 0x0) 20:32:43 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8a201, 0x0) write$cgroup_pid(r0, 0x0, 0x47) 20:32:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000400)) 20:32:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4c000) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) shutdown(r0, 0x0) 20:32:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCGSKNS(r1, 0x5450, 0x0) 20:32:44 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 20:32:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000040)) r1 = dup(r0) r2 = gettid() sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:32:44 executing program 2: r0 = socket$unix(0x1, 0x1000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 20:32:44 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$EVIOCSFF(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @ramp}) 20:32:44 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) 20:32:44 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ftruncate(r1, 0x0) 20:32:44 executing program 1: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) 20:32:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x11) 20:32:45 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000140)) 20:32:45 executing program 0: r0 = inotify_init() close(r0) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 20:32:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x29, 0x4a, 0x0, 0x300) 20:32:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_WAITACTIVE(r1, 0x5607) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:32:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[], 0x20}}, 0x4004) 20:32:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x24008810) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x1000000000016) 20:32:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 20:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x5450, 0x0) 20:32:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000011) 20:32:46 executing program 3: mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) 20:32:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) 20:32:46 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x111040, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 20:32:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 20:32:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) tkill(r2, 0x1000000000016) 20:32:46 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ioprio_set$pid(0x2, r1, 0x0) 20:32:47 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x2, &(0x7f0000000000)={@remote}) 20:32:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:32:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 20:32:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000200)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:47 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x69, &(0x7f0000000140)={0x0}}, 0x0) 20:32:47 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) 20:32:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x842, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 20:32:47 executing program 1: r0 = socket(0xa, 0x3, 0x20) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:32:48 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x5450, 0x0) 20:32:48 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x200, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5451, 0x0) 20:32:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) fcntl$lock(r0, 0x26, &(0x7f0000027000)={0x1}) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='#'], 0x1) truncate(&(0x7f0000000200)='./file0/bus\x00', 0x0) 20:32:48 executing program 0: capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 20:32:48 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 20:32:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:32:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x158}}, 0x0) 20:32:49 executing program 5: r0 = epoll_create1(0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000480)) 20:32:49 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x18b840, 0x153) 20:32:49 executing program 0: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000780)='\"', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 20:32:49 executing program 3: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 20:32:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) 20:32:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) 20:32:49 executing program 5: r0 = socket(0x1, 0x5, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 20:32:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, 0x0) 20:32:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 20:32:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x8) 20:32:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_aout(r0, 0x0, 0x0) 20:32:50 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 20:32:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() write$P9_RSTAT(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101002, 0x0) tkill(r2, 0x1000000000016) 20:32:50 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) fcntl$addseals(r0, 0x2, 0x0) 20:32:50 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x7, 0x0, 0x0) 20:32:50 executing program 2: setrlimit(0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 20:32:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8800) 20:32:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r1, 0x1000000000013) 20:32:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8840) 20:32:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) write$binfmt_elf64(r0, 0x0, 0x0) 20:32:52 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x7f, 0x3, 0x5, @private0, @local, 0x7800, 0x10, 0xfffffff8, 0x3}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x11, 0x4) 20:32:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x11, 0x0, 0x2c) 20:32:52 executing program 1: sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 20:32:52 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 20:32:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 20:32:52 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0x39, 0x0, 0x0) 20:32:52 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000007880), 0x8, 0x0) close(r0) memfd_create(&(0x7f0000007900)='\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) 20:32:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 20:32:52 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, &(0x7f0000000200)={{{@in, @in6=@rand_addr=' \x01\x00'}}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, @in6=@loopback}}, 0xe8) 20:32:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() tkill(r2, 0x1000000000016) 20:32:53 executing program 3: r0 = epoll_create(0x40000acf) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 20:32:53 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000002900)={0x2, 0x0, @remote}, 0x10) 20:32:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$CHAR_RAW_PG(r1, 0x1269, 0x0) 20:32:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000080), 0x4) 20:32:53 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x21d, 0x372) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000080)='n', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x47) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:32:53 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:32:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={0x0, 0x1a, &(0x7f0000000380)={0x0}}, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 20:32:54 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 20:32:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) 20:32:54 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 20:32:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) [ 3070.724749][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:32:54 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 3070.764384][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:32:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setsig(r0, 0xa, 0x0) 20:32:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getdents(r1, &(0x7f00000001c0)=""/202, 0xca) 20:32:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000002900)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:32:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={0x0, 0x3c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 20:32:55 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @loopback}}) 20:32:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 20:32:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$netlink(r2, &(0x7f0000000040)=@proc, 0xc) r3 = memfd_create(&(0x7f0000000140)='-B\xff\xff\xff\x7fj\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x19\xaa\xca\x00\xf0M\x8d\x8b\x8b\x05\x01\xdb\nr\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) tkill(r1, 0x1000000000016) 20:32:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}}, 0x20000084) sendmmsg$sock(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) 20:32:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = eventfd(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) ioctl$EVIOCGUNIQ(r4, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 20:32:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) 20:32:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000000)) 20:32:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x25, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x5451, 0x0) 20:32:56 executing program 3: r0 = epoll_create(0x6) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 20:32:57 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCRTMSG(r0, 0x5450, 0x0) 20:32:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 20:32:57 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5451, 0x0) 20:32:58 executing program 5: syz_open_dev$evdev(&(0x7f0000001780)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) 20:32:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 20:32:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) shutdown(r1, 0x0) 20:32:58 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 20:32:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) 20:32:59 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:32:59 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000c40)) 20:32:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 20:32:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040000) 20:32:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) [ 3075.233973][T14895] sock: process `syz-executor.5' is using obsolete getsockopt SO_BSDCOMPAT 20:32:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20008080) 20:32:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4800) 20:32:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 20:32:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) getpeername$unix(r1, 0x0, &(0x7f0000000180)) 20:32:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 20:32:59 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5450, 0x0) 20:33:00 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGMTSLOTS(r0, 0x5421, &(0x7f00000001c0)=""/187) 20:33:00 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) 20:33:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(r1, &(0x7f00000000c0)={0x30}, 0x0) 20:33:00 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x0) 20:33:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008880) 20:33:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:33:01 executing program 5: process_vm_writev(0x0, &(0x7f0000001300), 0x0, 0x0, 0x0, 0x0) 20:33:01 executing program 2: r0 = socket(0x2, 0x3, 0x81) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, 0xffffff7f}, 0x2000008c, &(0x7f0000000140)={0x0}}, 0x0) 20:33:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) fstatfs(r0, &(0x7f0000000140)=""/123) 20:33:01 executing program 0: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$cgroup_int(r1, 0x0, 0x0) 20:33:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:33:01 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f0000000000)={'sit0\x00', 0x0}) 20:33:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:33:01 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) connect$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="66d02104c360"}, 0x14) 20:33:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x2d3) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 20:33:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:02 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TCFLSH(r0, 0x540b, 0x0) 20:33:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80) write$P9_RWALK(r0, 0x0, 0x0) 20:33:02 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x5451, 0x0) 20:33:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:03 executing program 4: r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 20:33:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={0x0}}, 0x20040001) 20:33:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000180)={'caif0\x00', @link_local}) 20:33:03 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RUNLINKAT(r0, 0x0, 0x0) 20:33:03 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000001100)='/dev/vcs#\x00', 0x1, 0x0) ioctl$EVIOCGBITSND(r0, 0x5451, 0x0) 20:33:03 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) write$P9_RREMOVE(r0, 0x0, 0x0) 20:33:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$KDDELIO(r1, 0x4b35, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 20:33:04 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 20:33:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20008048) 20:33:04 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:04 executing program 1: r0 = socket$inet6(0x10, 0x100000000000003, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) 20:33:04 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 20:33:05 executing program 5: r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) dup3(r0, r1, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 20:33:05 executing program 2: socket$inet(0x15, 0x0, 0x0) 20:33:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 20:33:05 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 20:33:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)) 20:33:05 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:09 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 20:33:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 20:33:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_out(r1, 0x2, &(0x7f0000000040)) 20:33:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:09 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}}, 0x0) 20:33:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003100)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040), 0x0, 0x10060, 0x0, 0x5c) 20:33:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f000000d380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000012040)) 20:33:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000026c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) 20:33:10 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x29, 0x6, 0x0, 0xfe83) 20:33:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000844) 20:33:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000000)) 20:33:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write$P9_RLCREATE(r3, 0x0, 0x0) 20:33:11 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x5450, 0x0) 20:33:11 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:12 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:33:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 20:33:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) 20:33:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000844) 20:33:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) 20:33:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44000) 20:33:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 20:33:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000ac0)='/dev/vcs#\x00', 0x5, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) 20:33:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x3e3c24f629cb7e31, r0, 0x0) 20:33:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4040000) 20:33:13 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x40040, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 20:33:13 executing program 1: r0 = epoll_create(0x2000000000000001) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200948d0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 20:33:13 executing program 3: r0 = socket(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:33:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:33:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 20:33:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 20:33:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x20000440) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x20040845) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 20:33:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x400, 0x0) dup2(r0, r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000000c0)) 20:33:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x5452, &(0x7f0000000040)) 20:33:15 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1000, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x5450, 0x0) 20:33:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:15 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x5451, 0x0) dup(0xffffffffffffffff) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) lstat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fchown(r2, 0x0, 0x0) 20:33:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 20:33:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:33:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000100)) 20:33:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)='B', 0x1}], 0x1) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000500), 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) tkill(r1, 0x1000000000016) 20:33:16 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) read$char_usb(r0, 0x0, 0x0) 20:33:16 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 20:33:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x24, 0x0, 0x0) 20:33:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000000) 20:33:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r2, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:17 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0xc8540, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 20:33:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20004000) 20:33:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x8901, &(0x7f0000000b80)) 20:33:18 executing program 2: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:33:18 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/pid\x00') ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000440)=""/93) 20:33:18 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() sendmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) tkill(r1, 0x1000000000015) 20:33:18 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 20:33:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) 20:33:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006ac0)={0x0}}, 0x20000001) 20:33:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) 20:33:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000040)) 20:33:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}, 0x20000068) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x20000000) 20:33:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:33:19 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, 0x0) 20:33:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 20:33:20 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x541b, 0x960000) 20:33:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 20:33:21 executing program 4: r0 = epoll_create(0x8857) ioctl$FITRIM(r0, 0x5452, &(0x7f0000000040)) 20:33:21 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5451, 0x0) 20:33:21 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0003000000000000c9"], 0x28) write(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:33:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) 20:33:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) 20:33:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 20:33:21 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 20:33:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8004014) 20:33:22 executing program 3: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) 20:33:22 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 20:33:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4884) 20:33:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 20:33:23 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$EVIOCGMASK(r0, 0x2, &(0x7f0000000600)={0x0, 0x0, 0x0}) 20:33:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0xfffffda1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x1de) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 20:33:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 20:33:23 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 20:33:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000002e40), 0x8) dup2(r0, r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:33:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:23 executing program 3: r0 = socket(0x2, 0x3, 0xeb0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 20:33:23 executing program 5: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:24 executing program 5: r0 = inotify_init1(0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000000)=""/132) 20:33:24 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 20:33:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:24 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0) 20:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={0x0}}, 0x0) 20:33:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x6800000000000000, 0xc, 0x0, 0x0) 20:33:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xffffffffffffff85, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x58}}, 0x0) 20:33:25 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, 0x0}, 0x0) dup2(r0, r2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000300), 0x8) 20:33:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff1f80e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 20:33:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000800) 20:33:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3e, 0x0, 0x48) 20:33:25 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) getpeername(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x41a) read(r3, 0x0, 0x0) 20:33:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 20:33:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000400)) 20:33:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$RNDCLEARPOOL(r0, 0x5451, 0x0) 20:33:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4045) 20:33:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000011c0)={0x0, 0x1, [], [@ra, @jumbo, @generic={0x0, 0x0, "f7cd27422775553331011d2241e46f999cfa7c2ce17d5c4fc4882765e597c7a08d7356a4836d427a36ad8cd695386be37406f994fe94c1dab65e9228b8a909539bc7f3bb0f8862e9345defe4046a74272d2e108d6794cb7bcec7136b3ac2705ff9a4"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x0) 20:33:26 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 20:33:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 20:33:28 executing program 1: r0 = inotify_init() close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:33:28 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:28 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) recvfrom(r0, &(0x7f0000000240)=""/246, 0xf6, 0x40000142, 0x0, 0xfecc) 20:33:28 executing program 5: r0 = getpgrp(0xffffffffffffffff) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) 20:33:28 executing program 2: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x327, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}}, 0x0) 20:33:28 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 20:33:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKDISCARD(r0, 0x2, &(0x7f0000000000)) 20:33:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = eventfd(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup2(r2, r3) write$binfmt_script(r3, 0x0, 0x0) 20:33:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = inotify_init1(0x0) dup3(r1, r2, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$packet(r2, 0x0, 0x0, 0x0) 20:33:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 20:33:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 20:33:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TCGETS2(r1, 0x802c542a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:33:29 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x5450, 0x0) 20:33:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup2(r0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x21, 0x0, &(0x7f0000000180)) 20:33:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x5451, 0x0) 20:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = getpgrp(0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) tkill(r2, 0x1000000000016) 20:33:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5421, &(0x7f0000000180)) 20:33:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$netlink(r0, &(0x7f0000000140)=@unspec, 0xc) 20:33:30 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f00000007c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00"}, 0xd8) 20:33:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000780)='\x02', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) 20:33:30 executing program 3: r0 = socket(0x2, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) dup2(r0, r1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 20:33:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 20:33:30 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:33:31 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 20:33:31 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='\xe8\'\xa6\x00', 0xfffffffffffffe35, 0x0) 20:33:31 executing program 0: r0 = socket(0xa, 0x80803, 0x4) ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x0) 20:33:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x3e, 0x0, 0x57) 20:33:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, 0x0) 20:33:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, &(0x7f0000000080)) 20:33:31 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 20:33:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 20:33:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSABS0(r0, 0x5451, 0x0) 20:33:32 executing program 1: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x141, &(0x7f0000000200)={&(0x7f00000005c0)={0x1034, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x2f5}, @generic="5c1cd6cbf22a9e", @nested={0x1010}]}, 0x1034}}, 0x0) 20:33:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) write$P9_RGETLOCK(r2, 0x0, 0x0) 20:33:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) 20:33:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000240)) 20:33:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ifreq(r2, 0x8931, &(0x7f00000001c0)={'syz_tun\x00', @ifru_hwaddr=@random}) 20:33:33 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 20:33:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0x6, 0x0, 0x5b00) 20:33:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0600e2ffff0aca7effff0000e1ffbffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r2, 0x1278, 0x0) 20:33:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 20:33:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 20:33:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r3) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 20:33:37 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x5450, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 20:33:37 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:37 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000340)) 20:33:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 20:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(r2, 0x1000000000016) 20:33:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:38 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000037c0)) 20:33:39 executing program 5: bind$unix(0xffffffffffffffff, &(0x7f0000366000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x24, &(0x7f0000000000)={0x0, @multicast2, 0x0, 0x0, 'sh\x00'}, 0x2c) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)={{0x0, 0xea60}}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 20:33:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0xa99) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup2(r0, r0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000015) 20:33:39 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000001c0)) 20:33:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 20:33:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) 20:33:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:33:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 20:33:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$P9_RLERRORu(r0, 0x0, 0x0) 20:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$P9_RFLUSH(r0, 0x0, 0x0) 20:33:39 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x2, &(0x7f0000000040)) 20:33:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x3d, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) tkill(r2, 0x1000000000016) 20:33:39 executing program 5: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000033c0)='./file0\x00', 0x143440, 0x3) 20:33:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0xffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}}, 0x20000004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) setgroups(0x0, 0x0) 20:33:40 executing program 0: r0 = inotify_init1(0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 20:33:40 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5451, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) nanosleep(0x0, 0x0) getegid() lstat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) 20:33:40 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 20:33:40 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) 20:33:41 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 20:33:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 20:33:41 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x2400c894) 20:33:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x20000001) 20:33:41 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 20:33:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) 20:33:41 executing program 4: r0 = eventfd(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:41 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[], 0x530}}, 0x4000094) 20:33:41 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:41 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 20:33:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000280)) 20:33:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:42 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) connect$netlink(r0, 0x0, 0x0) 20:33:42 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 20:33:42 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f0000000200)=""/163) 20:33:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) 20:33:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40004) 20:33:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000280)=""/85) 20:33:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r0, r1) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 20:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000001080)='./file0\x00', 0x40040, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:33:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x541b, &(0x7f0000000040)) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) creat(0x0, 0x0) 20:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x5452, &(0x7f0000000040)={'wg0\x00'}) 20:33:43 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) 20:33:43 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)) 20:33:43 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCFLSH(r0, 0x540b, 0x0) 20:33:43 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) 20:33:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x0) 20:33:44 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) 20:33:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)) 20:33:44 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe6d, &(0x7f0000000080)={0x0}}, 0x0) 20:33:44 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) 20:33:44 executing program 0: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x401) 20:33:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:33:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) 20:33:45 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x1, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 20:33:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) tkill(r1, 0x1000000000016) 20:33:45 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write$P9_RREADLINK(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2002, 0x0) tkill(r0, 0x1000000000016) 20:33:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4000009) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_GET_STATUS64(r1, 0x5421, &(0x7f0000000240)) 20:33:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="0f9ddf2b8d23"}, 0x14) 20:33:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x114}}, 0x20044004) 20:33:46 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x119140, 0x0) utime(&(0x7f0000000080)='./file0/file0\x00', 0x0) 20:33:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGKEYCODE_V2(r0, 0x5421, &(0x7f00000002c0)=""/210) 20:33:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write$P9_RFLUSH(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 20:33:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', 0x0}) 20:33:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:33:47 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8001) close(r1) socket$inet_udp(0x2, 0x2, 0x0) tkill(r0, 0x1000000000015) 20:33:47 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r3, r4, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 20:33:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 20:33:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc61, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 20:33:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) 20:33:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4004) 20:33:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup(r0) sendto$inet(r1, 0x0, 0x62, 0x4000810, 0x0, 0x0) 20:33:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 20:33:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:33:49 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 20:33:50 executing program 0: capset(&(0x7f0000000840)={0x20071026}, &(0x7f0000000880)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 20:33:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004010) 20:33:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) 20:33:50 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 20:33:50 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8953, &(0x7f0000000300)) 20:33:50 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 20:33:50 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) dup(r0) 20:33:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) 20:33:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 20:33:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) dup3(r0, r1, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/8, 0x8) 20:33:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGSND(r1, 0x8040451a, 0x0) 20:33:51 executing program 0: timer_create(0x0, &(0x7f0000000380)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup2(r0, r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x1004000000013) 20:33:51 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x2, 0x960000) 20:33:51 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='\x84\x0e\x13s\xf1\xb5\x05\xe2qO\xb8\x893\x81`\xd2\x99\x96\x01\x00\x00\x00\x00\x00\x00\x00\x1c\a\xd0#\x05%\x18\x17Z\xa2gS\xc1\xe0\v\xcb\t\xe6\xe6*\xe9\xa3\xdc\x91', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180), 0x4) 20:33:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x5428, 0x0) 20:33:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8913, &(0x7f0000000340)={'sit0\x00', 0x0}) 20:33:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4000004) 20:33:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 20:33:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, 0x0, 0x0) 20:33:52 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x210, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) write(r0, 0x0, 0x0) 20:33:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000) 20:33:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) getsockname$unix(r1, 0x0, &(0x7f0000000380)) 20:33:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:52 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, [{}, {}, {}]}) tkill(r0, 0x1000000000016) 20:33:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f0000000040)) 20:33:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 20:33:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0xffffff79) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:33:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) bind$packet(r1, 0x0, 0x0) 20:33:53 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) 20:33:53 executing program 0: creat(&(0x7f0000000d00)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 20:33:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:33:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:33:54 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS3\x00', 0x1, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 20:33:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 20:33:54 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 20:33:54 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:33:54 executing program 5: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x306768bb81576859) 20:33:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) 20:33:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:33:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000780)='\x02', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 20:33:55 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$HDIO_GETGEO(r0, 0x5451, 0x0) 20:33:55 executing program 5: r0 = socket(0xa, 0x3, 0xe808) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 20:33:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 20:33:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 20:33:55 executing program 3: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xfffffffffffffffa) 20:33:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "71cf00e2ffff0acaffffff0000e1fff7fff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, 0x0) 20:33:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000400)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$CHAR_RAW_SECDISCARD(r2, 0x127d, 0x0) 20:33:56 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x5078ed) 20:33:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:33:56 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 20:33:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$TCGETA(r0, 0x5421, &(0x7f00000001c0)) 20:33:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:33:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r2 = dup2(r1, r0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) tkill(r3, 0x1000000000016) 20:33:57 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0, 0x18}}, 0x0) 20:33:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGUNIQ(r0, 0x5451, 0x0) 20:33:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)) 20:33:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:33:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 20:33:58 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2}, 0xc) 20:33:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 20:33:58 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000000000000, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 20:33:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:33:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000003e40), 0x4) 20:33:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:33:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4040000) 20:33:59 executing program 4: r0 = eventfd2(0x0, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000dc0), 0x4) 20:33:59 executing program 3: r0 = epoll_create(0x40000acf) close(r0) socket(0x10, 0x80003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x48800) 20:33:59 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000020c0)=0x3, 0x4) 20:33:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) write$evdev(r1, 0x0, 0x0) write$evdev(r1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) [ 3135.671585][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 20:33:59 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:33:59 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x5450, 0x0) 20:34:00 executing program 2: r0 = socket(0x2, 0xa, 0x0) connect$netlink(r0, 0x0, 0x0) 20:34:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:34:00 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 20:34:00 executing program 0: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 20:34:00 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000001880)='nl80211\x00') 20:34:00 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/loop-control\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 20:34:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/autofs\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$CHAR_RAW_SECTGET(r2, 0x1267, 0x0) 20:34:00 executing program 3: r0 = socket(0x2, 0x3, 0x7fffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 20:34:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCSABS2F(r2, 0x80004519, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0xa0, 0x5) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x11, r5}) 20:34:01 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5411, &(0x7f0000000000)={0x2, 'hsr0\x00'}) 20:34:01 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:34:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:34:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x894c, 0x0) 20:34:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x4}, 0x14}}, 0x0) read(r2, 0x0, 0x0) 20:34:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 3138.085931][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:34:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x3d) [ 3138.137790][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:34:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 20:34:02 executing program 0: socket$unix(0x1, 0x8000000001, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) 20:34:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000003c0)=""/4096) 20:34:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:34:03 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x101002, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 20:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:03 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) 20:34:03 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3f, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5451, 0x0) 20:34:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x17, 0x0, 0x0) 20:34:03 executing program 1: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000340), 0x2c6, &(0x7f0000000440)={&(0x7f0000000600)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff3a}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) 20:34:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x190}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2}) 20:34:04 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:04 executing program 0: r0 = socket(0x11, 0x3, 0x0) write$cgroup_int(r0, 0x0, 0x0) 20:34:04 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) 20:34:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSFF(r0, 0x5452, &(0x7f0000000100)) 20:34:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000500)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x20048010) 20:34:04 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 20:34:04 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000240)={'batadv0\x00'}) 20:34:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5451, 0x0) 20:34:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2) write$cgroup_subtree(r0, 0x0, 0x0) 20:34:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4800) 20:34:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1a100000000000000000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 20:34:05 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5425, 0x0) 20:34:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 20:34:05 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 20:34:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) dup2(r1, r0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 20:34:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002440)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 20:34:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:34:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:07 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/null\x00', 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 20:34:07 executing program 4: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) 20:34:08 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r1, r0, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) 20:34:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_VLAN(r1, 0x0, 0x0) 20:34:08 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:34:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 20:34:08 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) [ 3144.820897][T16184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=16184 comm=syz-executor.4 20:34:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x890c, &(0x7f0000000000)={'bridge_slave_1\x00', @random}) 20:34:09 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 20:34:09 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x5452, &(0x7f0000000040)) 20:34:09 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x14, 0x0, 0x0) 20:34:09 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') dup2(r0, r1) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000600)) 20:34:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:34:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x002'], 0x38}}, 0x0) close(r0) socket(0x40000000002, 0x3, 0x2) tkill(r2, 0x1000000000016) 20:34:09 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:34:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) getpeername$inet6(r0, 0x0, &(0x7f00000000c0)) [ 3146.333000][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:34:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 20:34:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20000000) 20:34:11 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:11 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 20:34:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4048004) 20:34:11 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 20:34:11 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:34:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:11 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:34:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) 20:34:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 20:34:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x200c00c4) 20:34:12 executing program 2: pipe(&(0x7f0000002cc0)={0xffffffffffffffff}) fadvise64(r0, 0x0, 0x0, 0x0) 20:34:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) ioctl$TIOCNOTTY(r1, 0x5428) 20:34:12 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 20:34:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 20:34:12 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x5451, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xf1) 20:34:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:34:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) 20:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x1fc}}, 0x20000000) 20:34:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:34:13 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) 20:34:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x5450, 0x0) 20:34:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:15 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)=0x7) 20:34:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000200)) 20:34:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x4, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f00000016c0)) 20:34:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 20:34:15 executing program 0: r0 = socket(0x11, 0x2, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 20:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 20:34:15 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000100)="040000003c2b0124a4b72baf669289a22e9037666351c1498d941a15b5174be3"}) 20:34:15 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000100)="110000003c2b0124a4b72baf669289a22e9037666351c1498d941a15b5174be3"}) 20:34:15 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x109403) 20:34:15 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8914, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @local}, @vsock, @hci}) 20:34:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r0, 0x0, 0x0) 20:34:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, 0x0) 20:34:16 executing program 3: getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) 20:34:16 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$notify(r0, 0x402, 0x80000036) 20:34:16 executing program 4: clock_gettime(0x5, &(0x7f00000002c0)) 20:34:16 executing program 2: set_mempolicy(0x8002, &(0x7f0000000140)=0x7f, 0x8) 20:34:16 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 20:34:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, 0x0) 20:34:17 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, 0x0, 0x0) 20:34:17 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 20:34:17 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 20:34:17 executing program 0: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3) 20:34:17 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 20:34:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, 0x0) 20:34:17 executing program 3: getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) 20:34:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2, 0x4, 0x10, 0x40}, 0x40) 20:34:18 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x1c8, 0x4) 20:34:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 20:34:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, &(0x7f0000000280)) 20:34:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0xa, 0x0, 0x0) 20:34:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', 0x0}) 20:34:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x6, &(0x7f00000001c0), 0x4) 20:34:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) listen(r0, 0x0) 20:34:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[], 0xa, 0x0}, 0x0) 20:34:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 20:34:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 20:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', 0x0}) 20:34:19 executing program 4: getgroups(0x3, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0x0]) setregid(0x0, r0) setresgid(r0, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, r0) 20:34:19 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 20:34:19 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 20:34:19 executing program 1: r0 = inotify_init1(0x0) fstat(r0, &(0x7f0000000000)) 20:34:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', 0x0}) 20:34:20 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x2}}, 0x10, 0x0}, 0xbd94656c395e8fbc) 20:34:20 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002040), 0x10) 20:34:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x4, 0x1, 0x101, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000000c0), 0xae, r0}, 0x38) 20:34:20 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0405610, &(0x7f0000000180)) 20:34:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:34:20 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:21 executing program 0: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2f, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f43465356320000868f8876ffffffff0000000000200000000000000000000000000000000000000000000031000000000000000000000097c3655f0000000097c3655f00000000000000000000000002000000000000000000000000000000868f887600"/8320, 0x2080}, {&(0x7f0000012100)="00005a0000001400000000000000000097c3655f00000000000000000300000050b700000100000009000000000000000a000000000000000c0000000e00000002000000188dba450400"/96, 0x60, 0x20c0}, {&(0x7f0000012200)="000000000000000000000000000000009082a5aaefbd41978277280ac7447d75000000000000000000000000000000000000000000000000000100002754fd7870b2fa5ed8b5449400"/96, 0x60, 0x2140}, {&(0x7f0000012300)="47524f5550303100c00f0020790e0000868f88760000000000000000000000000f00000000000000040000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f00"/640, 0x280, 0x4000}, {&(0x7f0000012600)="47524f5550303100c00f1001fc000000868f88760000000000000000000000000c00000000000000080000000000000000000000000000000000000000000000ffff0f00"/96, 0x60, 0x8000}, {&(0x7f0000012700)="494e4f4445303100868f8876ffff010000000000000000000000000000000000380f000000000000ed4103001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000009000000000000000000000000000000868f887600000000000000000000000000000000000001000000000000000000", 0x80, 0x9000}, {&(0x7f0000012800)="380f0000000000000900000000000000100001022e0000000900000000000000100002022e2e00001d42000000000000180f0a026c6f73742b666f756e640000", 0x40, 0x90c0}, {&(0x7f0000012900)="494e4f4445303100868f8876ffff020000000000000000000000000000000000380f000000000000ed4104001100000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000a000000000000000000000000000000868f887600000000000000000000000000000000000001000000000000000000", 0x80, 0xa000}, {&(0x7f0000012a00)="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", 0x200, 0xa0c0}, {&(0x7f0000012c00)="494e4f4445303100868f8876ffff0300000000000000000000000000000000000000000000000000a48101001100000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000b000000000000000000000000000000868f887600"/128, 0x80, 0xb000}, {&(0x7f0000012d00)="0000f300"/32, 0x20, 0xb0c0}, {&(0x7f0000012e00)="494e4f4445303100868f8876ffff0400000000004400000000000000000000000000110000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000c000000000000000000000000000000868f887600"/128, 0x80, 0xc000}, {&(0x7f0000012f00)="000000000000000000000000000000000000000000000000140000001001000044000400f30001000000000000000000fc000000100100000800000000000000", 0x40, 0xc0a0}, {&(0x7f0000013000)="494e4f4445303100868f8876ffff0500000000000100000000000000000000000040000000000000a48101001100000097c3655f0000000097c3655f00000000aac3655f0000000000000000000000000d000000000000000000000000000000868f887600"/128, 0x80, 0xd000}, {&(0x7f0000013100)="0000f30001000000000000000000000000000000010000001842000000000000", 0x20, 0xd0c0}, {&(0x7f0000013200)="494e4f4445303100868f8876ffff0600000000004000000000000000000000000000100000000000a48101001102000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000e000000000000000000000000000000868f887600"/128, 0x80, 0xe000}, {&(0x7f0000013300)="0000f30001000000000000000000000000000000400000001801000000000000", 0x20, 0xe0c0}, {&(0x7f0000013400)="494e4f4445303100868f8876ffff0700000000000020000000000000000000000000000800000000a48101009104000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000f000000000000000000000000000000868f887600"/128, 0x80, 0xf000}, {&(0x7f0000013500)="0000000000000000000000000000000000000000000000008711000000200000007e0100f30001000000000000000000790e0000002000000400000000000000", 0x40, 0xf0a0}, {&(0x7f0000013600)="494e4f4445303100868f8876ffff080000000000000000000000000000000000380f000000000000ed4102001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000010000000000000000000000000000000868f887600000000000000000000000000000000000001000000000000000000", 0x80, 0x10000}, {&(0x7f0000013700)="380f0000000000001000000000000000100001022e0000000a00000000000000280f02022e2e00"/64, 0x40, 0x100c0}, {&(0x7f0000013800)="494e4f4445303100868f8876ffff090000000000000000000000000000000000380f000000000000ed4102001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000011000000000000000000000000000000868f887600000000000000000000000000000000000001000000000000000000", 0x80, 0x11000}, {&(0x7f0000013900)="380f0000000000001100000000000000100001022e0000000a00000000000000280f02022e2e00"/64, 0x40, 0x110c0}, {&(0x7f0000013a00)="494e4f4445303100868f8876ffff0a00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000012000000000000000000000000000000868f887600"/128, 0x80, 0x12000}, {&(0x7f0000013b00)="00010400f300"/32, 0x20, 0x120c0}, {&(0x7f0000013c00)="494e4f4445303100868f8876ffff0b00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000013000000000000000000000000000000868f887600"/128, 0x80, 0x13000}, {&(0x7f0000013d00)="00010400f300"/32, 0x20, 0x130c0}, {&(0x7f0000013e00)="494e4f4445303100868f8876ffff0c00000000000001000000000000000000000000400000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000014000000000000000000000000000000868f887600"/128, 0x80, 0x14000}, {&(0x7f0000013f00)="000000000000000000000000000000000000000000000000020000000004000000010400f30001000000000000000000fe030000000400001c42000000000000", 0x40, 0x140a0}, {&(0x7f0000014000)="494e4f4445303100868f8876ffff0d00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000015000000000000000000000000000000868f887600"/128, 0x80, 0x15000}, {&(0x7f0000014100)="00010400f300"/32, 0x20, 0x150c0}, {&(0x7f0000014200)="494e4f4445303100868f8876ffff0e00000000000008000000000000000000000000000200000000a48101001101000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000016000000000000000000000000000000868f887600"/128, 0x80, 0x16000}, {&(0x7f0000014300)="0000f30001000000000000000000000000000000000800001802000000000000", 0x20, 0x160c0}, {&(0x7f0000014400)="494e4f4445303100868f8876ffff0f00000000000008000000000000000000000000000200000000a48101001101000097c3655f0000000097c3655f00000000a1c3655f00000000000000000000000017000000000000000000000000000000868f887600"/128, 0x80, 0x17000}, {&(0x7f0000014500)="0000f30001000000000000000000000000000000000800001822000000000000", 0x20, 0x170c0}, {&(0x7f0000014600)="494e4f4445303100868f8876ffff1000000000000000000000000000000000000000000000000000a4810100d100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000018000000000000000000000000000000868f887600"/128, 0x80, 0x18000}, {&(0x7f0000014700)="00000000300f00"/32, 0x20, 0x180c0}, {&(0x7f0000014800)="494e4f4445303100868f8876ffff1100000000000000000000000000000000000000000000000000a4810100d100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000019000000000000000000000000000000868f887600"/128, 0x80, 0x19000}, {&(0x7f0000014900)="00000000300f00"/32, 0x20, 0x190c0}, {&(0x7f0000014a00)="494e4f4445303100868f8876ffff1200000000000000000000000000000000000000000000000000a48101001108000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000001a000000000000000000000000000000868f887600"/128, 0x80, 0x1a000}, {&(0x7f0000014b00)="e70100"/32, 0x20, 0x1a0c0}, {&(0x7f0000014c00)="494e4f4445303100868f8876ffff1300000000000000000000000000000000000000000000000000a48101001108000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000001b000000000000000000000000000000868f887600"/128, 0x80, 0x1b000}, {&(0x7f0000014d00)="e70100"/32, 0x20, 0x1b0c0}, {&(0x7f0000014e00)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000000000000009082a5aaefbd41978277280ac7447d750000000100"/96, 0x60, 0x218000}, {&(0x7f0000014f00)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000000000000009082a5aaefbd41978277280ac7447d750000000100"/96, 0x60, 0x2218000}, {&(0x7f0000015000)="47524f555030310000010004fe030000868f887600000000000000000000000014000000000000001c42000000000000000000000000000000000000000000000300"/96, 0x60, 0x421c000}, {&(0x7f0000015100)="494e4f4445303100868f88760000010000000000000000000000000000000000380f000000000000ed41020001000000abc3655f00000000abc3655f00000000abc3655f0000000000000000000000001d420000000000000000000000000000868f8876000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000001c420000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000001d42000000000000100001022e0000000900000000000000280f02022e2e00"/256, 0x100, 0x421d000}], 0x0, &(0x7f0000015200)) 20:34:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/233) 20:34:21 executing program 1: setregid(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) lstat(0x0, 0x0) 20:34:21 executing program 5: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2f, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f43465356320000e414e050ffffffff0000000000200000000000000000000000000000000000000000000031000000000000000000000097c3655f0000000097c3655f00000000000000000000000002000000000000000000000000000000e414e05000"/8320, 0x2080}, {&(0x7f0000012100)="00005a0000001400000000000000000097c3655f00000000000000000300000050b700000100000009000000000000000a000000000000000c0000000e00000002000000f88dff9a0400"/96, 0x60, 0x20c0}, {&(0x7f0000012200)="0000000000000000000000000000000094d652e0d87a40619fc8fb16f3b9cff9000000000000000000000000000000000000000000000000000100002754fd7870b2fa5ed8b5449400"/96, 0x60, 0x2140}, {&(0x7f0000012300)="47524f5550303100c00f0020790e0000e414e0500000000000000000000000000f00000000000000040000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f00"/640, 0x280, 0x4000}, {&(0x7f0000012600)="47524f5550303100c00f1001fc000000e414e0500000000000000000000000000c00000000000000080000000000000000000000000000000000000000000000ffff0f00"/96, 0x60, 0x8000}, {&(0x7f0000012700)="494e4f4445303100e414e050ffff010000000000000000000000000000000000380f000000000000ed4103001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000009000000000000000000000000000000e414e05000000000000000000000000000000000000001000000000000000000", 0x80, 0x9000}, {&(0x7f0000012800)="380f0000000000000900000000000000100001022e0000000900000000000000100002022e2e00001d42000000000000180f0a026c6f73742b666f756e640000", 0x40, 0x90c0}, {&(0x7f0000012900)="494e4f4445303100e414e050ffff020000000000000000000000000000000000380f000000000000ed4104001100000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000a000000000000000000000000000000e414e05000000000000000000000000000000000000001000000000000000000", 0x80, 0xa000}, {&(0x7f0000012a00)="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", 0x200, 0xa0c0}, {&(0x7f0000012c00)="494e4f4445303100e414e050ffff0300000000000000000000000000000000000000000000000000a48101001100000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000b000000000000000000000000000000e414e05000"/128, 0x80, 0xb000}, {&(0x7f0000012d00)="0000f300"/32, 0x20, 0xb0c0}, {&(0x7f0000012e00)="494e4f4445303100e414e050ffff0400000000004400000000000000000000000000110000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000c000000000000000000000000000000e414e05000"/128, 0x80, 0xc000}, {&(0x7f0000012f00)="000000000000000000000000000000000000000000000000140000001001000044000400f30001000000000000000000fc000000100100000800000000000000", 0x40, 0xc0a0}, {&(0x7f0000013000)="494e4f4445303100e414e050ffff0500000000000100000000000000000000000040000000000000a48101001100000097c3655f0000000097c3655f00000000a9c3655f0000000000000000000000000d000000000000000000000000000000e414e05000"/128, 0x80, 0xd000}, {&(0x7f0000013100)="0000f30001000000000000000000000000000000010000001842000000000000", 0x20, 0xd0c0}, {&(0x7f0000013200)="494e4f4445303100e414e050ffff0600000000004000000000000000000000000000100000000000a48101001102000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000e000000000000000000000000000000e414e05000"/128, 0x80, 0xe000}, {&(0x7f0000013300)="0000f30001000000000000000000000000000000400000001801000000000000", 0x20, 0xe0c0}, {&(0x7f0000013400)="494e4f4445303100e414e050ffff0700000000000020000000000000000000000000000800000000a48101009104000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000000f000000000000000000000000000000e414e05000"/128, 0x80, 0xf000}, {&(0x7f0000013500)="0000000000000000000000000000000000000000000000008711000000200000007e0100f30001000000000000000000790e0000002000000400000000000000", 0x40, 0xf0a0}, {&(0x7f0000013600)="494e4f4445303100e414e050ffff080000000000000000000000000000000000380f000000000000ed4102001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000010000000000000000000000000000000e414e05000000000000000000000000000000000000001000000000000000000", 0x80, 0x10000}, {&(0x7f0000013700)="380f0000000000001000000000000000100001022e0000000a00000000000000280f02022e2e00"/64, 0x40, 0x100c0}, {&(0x7f0000013800)="494e4f4445303100e414e050ffff090000000000000000000000000000000000380f000000000000ed4102001100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000011000000000000000000000000000000e414e05000000000000000000000000000000000000001000000000000000000", 0x80, 0x11000}, {&(0x7f0000013900)="380f0000000000001100000000000000100001022e0000000a00000000000000280f02022e2e00"/64, 0x40, 0x110c0}, {&(0x7f0000013a00)="494e4f4445303100e414e050ffff0a00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000012000000000000000000000000000000e414e05000"/128, 0x80, 0x12000}, {&(0x7f0000013b00)="00010400f300"/32, 0x20, 0x120c0}, {&(0x7f0000013c00)="494e4f4445303100e414e050ffff0b00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000013000000000000000000000000000000e414e05000"/128, 0x80, 0x13000}, {&(0x7f0000013d00)="00010400f300"/32, 0x20, 0x130c0}, {&(0x7f0000013e00)="494e4f4445303100e414e050ffff0c00000000000001000000000000000000000000400000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000014000000000000000000000000000000e414e05000"/128, 0x80, 0x14000}, {&(0x7f0000013f00)="000000000000000000000000000000000000000000000000020000000004000000010400f30001000000000000000000fe030000000400001c42000000000000", 0x40, 0x140a0}, {&(0x7f0000014000)="494e4f4445303100e414e050ffff0d00000000000000000000000000000000000000000000000000a48101009104000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000015000000000000000000000000000000e414e05000"/128, 0x80, 0x15000}, {&(0x7f0000014100)="00010400f300"/32, 0x20, 0x150c0}, {&(0x7f0000014200)="494e4f4445303100e414e050ffff0e00000000000008000000000000000000000000000200000000a48101001101000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000016000000000000000000000000000000e414e05000"/128, 0x80, 0x16000}, {&(0x7f0000014300)="0000f30001000000000000000000000000000000000800001802000000000000", 0x20, 0x160c0}, {&(0x7f0000014400)="494e4f4445303100e414e050ffff0f00000000000008000000000000000000000000000200000000a48101001101000097c3655f0000000097c3655f00000000a1c3655f00000000000000000000000017000000000000000000000000000000e414e05000"/128, 0x80, 0x17000}, {&(0x7f0000014500)="0000f30001000000000000000000000000000000000800001822000000000000", 0x20, 0x170c0}, {&(0x7f0000014600)="494e4f4445303100e414e050ffff1000000000000000000000000000000000000000000000000000a4810100d100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000018000000000000000000000000000000e414e05000"/128, 0x80, 0x18000}, {&(0x7f0000014700)="00000000300f00"/32, 0x20, 0x180c0}, {&(0x7f0000014800)="494e4f4445303100e414e050ffff1100000000000000000000000000000000000000000000000000a4810100d100000097c3655f0000000097c3655f0000000097c3655f00000000000000000000000019000000000000000000000000000000e414e05000"/128, 0x80, 0x19000}, {&(0x7f0000014900)="00000000300f00"/32, 0x20, 0x190c0}, {&(0x7f0000014a00)="494e4f4445303100e414e050ffff1200000000000000000000000000000000000000000000000000a48101001108000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000001a000000000000000000000000000000e414e05000"/128, 0x80, 0x1a000}, {&(0x7f0000014b00)="e70100"/32, 0x20, 0x1a0c0}, {&(0x7f0000014c00)="494e4f4445303100e414e050ffff1300000000000000000000000000000000000000000000000000a48101001108000097c3655f0000000097c3655f0000000097c3655f0000000000000000000000001b000000000000000000000000000000e414e05000"/128, 0x80, 0x1b000}, {&(0x7f0000014d00)="e70100"/32, 0x20, 0x1b0c0}, {&(0x7f0000014e00)="c03b3998000000040000000000001000000020000000000100000001000000010000000000000000000000020000000094d652e0d87a40619fc8fb16f3b9cff90000000100"/96, 0x60, 0x218000}, {&(0x7f0000014f00)="c03b3998000000040000000000001000000020000000000100000001000000010000000000000000000000020000000094d652e0d87a40619fc8fb16f3b9cff90000000100"/96, 0x60, 0x2218000}, {&(0x7f0000015000)="47524f555030310000010004fe030000e414e05000000000000000000000000014000000000000001c42000000000000000000000000000000000000000000000300"/96, 0x60, 0x421c000}, {&(0x7f0000015100)="494e4f4445303100e414e0500000010000000000000000000000000000000000380f000000000000ed41020001000000abc3655f00000000abc3655f00000000abc3655f0000000000000000000000001d420000000000000000000000000000e414e050000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000001c420000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000001d42000000000000100001022e0000000900000000000000280f02022e2e00"/256, 0x100, 0x421d000}], 0x0, &(0x7f0000015200)) 20:34:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001d00)={0xf, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x40) 20:34:21 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000007600)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)="f2", 0x1}], 0x1}, 0x0) 20:34:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000006c0)=""/233, 0x2e, 0xe9, 0x1}, 0x20) [ 3157.928060][T16430] (syz-executor.5,16430,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 3157.938794][T16430] (syz-executor.5,16430,0):ocfs2_fill_super:1190 ERROR: status = -22 20:34:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xce, &(0x7f0000000080)=""/206, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3158.226463][T16430] (syz-executor.5,16430,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 3158.237403][T16430] (syz-executor.5,16430,0):ocfs2_fill_super:1190 ERROR: status = -22 20:34:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f00000004c0)=""/249, 0x26, 0xf9, 0x1}, 0x20) 20:34:22 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') 20:34:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7500, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xb5, &(0x7f0000000100)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:34:22 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:23 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001ac0)={r1}) 20:34:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="c1", 0x1}], 0x1}, 0x0) 20:34:23 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0xc, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:34:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14}}], 0x18}, 0x0) 20:34:23 executing program 1: socketpair(0x22, 0x0, 0x4, &(0x7f0000000000)) 20:34:23 executing program 3: ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:24 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 20:34:24 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x105000, 0x0) 20:34:24 executing program 2: memfd_create(&(0x7f0000000140)='\\-\\\x00', 0x0) 20:34:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 20:34:24 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 20:34:24 executing program 3: ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:24 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0xbd, 0xaaaa99c, &(0x7f0000000500), 0x0, &(0x7f00000028c0)=ANY=[]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000600)={0x0, 0x0, "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", "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"}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f00000000c0)="1d54b8", 0x3}, {0x0}], 0x240000, &(0x7f0000000000)=ANY=[@ANYRESHEX=0xee01, @ANYBLOB=',\x00']) 20:34:24 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 20:34:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x77359400}) 20:34:25 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) 20:34:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 20:34:25 executing program 3: ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:25 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 20:34:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0xffffffbd, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 20:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) 20:34:26 executing program 5: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) 20:34:26 executing program 3: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xec}}, 0x1) 20:34:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x20000000) 20:34:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 20:34:26 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 20:34:26 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/autofs\x00', 0x0, 0x0) fstat(r0, 0x0) 20:34:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20048810) 20:34:27 executing program 3: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40010102, &(0x7f0000004880)) 20:34:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000006100)) 20:34:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[], 0x6c}}, 0x884) 20:34:27 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 20:34:27 executing program 0: memfd_create(&(0x7f0000000580)='./cgroup/syz0\x00', 0x0) 20:34:27 executing program 3: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40044149, 0x0) 20:34:28 executing program 2: syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x40) 20:34:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:34:28 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) 20:34:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x10) 20:34:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000011800)) 20:34:28 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:29 executing program 2: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:34:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) 20:34:29 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={0x0, 0x0, 0x28}, 0x10) 20:34:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000040)={'ip_vti0\x00', @ifru_names}) 20:34:29 executing program 0: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 20:34:29 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:29 executing program 1: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x3]) 20:34:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2608c2, 0x0) 20:34:29 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 20:34:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 20:34:29 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 20:34:30 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, 0x0) 20:34:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 20:34:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='uid_map\x00') ioctl$CHAR_RAW_RAGET(r0, 0x1263, 0x0) 20:34:30 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000100)) 20:34:30 executing program 2: r0 = socket(0x11, 0xa, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 20:34:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 20:34:31 executing program 3: syz_emit_ethernet(0x36, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="aa6c4bcdcff5", @multicast, @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @multicast2}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9d0244", 0x0, "02002f"}}}}}}}, 0x0) 20:34:31 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000002280)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 20:34:31 executing program 4: syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0xffffffff, 0x0) 20:34:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127c, &(0x7f0000000040)) 20:34:31 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 20:34:31 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 20:34:31 executing program 3: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6f747265656c6f672c64657669633d2e2f66696c65302c73706163655f63616368653d76312c636f6d6d69743d3078303030303030303030305a923030303030322c737562766f6c69643d2b"]) 20:34:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c30, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa34}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:34:32 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0xc020660b, 0x0) 20:34:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) 20:34:32 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="80b753cdae4c6b4a3fdd6b5cf6ca3da00307fb6456aa87f80c741234ee29198a7ff99f09edc6fe25c96ec3f82d6f064c354fbc4b527b204c08d536a76c87fa749d0d7fd09c9c299ededa4a7e04e3fd04ebc5717dfcf4095313b57f8e8be8f2056375edde46b77c329981bb26a52a03a324e070cb8b48a713ba1e097781eb9040eeb38e69d9ee7646be0a255f7e1f10778286029e6ad476485f1bc9dadfeea3ab3c2d311b3cef2fda2f5da2a740364d1ff5cdf37be93eb6ff412c40a158e032e8c49514b18deec73204e26d4648f5870efb3bd69f9eca53a153e8", 0xda}, {&(0x7f0000000200)="a86dce7c5260aa6ccaa2afaa7968ab15a6d7a60c91d3437dc9f3538c0cc53c5c8394a899274ec64f80ff7a277ffa4dba43f8d05dc5ee6eb2c1b36ac365523b7f27e425b1c2a3220cdafc8b45ecfe29a45d4c1a141ef17914698257b803daea64398d7df457e0866e3dd8a172c467133cea70c0c39fbe9352e76090f87e6fa90ee9964ad0421f311d86b36b43a1f0a646f2845179c792f5df0074f7dccb73b14ef1d60476c6c36a0b13dc37c1908ce79a3dd35917ab4dea4a9369882e", 0xbc}, {&(0x7f00000002c0)="4a716b961188d1192c918011070ed626d2fc02609ecc36b117f7c5ad4028e8dc06a3b853584151fbbe7dcb7e7f311c4f", 0x30}, {&(0x7f0000000300)="5d48cd", 0x3}, {&(0x7f0000000440)="a8dddb3195a119e2da06dbd1833a5156d53faa04bd40b5441d951b565d0f459112dde334b365be3b368922280181654c7a94b2f88c89e13d44dfc18779b05efcc873489c253e5a7a58bb08b19d287e2ef7184e35347f099b060ef2c34203a5e75b2c420d78924106e4b98ae0e1f92dca0eee7f5a967d71172f38ef644b922dd148f0d1a977f3a39a6bc5f077176c6ddfbe32a06e63db66744c8a9a52cba675dca47ec0df55d6decf5f7d034b19d17fbbdd263e66a0c3a120553e0b53331116e62b60e40cf737f96e94b17066967be9877332476279f440134876565b8206ce0d36e594c7869c620ec40165d68caa7c6993295e2efc4f8e070946dd34c80cdd446590859d88a99e3bad3ef111d7374fbb70ee9ce657f52038f3518861d422a525cd1e9ec6cd971fa4e7c8d14888784c34c0ec0d40d75ba5f489557fef1c7d6aa4037ad6de382ee1c26f2ca3569b2a3d4dc3fa782b0a6b86500266b644873dc64982986c37d2dd3bb208d48a4523ec70708a0bd6bc7624a7e8dd8ac61cb42476f7be627a8b20d2d9f5acd7d116b312e2add0c31850a3c5aee7923b23b665851e2e9328f505c09f5a8d58723b5cf6eeb24fd830c3adde7e7a3c1b7a91223c92e5e93d34de41408a28daaed2326334b98053becdd3a8740b74e4df54750f242aced1e7042ac5d222032aaa9246987ab32354c1a12835b72ce35493157b2d6881897dde8b062aa2ad9e80dd0dbda4f73218f1209d52152a6f44db0f06559c5ec181e324f81d1223874092a489621133ed4f37a6df25ac9cf4691ba648679d7e3a8f43fa6d2d3529b36148adddadc141183be86f82f907fb884cdfc5cd7571cd6824e52a9f2c0ecd234e6056de383a7ed8949c882d9c297788215947232be854687d834d6d408a213560dd7100b3c79d1a71f18b705a071402101dd56d5f4bc7110eab2118603d8efe3f06a29bedc1dee4b41646e25e2a85c93a609b4b357d609cd50e7b1b3e3c3f1f855ff5a65a721c695cf4d8bd8f75beb2a258139d367df5618ac94490764a9c17a5dfa9cfcc8c7c910a8c0388728da0389750b444e5113fef8fc8d382817d0c95fc42d1976194fee83c67a31cf1a7ee43cef3bee861f0b60d19435104aa494d23ded88d7f6cec184849f4156b5b9707639b8808fbe4e51701fb851c3ba6ac48ff032e1d0c1ef348fba3236d599c2a85b8ba6a8f8b1175ce1e5da179f52081b199c3f91db7de4ca81c2394d4c6858303ed5b41b2df400c5c24fe61ba26f36ac1962c0921186cb360a19d3e705aae18e5c629e932f0efd04508be756b624f9235f6c47f4a78c4fa75045ed2a599446aa8154f426d59df75ffa52d36aeb2193107c17b43352690586ad10c5f1952d8b460e60763e9bbc30f9792601b565248b04798a74e30e4b4ea90d80f5b8c5ce01a0f4aff381bcd8632129bbf9db5f88e322dfbc6efc2f0a1db00f13f68f8972f5ffc87d218bc63ba9d26e4d27a9b825e3231171e7cc5f04c95aa3661d81024ad1e55c207bd2d028f9116e61931f940312eb90a8e451a4e935f993b56bc2745715ed82b539744983a8674d17981af74833ed7233898784d2f08a8e60f7d3ecb0a4af1f574d20072533d0e2aff488df2d8a80a437f00cb15f173f9ac5ba541dfd2905f2bb2d35289b6ebeef0e598ac9d90d8cc470fd7c6dfb230e880f02df7646a4a1a82d58a4dc0ea91629aea8971d2a7118df675a520a6945e4e9341b5644bdc91ba291ac266610ee5c1e8545acd5addf9e9c0c379639c8361290983ec8cb0595db257b67cbc8f2f7bfc9f833073ed996f194f51a1d3088f6516c6b20680142213fb675c613bf76e0177d500bb8436d36e7f81e6c7be17d5d60683d8aa372bf71de5d46f3119fc6e42f73500a568876f4936faa1b18dfa8f0c2320731cb96bced267515b438a0060d34f2804293ea9c27df4d56e252ea52c386fb0391d9ea01b7282a517f680da3ee516c2296082e815586ed0ce02526d5e6c85581f15b4e889e00ca6cc87fbaffa0975f43178e0e78b1b8f6359cfe0707cfee6911353f148c7159087b29f62d755804e46226a2218e61be4de7bf2412b0c93ae852fbf4ff755abfee938288560b2f0824cf5fbdb57b69e28e7333cdbd3156f875f27c4b57b72c3c013aaf66a526cc969e77eef4edb438f5377d700f58189a5805a7129cab75742846891bffbb27d8e0a43fd60b99a462ad477aa9288cb50d9d284351a0d5ceb345487e4cf8382266d68679e2efc7fdb3fb58c239f16cde7fe1a06908d0148a17e943533bc7f142ca1a8e3be2815479efbcd2d401d342bdb60c58e91fdc06e08bf04c6ed2b88e842521d412ad59ffcd34d89a022dde7cc6fe91c789a3a8530066a1a768dfb04e2ff75539f891855e51743eb9bebe7d58f0f9344cbb158bd51466447e3fa9d671bf7f0d05f13c2c875869f39c81f2aec92e0fd665ec460352d62d81058b17c6495691bbeaecebdb128a060ef7de9033d76d3ac9cdef136dbaee715c9dbbb85c591be035f6cf8d36145533e0ad0eb70d51c83554a5a157653b8265d11280124c0e012ec406be4e3fb72c9e539fa0db2668f10cb214cf961ab962b0054ee3a11f397b112c227de0274eb56d5f51800486c07e35076ec532adf55dd8d966b09e02f4649e39e9d37047a9bb7bbcee6d706c50e7943685aea3f3c385a9a622a8f7c15a32d5335c549153494dc8841ea8eac425ebe49d5f5eb61009719b822f9d23bda550e671e1d1d02c2f4793d65bc271bf694ef2295c6bc428423b77e9446df75e735625ebc49f5f00180cf3a39b5082943935366a1097cb163e4e8084451bf9f042b78f7bf90be46494a86d0a8de5b04e9c301ef73ddc382a53b09ad06bb05e5b3377f49a1ce56d21e66ca777823aa9bf64190a49573c0e91b295be4c5bc6f4e482b9cd19c6cc4388e3ad40a3b8d1a4350cd74c171702a34da511dc7ce72229312188093181748d5b9623454e8882a15e409063872eaeb937ee7ae16e99f0e6a9ad9d04d37f5dba20622e530056e6cff61b8ecc93e0fc702bcd1de3c235fa6d2b9439c848766bba3d982632f110dbc1848667c00d76bdf577220c9300f26ba112e69cb27b07424e7e1dcd6cf454699e809c154296dafaa1f4b64730e729879a72f2236980554eed28a221f85abd56413a1c39527ec4d46b65e0a3fd30027e1901185e670a7ccde1cae373271a9672ea66c7414946f5aca447650b4a14636da60e6e938558efdf61967bd7ef448f2a2da74c2cbc4155327142464cb115a72c112b6ed326004a836885fa2c895ace4e75ce02928022f60ccfa65f012e463ed097fd9bae9326f402ddc5d7bb10d45b8755f09e6c51c720a4d2383a077fe2fa30eefa6a30c66a56abd4dd9d225b8e6d410e3871d2f1aa84d6b2f5b2d80f65906932ddf74a42c3422f3c27485b7173631120c61ca0fbdd080c7673a0583b81d4b1eb0aff9793f27b66d5442c8f5be480f6e261912b94214049e033dbf6a6d3b4e26c82e52a5f2c7a5b324bb031f41f4499e3eb5a9669ff3ef932b0be5bc81af3b5179b6ce16cbed36637b4a3a9381be8ed423efd0cebb66922edfb3c8ef546a7ba209fb7bdb32b18d5d8d39f08d1a5d6e51d0f4d60bce1b4b407a3d1f3b133a27688910d620870d0a432995f39f05c7629c04a50a53d36a815a9a6c48ab0de66b84eb875820e893eea61644ecc1bac3bff1f343dba95d0f32c2d3176628b8c84a9e2996892f66ebc9dd6c8a4d17ef21da3e04313748a2da6654d97634b6eb755622590f24efcb876d85f9692f38bc83744ae4fb5335169c5f56ce13924c858958c42425e15d27d5195581c96e596b41486003b9b532eb291249ec3bf1dfdf5e577a0800ea60f137f0a6a52522ef6fdba84d87811a1ce3028ea76ff6993f42a19a1c5882512ded05ae936cae6f14ce8e6c5399e033ceee36cc8ed59b146ba2a778a0038cbaf87f2f8a7a0fbb8997359a0463accb50a549e15caca8f1acfe00b2d61581f32b6e1123091dca9d5ca4e6e89e3b094ca6fe0dd554c0a234d5c6a02ca8f3ad8a8b7bfb9f499d08d19eb955741511f1609bed90425e331d66f98d08f09e1fd7dc7c30385a064c2990965a70aa6a2412eb624d44ba12dd01d1555f7262e3ecf5f263974c4b10eeb47c3fca62d05cb2038237271f2b5467ebea7c149ba98cf4239ee586a457c93cb349c59f913effb8ce0beafecf32223cd921406c890e4f3807a6c61cd855e75f22be60aac6b36f3b02262f05083ea22001d3a51949756fd62dfb26475106f5511cf4adb17673b3a77d22910ffe6ecd16cd7231273219ad1c02935972f6a4a421d19e91d2b4b2159fb91546fd0c83ce8eb8cf25f6d383c1cc92ff70426cee958167ac10eef2495115cb2a5aca6201b63428b05ade53223a18f2d76371eb4438d00bddc756842e00cce27e5847e28ecd2851d0c1f324d0171f0d6d3bcd9f1d9feb6c0ef313ea77426f14aee74a4b839a808948cba9949813f435e90ce95b4ffe3c72f4705b27d4fee89100463702cea5ab5bfc274cb1ce5448395ca320ba0ed26aacd7ac36d85a9a8037fe484296d7199c5419717e68dbdc284f573a51e9980f8fc62739308e634d54693fee69f63eaac0d657744c1f1cd6c84a2616fb8c75c39c8a310b619cbdbf53d181313de4b15cc365ae41333bcf38d8cc5f7fb9e417c34edf3ccb9d697a7ab0d6b8c6459c08ed905cc27d70310b2d1e9fa4753734fd2a74b3dbbf94d27bd1494dad1c5344fb96047801eb538f8d65a9971d5747cf119523e297c5286cc075d4f826a651a8b8d20e6c1f496afdfdcf04599d76d8766c08dde3db68f68e2834c4ea5d1285affbca48dc190cf3c6c18dc3633f1df96d54a1651ee5edb29233d41c41dbe71abeb00fa07047bb1088cfc8ac721d7b41d64b6cae7dfab67cc1c7df46a8d54933631841efd0a665b427767a725cb32e809c9c23432deb74e129d200ef14b1a57f0bfc7610601c86ab93714f4347cdd73bb4072d5e3c1521d71c7bcfda4b814d3526e0ddaf860645a70b29b1e3f2b607d594aeed100c2a4ed2723a8706e3b65d4feb07539d7020a955abb9b382579dd49e9a8368104fbd6c4324a0463045cfa97e76d71d2b4759f4080a4151fe4474f46d593a4cb2f925b262c64334", 0xe46}], 0x5, &(0x7f0000001440)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000016c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, 0x0, 0x60}}], 0x2, 0x0) 20:34:32 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="fbc21e75339042b2819f3b64bd62eaa7971cbb3551a4f316e83845969fcdd7c44b9cd7e4897d154bcdc396edf47d18c0cea86a0db70a"]) 20:34:32 executing program 3: r0 = socket(0x26, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 20:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x80) 20:34:32 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) keyctl$session_to_parent(0x12) 20:34:32 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="a0000000", @ANYRES64], 0xa0) 20:34:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xa0) 20:34:33 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 20:34:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 20:34:33 executing program 3: keyctl$set_reqkey_keyring(0x1d, 0x0) 20:34:33 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={0x0, 0x0, 0x18}, 0x10) 20:34:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 20:34:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) 20:34:33 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000005a80)='ns\x00', &(0x7f0000005ac0)='./file0\x00', 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) [ 3170.181706][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:34:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x700) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200004) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) lseek(0xffffffffffffffff, 0x800002, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 20:34:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)) [ 3170.408337][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:34:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000005480)='ns\x00') write$cgroup_pid(r0, 0x0, 0x0) 20:34:34 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) 20:34:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0xf0002008}) 20:34:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002980)={0x16, 0x0, 0x2, 0xf178, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) [ 3171.164444][ T27] audit: type=1800 audit(1603053275.237:55): pid=16695 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16375 res=0 errno=0 20:34:35 executing program 2: socket(0x1, 0x0, 0x100) [ 3171.414150][ T27] audit: type=1800 audit(1603053275.377:56): pid=16695 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16375 res=0 errno=0 [ 3171.436563][ T27] audit: type=1400 audit(1603053275.407:57): avc: denied { block_suspend } for pid=16697 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 3171.485889][T16696] ISOFS: Unable to identify CD-ROM format. [ 3171.685003][T16696] ISOFS: Unable to identify CD-ROM format. 20:34:35 executing program 0: bpf$OBJ_GET_PROG(0x1d, &(0x7f0000000180)={&(0x7f0000000140)='\x00'}, 0x10) 20:34:35 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x5) syz_open_dev$rtc(0x0, 0x0, 0x0) 20:34:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) 20:34:35 executing program 4: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x65faff21b9fd8a99) 20:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001940)="87d423299809b4fcbf8c06bf", 0xc) 20:34:36 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x4c, 0x14, 0x42f1de4094b68fcb, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0x37, 0x1, "5b4a6df43f43006c6e407efc7af0f27f865d96d3a3f271499e48ba4a2519e3dd4199ca3f700cf2f5d2b6ebbb4479eeb54bfa05"}]}, 0x4c}}, 0x0) 20:34:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:34:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x3) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x4c81, 0xfffffffffffffffe) 20:34:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) 20:34:36 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x77}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x303001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x3f, 0xa1f3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0xa00000, 0x8, 0x0, 0x7ff], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000280)=0x2) r3 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x6, 0x88300) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000300)={0xf3e5, 0x3, 0x7, 0x4}) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x400, 0x70bd28, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x44) syz_usbip_server_init(0x4) 20:34:36 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0) 20:34:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x3f}) 20:34:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3173.412506][T16736] vhci_hcd: pdev 3 20:34:37 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001840)='/dev/ocfs2_control\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80)='TIPCv2\x00') 20:34:37 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 20:34:38 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) [ 3173.983029][T16747] vhci_hcd: pdev 3 20:34:38 executing program 0: syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x28101) 20:34:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000001800)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 20:34:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) 20:34:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) 20:34:38 executing program 5: clock_adjtime(0x0, &(0x7f00000000c0)={0x31e3}) 20:34:38 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80840, 0x0) 20:34:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 20:34:39 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) 20:34:39 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) 20:34:39 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001840)=@buf) 20:34:39 executing program 3: r0 = socket(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 20:34:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8}]}, 0x38}}, 0x0) 20:34:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) 20:34:39 executing program 1: r0 = socket(0x15, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 20:34:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001800)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'ip6gre0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@ipv4={[], [], @empty}, @mcast2, [], [], 'team0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ipv6={@loopback, @remote, [], [], 'vxcan1\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 20:34:39 executing program 3: r0 = socket(0xa, 0x3, 0x2) connect$nfc_raw(r0, &(0x7f0000000000), 0x10) 20:34:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)) 20:34:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 20:34:40 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r0 = socket(0x10, 0x3, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000380)=""/36) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x4c, 0x48, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 20:34:40 executing program 3: r0 = socket(0x22, 0x2, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) 20:34:40 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:34:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 20:34:40 executing program 4: r0 = socket(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x2802) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0xffffffff, 0xe237f82c757352a3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001b40)={0x0, 0xffffffffffffffb4, &(0x7f0000001b00)={0x0, 0xfffffffffffffe55}, 0x1, 0x0, 0x0, 0x8040}, 0x40048cc) openat$cgroup_int(r1, &(0x7f0000000440)='io.weight\x00', 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', r4, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x1, 0x4, 0xff, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x65, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x24, 0x70, 0x1, 0x5, [{@broadcast, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8000}, {@empty, 0x7}, {@loopback, 0x8001}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000033c0)={'syztnl2\x00', &(0x7f0000003380)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x5, 0x1f, {{0x6, 0x4, 0x2, 0x2e, 0x18, 0x68, 0x0, 0x35, 0x2d, 0x0, @loopback, @local, {[@end]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xeb0}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x5}}, {0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x3f}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x40}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8000}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f000000aa40)={'syztnl2\x00', &(0x7f000000a940)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x9, 0x1, {{0x32, 0x4, 0x3, 0x6, 0xc8, 0x65, 0x0, 0xc9, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@rr={0x7, 0x1b, 0x8c, [@remote, @local, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x28, 0x9e, 0x0, 0x0, [0x0, 0x324b05cd, 0x10000, 0x3c16, 0x3, 0x200, 0x4, 0x1, 0x3]}, @rr={0x7, 0xb, 0xea, [@remote, @private=0xa010101]}, @lsrr={0x83, 0xf, 0x24, [@broadcast, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x4, 0x32, 0x3, 0x4}, @generic={0x82, 0xe, "cc675bbfe17cbc5f1c96441f"}, @rr={0x7, 0x27, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @empty, @private=0xa010101, @loopback, @loopback, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x9, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x8000}]}]}}}}}) r9 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', r10, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000adc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000ad80)={&(0x7f000000aa80)={0x2d4, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xe0000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x41}, 0x39acc02d6ac0b11a) 20:34:40 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x6, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) syz_usbip_server_init(0x0) 20:34:41 executing program 1: r0 = socket(0x2b, 0x1, 0x0) bind$alg(r0, 0x0, 0x0) 20:34:41 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x0) 20:34:41 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2100) [ 3177.352229][T16807] vhci_hcd: pdev 2 20:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', 0x0}) 20:34:41 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000280)=""/197, 0xc5) [ 3177.924256][T16825] vhci_hcd: pdev 2 20:34:42 executing program 0: r0 = socket(0x15, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f00000000c0), 0x10) 20:34:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x201}, 0x18}}, 0x0) 20:34:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 20:34:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 20:34:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 20:34:42 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vcsa\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x9, 0x1a, r0, 0x0) 20:34:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 20:34:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20}, [@RTA_PRIORITY={0x8}]}, 0x24}}, 0x0) 20:34:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000300)) 20:34:43 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x858) 20:34:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', 0x0}) 20:34:43 executing program 1: r0 = socket(0x15, 0x5, 0x0) sendto$rose(r0, 0x0, 0x1a, 0x0, 0x0, 0x0) 20:34:43 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) 20:34:43 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:34:43 executing program 2: r0 = socket(0xa, 0x3, 0x2) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 20:34:43 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x60, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x2e, 0x2a, [@cf={0x4, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4}, @link_id={0x65, 0x12, {@random="2141217631f8", @broadcast, @device_b}}]}]}, 0x60}}, 0x0) syz_read_part_table(0x0, 0xaaaaaaaaaaaae12, &(0x7f0000000000)) 20:34:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x14, 0x52, 0xab9e07a30195c2b5}, 0x14}}, 0x0) 20:34:44 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)) 20:34:44 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x1f) 20:34:44 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x40, 0x2f, 0x0, @remote, @rand_addr, {[@lsrr={0x83, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @rand_addr]}, @generic={0x0, 0xb, "b10961993abdc1fa8c"}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@dev}, {@remote}, {@remote}]}, @end, @end, @generic={0x0, 0x5, "889684"}]}}}}}) 20:34:44 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) 20:34:44 executing program 0: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) syz_open_dev$vcsu(0x0, 0xfff, 0x1814c1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) syz_open_procfs(0x0, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 20:34:44 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 3181.139979][T16876] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:34:45 executing program 2: 20:34:45 executing program 4: 20:34:45 executing program 3: 20:34:45 executing program 1: 20:34:45 executing program 5: 20:34:46 executing program 2: 20:34:46 executing program 3: [ 3182.082386][T16890] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:34:46 executing program 4: 20:34:46 executing program 5: 20:34:46 executing program 1: 20:34:47 executing program 0: 20:34:47 executing program 3: 20:34:47 executing program 4: 20:34:47 executing program 2: 20:34:47 executing program 5: 20:34:47 executing program 1: 20:34:47 executing program 2: 20:34:47 executing program 3: 20:34:48 executing program 4: 20:34:48 executing program 3: 20:34:48 executing program 0: 20:34:48 executing program 1: 20:34:48 executing program 5: 20:34:48 executing program 2: 20:34:48 executing program 1: 20:34:49 executing program 3: 20:34:49 executing program 4: 20:34:49 executing program 0: 20:34:49 executing program 2: 20:34:49 executing program 5: 20:34:49 executing program 3: 20:34:49 executing program 4: 20:34:49 executing program 0: 20:34:49 executing program 1: 20:34:49 executing program 2: 20:34:49 executing program 5: 20:34:50 executing program 3: 20:34:50 executing program 4: 20:34:50 executing program 1: 20:34:50 executing program 0: 20:34:50 executing program 5: 20:34:50 executing program 2: 20:34:51 executing program 0: 20:34:51 executing program 3: 20:34:51 executing program 4: 20:34:51 executing program 1: 20:34:51 executing program 5: 20:34:51 executing program 2: 20:34:51 executing program 0: 20:34:51 executing program 3: 20:34:51 executing program 1: 20:34:51 executing program 4: 20:34:51 executing program 5: 20:34:52 executing program 2: 20:34:52 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x54140, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 20:34:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 20:34:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x1) 20:34:52 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 20:34:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$alg(r0, &(0x7f000000ac80)={0x0, 0x0, 0x0, 0x18, &(0x7f000000ac00), 0x18}, 0x0) 20:34:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 3188.819799][T16964] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:34:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x0, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)='.{%(#\x00', r0) 20:34:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @local, 0x14}, 0x1c, 0x0}, 0x40048d0) 20:34:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000008f40)) 20:34:53 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1402, 0x0) 20:34:53 executing program 5: pipe2(&(0x7f0000000ac0), 0x0) 20:34:53 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)={0x4c, 0x12, 0x5ec8d28be985cce9}, 0x4c}}, 0x0) 20:34:53 executing program 1: r0 = mq_open(&(0x7f0000000000)=':)-\xbf{\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 20:34:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) 20:34:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') futimesat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 20:34:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') read$FUSE(r0, 0x0, 0x0) 20:34:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [], 'bond_slave_0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@private0, @private0, [], [], 'veth0_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'ip6erspan0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x292) 20:34:54 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x14, 0x42f1de4094b68fcb, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "5b4a6df43f43006c6e407efc7af0f27f865d96d3a3f271499e48ba4a2519e3dd4199ca3f700cf2f5d2b6ebbb44"}]}, 0x48}}, 0x0) 20:34:54 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1402, 0x0) 20:34:54 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000800)='batadv\x00') 20:34:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@loopback, 0x0, r1}) 20:34:55 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) 20:34:55 executing program 0: pkey_mprotect(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xc, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 20:34:55 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0}) select(0x40, &(0x7f0000000140)={0x9}, &(0x7f0000000180)={0x8}, &(0x7f00000001c0)={0x2a}, &(0x7f0000000240)={r0}) 20:34:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') read$FUSE(r0, 0x0, 0x0) 20:34:55 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') clock_gettime(0x0, &(0x7f0000000200)) select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x8}, &(0x7f00000001c0)={0x2a}, 0x0) 20:34:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={0x0}}, 0x0) 20:34:55 executing program 0: msgrcv(0x0, 0x0, 0xaf, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) 20:34:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'vlan0\x00', 'gre0\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x0, 'realm\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "09cd14775601010000457adbf13d8523a2178d11ab63e102e11df3e365b6b128799b7bfa99107d301de503af038639a31540e13a46b5c1e1a100"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x46e) 20:34:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={r2, @broadcast, @local}, 0xc) 20:34:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:34:56 executing program 4: socket$inet6(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0) 20:34:56 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) 20:34:56 executing program 3: timer_create(0x0, 0x0, &(0x7f0000001080)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 20:34:56 executing program 5: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:34:56 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11, 0x27}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c6f92a85f9f0f5c5df"}]}, 0x24}}, 0x0) 20:34:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x0}, 0x0) 20:34:56 executing program 1: request_key(&(0x7f0000000540)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) 20:34:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 20:34:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@flushpolicy={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@offload={0xc}, @lastused={0xc}]}, 0x28}}, 0x0) 20:34:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000040)) 20:34:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x218, 0x148, 0x218, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'vlan0\x00', 'gre0\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x1d}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "09cd14775601010000457adbf13d8523a2178d11ab63e102e11df3e365b6b128799b7bfa99107d301de503af038639a31540e13a46b5c1e1a100"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 20:34:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x8, 0x2c) 20:34:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:34:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f00000026c0)=[{{&(0x7f0000000080)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}}, {{&(0x7f00000005c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, 0x0}}], 0x2, 0x0) 20:34:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r0, 0x0, 0x0) 20:34:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000100)={@private2}, 0x14) 20:34:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 20:34:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f00)=@broute={'broute\x00', 0x20, 0x7, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0xe0) 20:34:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@deltaction={0x14, 0x31, 0x1}, 0x14}}, 0x0) 20:34:58 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0xffffffffffffffff) 20:34:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r0, 0x0, 0x0) 20:34:59 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x24, 0x14, 0x101, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c6f92a85f9f0f5c5df"}]}, 0x24}}, 0x0) 20:34:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @local}, [], [], 'ip6gre0\x00', 'xfrm0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 20:34:59 executing program 1: shmctl$IPC_SET(0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000540)='ceph\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000600)=""/82) syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') 20:34:59 executing program 2: pipe2(&(0x7f0000000ac0)={0xffffffffffffffff}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x0) 20:34:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:34:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@private1, r1}, 0x14) 20:34:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r0, 0x0, 0x0) 20:34:59 executing program 4: msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/171}, 0xfffffffffffffed3, 0x0, 0x0) 20:35:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x216, 0x4) 20:35:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') read$FUSE(r0, 0x0, 0x0) 20:35:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x0, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r0) 20:35:00 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000000840), 0x4924924924927b5, 0x0) 20:35:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r0, 0x0, 0x0) 20:35:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 20:35:00 executing program 1: select(0x3, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) [ 3196.871905][T17119] not chained 540000 origins [ 3196.876554][T17119] CPU: 0 PID: 17119 Comm: syz-executor.0 Not tainted 5.9.0-rc8-syzkaller #0 [ 3196.885261][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3196.895335][T17119] Call Trace: [ 3196.898659][T17119] dump_stack+0x21c/0x280 [ 3196.903023][T17119] kmsan_internal_chain_origin+0x6f/0x130 [ 3196.908770][T17119] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 3196.915024][T17119] ? selinux_socket_getpeersec_dgram+0x6e2/0x770 [ 3196.921389][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3196.926613][T17119] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3196.932443][T17119] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3196.938562][T17119] ? security_socket_getpeersec_dgram+0x1bf/0x220 [ 3196.945004][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3196.950237][T17119] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3196.956067][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3196.961293][T17119] ? kmsan_internal_set_origin+0x85/0xc0 [ 3196.966952][T17119] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3196.973052][T17119] ? _copy_from_user+0x201/0x310 [ 3196.978020][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3196.983248][T17119] __msan_chain_origin+0x4d/0x90 [ 3196.988217][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3196.993381][T17119] get_compat_msghdr+0x108/0x2b0 [ 3196.998357][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.003186][T17119] ? kmsan_internal_check_memory+0xb1/0x3b0 [ 3197.009124][T17119] ? __msan_poison_alloca+0xec/0x110 [ 3197.014776][T17119] ? ktime_get_ts64+0x785/0x8c0 [ 3197.019665][T17119] ? kmsan_copy_to_user+0x82/0x90 [ 3197.024704][T17119] ? _copy_to_user+0x1bf/0x260 [ 3197.029509][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3197.034735][T17119] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3197.040561][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3197.045790][T17119] ? kmsan_get_metadata+0x116/0x180 [ 3197.051019][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.056427][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.062001][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.067232][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.072110][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.076645][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.082984][T17119] RIP: 0023:0xf7fb7549 [ 3197.087065][T17119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3197.106700][T17119] RSP: 002b:00000000f55b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 3197.115126][T17119] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000840 [ 3197.123103][T17119] RDX: 00000000924927b5 RSI: 0000000000000000 RDI: 0000000000000000 [ 3197.131081][T17119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3197.139059][T17119] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3197.147051][T17119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3197.155043][T17119] Uninit was stored to memory at: [ 3197.160083][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.165824][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.170781][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.175916][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.180867][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.185637][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.191018][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.196574][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.201778][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.206647][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.211158][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.217480][T17119] [ 3197.219804][T17119] Uninit was stored to memory at: [ 3197.224840][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.230565][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.235509][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.240629][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.245571][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.250343][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.255721][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.261281][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.266485][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.271346][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.275858][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.282179][T17119] [ 3197.284507][T17119] Uninit was stored to memory at: [ 3197.289556][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.295281][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.300229][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.305347][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.310290][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.315059][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.320454][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.326008][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.331217][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.336075][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.340601][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.346919][T17119] [ 3197.350203][T17119] Uninit was stored to memory at: [ 3197.355260][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.360990][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.365935][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.371073][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.376019][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.380888][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.386266][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.391824][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.397029][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.401886][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.406395][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.412710][T17119] [ 3197.415032][T17119] Uninit was stored to memory at: [ 3197.420065][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.425806][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.430755][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.435871][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.440813][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.445608][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.450985][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.456540][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.461745][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.466602][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.471122][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.477438][T17119] [ 3197.479761][T17119] Uninit was stored to memory at: [ 3197.484795][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.490519][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.495465][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.500581][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.505522][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.510295][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.515672][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.521315][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.526531][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.531403][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.535917][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.542235][T17119] [ 3197.544556][T17119] Uninit was stored to memory at: [ 3197.549594][T17119] kmsan_internal_chain_origin+0xad/0x130 [ 3197.555317][T17119] __msan_chain_origin+0x4d/0x90 [ 3197.560278][T17119] __get_compat_msghdr+0x6db/0x9d0 [ 3197.565407][T17119] get_compat_msghdr+0x108/0x2b0 [ 3197.570355][T17119] __sys_sendmmsg+0x77e/0x1010 [ 3197.575127][T17119] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 3197.580505][T17119] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 3197.586059][T17119] __do_fast_syscall_32+0x129/0x180 [ 3197.591264][T17119] do_fast_syscall_32+0x6a/0xc0 [ 3197.596120][T17119] do_SYSENTER_32+0x73/0x90 [ 3197.600632][T17119] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3197.606947][T17119] [ 3197.609274][T17119] Local variable ----msg_sys@__sys_sendmmsg created at: [ 3197.616229][T17119] __sys_sendmmsg+0xc1/0x1010 20:35:01 executing program 3: select(0x40, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)) [ 3197.620910][T17119] __sys_sendmmsg+0xc1/0x1010 20:35:01 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 20:35:02 executing program 1: 20:35:02 executing program 5: 20:35:02 executing program 4: 20:35:02 executing program 0: 20:35:03 executing program 2: 20:35:03 executing program 4: 20:35:03 executing program 3: 20:35:03 executing program 5: 20:35:03 executing program 1: 20:35:03 executing program 0: 20:35:03 executing program 3: 20:35:03 executing program 4: 20:35:03 executing program 5: 20:35:03 executing program 2: 20:35:03 executing program 1: 20:35:04 executing program 0: 20:35:04 executing program 4: 20:35:04 executing program 3: 20:35:04 executing program 5: 20:35:04 executing program 2: 20:35:04 executing program 1: 20:35:04 executing program 0: 20:35:05 executing program 4: 20:35:05 executing program 3: 20:35:05 executing program 5: 20:35:05 executing program 2: 20:35:05 executing program 1: 20:35:05 executing program 0: 20:35:05 executing program 4: 20:35:05 executing program 2: 20:35:05 executing program 5: 20:35:06 executing program 3: 20:35:06 executing program 1: 20:35:06 executing program 0: 20:35:06 executing program 4: 20:35:06 executing program 2: 20:35:06 executing program 5: 20:35:06 executing program 3: 20:35:06 executing program 0: 20:35:06 executing program 1: 20:35:07 executing program 4: 20:35:07 executing program 2: 20:35:07 executing program 1: 20:35:07 executing program 3: 20:35:07 executing program 5: 20:35:07 executing program 0: 20:35:07 executing program 4: 20:35:07 executing program 2: 20:35:08 executing program 1: 20:35:08 executing program 3: 20:35:08 executing program 5: 20:35:08 executing program 0: 20:35:08 executing program 4: 20:35:08 executing program 2: 20:35:08 executing program 1: 20:35:08 executing program 3: 20:35:08 executing program 0: 20:35:08 executing program 5: 20:35:09 executing program 4: 20:35:09 executing program 2: 20:35:09 executing program 1: 20:35:09 executing program 3: 20:35:09 executing program 0: 20:35:09 executing program 5: 20:35:09 executing program 4: 20:35:10 executing program 2: 20:35:10 executing program 1: 20:35:10 executing program 3: 20:35:10 executing program 5: 20:35:10 executing program 0: 20:35:11 executing program 3: 20:35:11 executing program 2: 20:35:11 executing program 4: syz_open_dev$evdev(0xffffffffffffffff, 0x0, 0x0) 20:35:11 executing program 0: rt_sigsuspend(&(0x7f0000000040)={[0x80000001]}, 0x8) 20:35:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@private1}}, 0x40}}, 0x0) 20:35:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x29, 0x0, &(0x7f0000002180), 0x4) 20:35:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x4b49, 0x0) 20:35:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000003700)='projid_map\x00') 20:35:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7f, 0x7fffffff, 0x0, 0x0, 0x5]}) 20:35:12 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7ffffffc, 0x20a00) 20:35:12 executing program 1: r0 = socket(0x2, 0x3, 0xff) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 20:35:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:35:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001010102"], 0x14}}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x541b, 0x0) 20:35:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fstat(r0, 0x0) 20:35:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045516, &(0x7f0000000080)) 20:35:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/rfkill\x00', 0xa02, 0x0) write$rfkill(r0, &(0x7f0000000e80)={0x0, 0x8, 0x3}, 0x8) 20:35:13 executing program 1: clock_gettime(0x0, &(0x7f0000000500)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 20:35:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x80086601, &(0x7f0000000080)) 20:35:13 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x80c00) 20:35:13 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 20:35:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r0, 0x0, 0x0) 20:35:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x217}, 0x40) 20:35:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x80086601, 0x0) 20:35:14 executing program 5: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x7fff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') syz_open_procfs$namespace(0x0, &(0x7f00000023c0)='ns/ipc\x00') 20:35:14 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') 20:35:14 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0xce141) 20:35:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 20:35:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf) 20:35:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="e400000000020500000000000000000005000006780003802c0000000000000000000000001400040020010000000000000000000000000c00028005000100840000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000000000000001060003400000000c06000340000400000800084000000001090006007070"], 0xe4}}, 0x0) 20:35:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x2d}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 20:35:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x541b, 0x0) 20:35:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064c9, &(0x7f0000000080)) 20:35:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0), 0x2) 20:35:15 executing program 4: r0 = socket(0xa, 0x3, 0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 3211.546991][T17293] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 20:35:15 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000006c0), 0x8, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 20:35:15 executing program 1: socket(0xa, 0x3, 0x3a) 20:35:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/ptmx\x00', 0x200001, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 20:35:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) 20:35:16 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8901, &(0x7f0000000080)) 20:35:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)={0x10, 0x10, 0x1}, 0x10}], 0x1}, 0x0) 20:35:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)) 20:35:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8901, &(0x7f0000000800)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:35:16 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x20800, 0x0) 20:35:16 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x72b62c44357f39e6) 20:35:16 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xd5, 0x4040) 20:35:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000002180), 0x4) 20:35:17 executing program 5: r0 = socket(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) 20:35:17 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$rose(r0, 0x0, 0x0, 0x0) 20:35:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8904, 0x0) 20:35:17 executing program 0: r0 = socket(0xa, 0x3, 0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 20:35:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0045516, 0x0) 20:35:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0}}) 20:35:17 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1fffff) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 20:35:18 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') 20:35:18 executing program 0: socket(0x25, 0x1, 0x3) 20:35:18 executing program 2: bpf$MAP_CREATE(0x7, &(0x7f0000000240), 0x5d) 20:35:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 20:35:18 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/rfkill\x00', 0xa02, 0x0) write$rfkill(r0, &(0x7f0000000e80)={0x0, 0x5, 0x3}, 0x8) 20:35:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000002180), 0x4) 20:35:18 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000200), 0x0) 20:35:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="08010000170a030000000000000000000000000604000380740007800800014000000000080002400000000608000140000000000800014000000000400003801400010065727370616e30000000deffffff000014000100626f6e643000000000000000000000001400010076657468315f766c616e000000000000080001400000000008000140000000000900010073797a3000000000090002"], 0x108}}, 0x0) 20:35:19 executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000240)) 20:35:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x3}, 0x14}}, 0x0) 20:35:19 executing program 4: r0 = socket(0x2, 0x3, 0xff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0xf0ff7f}}, 0x0) 20:35:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="08010000170a03"], 0x108}}, 0x0) [ 3215.365155][T17366] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 3215.373523][T17366] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)={0x10, 0x0, 0x1}, 0x10}], 0x1}, 0x0) 20:35:19 executing program 0: clock_gettime(0x786dabe06bfebeae, 0x0) 20:35:19 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000240), 0x5d) 20:35:19 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x989680}) [ 3215.835856][T17372] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.5'. 20:35:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x8542ddec41b83a7b, 0x0, 0x0, 0x0, 0x108}, 0x40) [ 3216.131034][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz-executor.2 20:35:20 executing program 5: bpf$MAP_CREATE(0x6, &(0x7f0000000240), 0x5d) 20:35:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc020660b, 0x0) 20:35:20 executing program 1: syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) 20:35:20 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000240), 0x5d) 20:35:20 executing program 4: r0 = socket(0xa, 0x3, 0x87) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, 0x0, 0x0) 20:35:20 executing program 3: r0 = socket(0xa, 0x3, 0xff) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null]}) 20:35:21 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x841) 20:35:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)={0x10}, 0x10}, {&(0x7f0000001c40)={0x10}, 0x10}, {&(0x7f00000005c0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="63d23b9ea4b60e0b62"]}, 0x24}], 0x3}, 0x0) 20:35:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)={0x14, 0x10, 0x1, 0x0, 0x0, "", [@generic='c']}, 0x14}], 0x1}, 0x0) 20:35:21 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:35:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000001c0)) 20:35:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 20:35:21 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') [ 3217.673134][T17402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17402 comm=syz-executor.1 [ 3217.687367][T17402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17402 comm=syz-executor.1 [ 3217.700734][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:22 executing program 0: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x7fff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') 20:35:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000002180), 0x4) 20:35:22 executing program 2: utimensat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={{0x77359400}, {0x77359400}}, 0x0) 20:35:22 executing program 1: r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 20:35:22 executing program 4: clock_gettime(0x6, &(0x7f0000000500)) 20:35:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) 20:35:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) 20:35:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8983, 0x0) 20:35:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf}, 0x5d) 20:35:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6000000, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 20:35:23 executing program 3: sysfs$1(0x1, &(0x7f0000000000)=')^1\x00') 20:35:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105511, &(0x7f0000000080)={0x5}) 20:35:23 executing program 2: shmget$private(0x0, 0x2000, 0xa5c0b67510aadbd, &(0x7f0000ffe000/0x2000)=nil) 20:35:23 executing program 0: r0 = socket(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2000051c}}, 0x0) 20:35:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) 20:35:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000002180), 0x4) 20:35:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 20:35:24 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000023c0)='ns/ipc\x00') 20:35:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 20:35:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)={0x10}, 0x10}, {&(0x7f0000001c40)={0x10}, 0x10}], 0x2}, 0x0) 20:35:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x149804) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 20:35:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000002180), 0x4) 20:35:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1fffff) 20:35:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2}, r1}}, 0x48) 20:35:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x89a1, 0x0) [ 3220.854480][T17458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17458 comm=syz-executor.0 [ 3220.867910][T17458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17458 comm=syz-executor.0 20:35:25 executing program 0: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200000) 20:35:25 executing program 1: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x80100) 20:35:25 executing program 4: r0 = getpid() sched_setparam(r0, &(0x7f00000006c0)=0x7fff) 20:35:25 executing program 3: clock_getres(0x0, &(0x7f00000004c0)) 20:35:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000002180), 0x4) 20:35:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 20:35:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001880)=ANY=[], 0x3b8}], 0x1}, 0x0) 20:35:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:35:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020101"], 0x14}}, 0x0) 20:35:26 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') syz_open_procfs$namespace(0x0, &(0x7f00000023c0)='ns/ipc\x00') 20:35:26 executing program 5: socket(0xa, 0x3, 0xff) 20:35:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 3222.426497][T17489] binder: BC_ACQUIRE_RESULT not supported [ 3222.432509][T17489] binder: 17487:17489 ioctl c0306201 20000280 returned -22 20:35:26 executing program 4: socketpair$nbd(0x2, 0x2, 0x0, &(0x7f0000000040)) 20:35:26 executing program 0: socketpair(0xa, 0x2, 0x73, &(0x7f0000000000)) 20:35:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 20:35:27 executing program 2: socket(0x22, 0x2, 0x2) 20:35:27 executing program 5: socketpair(0x23, 0x0, 0x0, &(0x7f0000012b00)) 20:35:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x401, 0x0, 0x1}, 0x40) 20:35:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 20:35:27 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 20:35:27 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) 20:35:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000012b00)) 20:35:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x66, 0x9}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x4080) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:35:28 executing program 5: sched_rr_get_interval(0x0, 0x0) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000002240)={0x1000, 0x8d6e, 0x6, 0x0, 0x8, 0x8, 0x100000000, 0x8}, &(0x7f0000002280)={0x40, 0x1, 0x3, 0x9, 0x2, 0xfffffffffffffeff, 0x7, 0x8}, &(0x7f0000002300)={r0, r1+10000000}, &(0x7f0000002380)={&(0x7f0000002340)={[0x187]}, 0x8}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004500)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000004540)={0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004580)={0x4, 0x8, 0x0, 0x5, 0x1b2, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x40) 20:35:28 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) 20:35:28 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002600)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x0) 20:35:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x4020940d, &(0x7f0000000080)={0x5}) [ 3224.687766][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 20:35:29 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000240), 0x5d) [ 3225.416581][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @generic="63d23b9ea4"]}, 0x20}], 0x1}, 0x0) 20:35:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x800455d1, 0x0) 20:35:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8981, &(0x7f0000000080)) 20:35:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x66, 0x9}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x4080) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:35:30 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 20:35:30 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8980, &(0x7f0000000080)) [ 3226.431377][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:30 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 20:35:30 executing program 2: socketpair$nbd(0x2, 0x6, 0x0, &(0x7f0000000040)) 20:35:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)={0x10}, 0x10}, {&(0x7f0000001c40)={0x10}, 0x10}, {&(0x7f00000005c0)={0x10}, 0x10}], 0x3}, 0x0) 20:35:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 20:35:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2102, 0x0) [ 3227.124315][T17573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17573 comm=syz-executor.5 [ 3227.138442][T17573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17573 comm=syz-executor.5 [ 3227.151759][T17573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17573 comm=syz-executor.5 [ 3227.185622][T17569] block nbd0: shutting down sockets [ 3227.210837][T17569] block nbd0: shutting down sockets 20:35:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x66, 0x9}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x4080) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:35:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/rfkill\x00', 0xa02, 0x0) write$rfkill(r0, 0x0, 0x600) 20:35:31 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xc041) 20:35:31 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x185000) 20:35:31 executing program 3: r0 = socket(0x2, 0x5, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 20:35:32 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') [ 3227.935422][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:32 executing program 2: socket$inet(0x2, 0x2, 0x11) 20:35:32 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fstat(r0, 0x0) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x7fff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') 20:35:32 executing program 3: socket$caif_stream(0x25, 0x1, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f0000000100)) 20:35:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6000000, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 20:35:32 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/autofs\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 20:35:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x66, 0x9}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x4080) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20:35:33 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x0, 0x0) 20:35:33 executing program 0: 20:35:33 executing program 3: [ 3229.357831][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:33 executing program 4: 20:35:33 executing program 5: 20:35:33 executing program 0: 20:35:34 executing program 2: 20:35:34 executing program 3: 20:35:34 executing program 4: 20:35:34 executing program 5: 20:35:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) socket$rds(0x15, 0x5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x66, 0x9}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x4080) 20:35:34 executing program 0: 20:35:34 executing program 2: 20:35:34 executing program 3: [ 3231.504266][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:35 executing program 0: 20:35:35 executing program 4: 20:35:35 executing program 2: 20:35:35 executing program 3: 20:35:35 executing program 5: 20:35:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) socket$rds(0x15, 0x5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x7, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "14a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f4"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) 20:35:36 executing program 0: 20:35:36 executing program 2: 20:35:36 executing program 4: [ 3232.350750][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:36 executing program 5: 20:35:36 executing program 3: 20:35:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="ac010580200000801c00028008009f000000000008009f000700000008002700000000006800008034000380300001800c000180050005000f00000020000180060004008831000005000700050000000600040009000000040008000a00010008021100000100002400028008002700010000000800270000000000050019010c0000000500180131000000200100800a000100ffffffffffff000004010380d40001801000018004000a00050006000e0000002c0001800500060005000000050003000100000004000a0004000800050006000a000000050005000100000008000180040001002c000180040001000800020004000000050006001c00000004000100050007004000000005000500020000000800018004000800380001800800020004000000050005000d00000004000100050003000500000005000700fb00000008000200030000000800020002000000040001801c000180050006001e0000000800020003000000050003000300000004000200280001800c00018005000700200000001800018005000500070000000400010006000400090000000a0001000802110000010000"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) socket$rds(0x15, 0x5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 20:35:37 executing program 2: 20:35:37 executing program 0: 20:35:37 executing program 4: 20:35:37 executing program 5: 20:35:37 executing program 3: [ 3233.292273][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:37 executing program 0: 20:35:37 executing program 2: 20:35:37 executing program 5: 20:35:38 executing program 4: 20:35:38 executing program 3: [ 3234.079526][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:38 executing program 0: 20:35:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="ac010580200000801c00028008009f000000000008009f000700000008002700000000006800008034000380300001800c000180050005000f00000020000180060004008831000005000700050000000600040009000000040008000a00010008021100000100002400028008002700010000000800270000000000050019010c0000000500180131000000200100800a000100ffffffffffff000004010380d40001801000018004000a00050006000e0000002c0001800500060005000000050003000100000004000a0004000800050006000a000000050005000100000008000180040001002c000180040001000800020004000000050006001c00000004000100050007004000000005000500020000000800018004000800380001800800020004000000050005000d00000004000100050003000500000005000700fb00000008000200030000000800020002000000040001801c000180050006001e0000000800020003000000050003000300000004000200280001800c00018005000700200000001800018005000500070000000400010006000400090000000a0001000802110000010000"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:38 executing program 2: 20:35:38 executing program 3: 20:35:38 executing program 5: 20:35:38 executing program 4: 20:35:39 executing program 0: [ 3235.030573][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:39 executing program 2: 20:35:39 executing program 3: 20:35:39 executing program 5: 20:35:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="a6b85b77", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000045) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:39 executing program 4: 20:35:39 executing program 0: 20:35:40 executing program 2: 20:35:40 executing program 3: [ 3236.046791][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:40 executing program 5: 20:35:40 executing program 4: 20:35:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="89677ee80311b10a4a37e8f790fd12bd5700dd44b131aaa5938f0979ed858caa3f589794fe6520cef746750be0b1a73f11f45b24a93021404efdf431df24013f6315eff722a3931f3993a38549a24bb110c23200928e4de88b5eb00e6c7dd0e6e69ce33ef26bffa1a68f196326e7e1fd31128b13d1bf2616c972d7c1523f720781917e04392876f48fe2f758e022dcce957f2f4dc80e105958e14fec5c77f6d1a3b1ed7beb3d6871bcba8d0c845d9829c58126e9dd177241a309b2a124a8a7a01d1579bb60f7916e007a2e3150de6bab41c6838164a64db76cce4bb06a3ec67d", @ANYRES16=0x0, @ANYBLOB="000407000000ffdbdf253a00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900010001002c000000060065000300000066005b0014a0e41f18c993dc1c9353dd7a36161b9a137152f933df20e3d047f6012e6427f9e8fa79de1eb6aa183644944e4b8eb43f202c17eac6396987e273645adb472f71b806a44f85eb3eb6f887bdcd9904ae7e11f18205c836d4e7f8280dd3ddcbc3e3f40000"], 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:40 executing program 0: 20:35:40 executing program 3: 20:35:40 executing program 2: 20:35:40 executing program 5: 20:35:41 executing program 4: [ 3236.978188][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:41 executing program 0: 20:35:41 executing program 3: 20:35:41 executing program 2: 20:35:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:41 executing program 5: 20:35:41 executing program 4: 20:35:41 executing program 0: 20:35:42 executing program 3: [ 3237.973856][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:42 executing program 2: 20:35:42 executing program 5: 20:35:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:42 executing program 4: 20:35:42 executing program 0: 20:35:42 executing program 3: 20:35:42 executing program 2: [ 3238.813356][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:43 executing program 5: 20:35:43 executing program 4: 20:35:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:43 executing program 0: 20:35:43 executing program 3: 20:35:43 executing program 2: [ 3239.668585][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:43 executing program 5: 20:35:44 executing program 4: 20:35:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="76e57dfb3a5b9dbb7b1f479491234601b8ef89c24eff510de1dd25e3f01662262de5cf92a3dbc2b8a49eec49512711274838c143ef1cd6172f0ab970754d8425d1e8095de13385c8006ba415e54275549b390815"], 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:44 executing program 3: 20:35:44 executing program 0: 20:35:44 executing program 2: 20:35:44 executing program 5: 20:35:44 executing program 4: [ 3240.543977][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:44 executing program 2: 20:35:44 executing program 0: 20:35:44 executing program 3: 20:35:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003440)='nl80211\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:45 executing program 5: 20:35:45 executing program 4: 20:35:45 executing program 0: 20:35:45 executing program 2: 20:35:45 executing program 3: 20:35:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:45 executing program 5: 20:35:46 executing program 4: 20:35:46 executing program 2: 20:35:46 executing program 0: 20:35:46 executing program 3: 20:35:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:46 executing program 5: 20:35:46 executing program 4: 20:35:46 executing program 2: 20:35:47 executing program 0: 20:35:47 executing program 3: 20:35:47 executing program 5: 20:35:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:47 executing program 4: 20:35:47 executing program 2: 20:35:47 executing program 3: 20:35:47 executing program 0: 20:35:47 executing program 5: 20:35:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000c001000090000000000001700", @ANYRES32=r0, @ANYBLOB="08000c000300000005000d0002000000140008006e657470636930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:48 executing program 4: 20:35:48 executing program 2: 20:35:48 executing program 0: 20:35:48 executing program 3: 20:35:48 executing program 5: 20:35:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:48 executing program 4: 20:35:49 executing program 2: 20:35:49 executing program 0: 20:35:49 executing program 3: 20:35:49 executing program 5: 20:35:49 executing program 4: 20:35:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:49 executing program 2: 20:35:49 executing program 0: 20:35:49 executing program 3: 20:35:50 executing program 4: 20:35:50 executing program 5: 20:35:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:50 executing program 2: 20:35:50 executing program 3: 20:35:50 executing program 0: 20:35:50 executing program 5: 20:35:50 executing program 4: 20:35:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:51 executing program 3: 20:35:51 executing program 2: 20:35:51 executing program 0: 20:35:51 executing program 5: 20:35:51 executing program 4: 20:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:51 executing program 3: 20:35:51 executing program 2: 20:35:52 executing program 5: 20:35:52 executing program 0: 20:35:52 executing program 4: 20:35:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:52 executing program 3: 20:35:52 executing program 2: 20:35:52 executing program 0: 20:35:52 executing program 5: 20:35:52 executing program 4: 20:35:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:53 executing program 3: 20:35:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:35:53 executing program 0: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x410280) 20:35:53 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x804, 0x40800) 20:35:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x2, 0x0) 20:35:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00', {}, 0x5}) 20:35:53 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "c0"}, 0x5) 20:35:53 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, 0x0, 0x0) 20:35:54 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 20:35:54 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "c084f8f60f31591e31ef9f1d54b0dda0525d4d33374ff91c340942843e3349d175b40707da345ee60cadb3dcd51b0d153cdca9eb6236057040067a9aba0495ffd3f205e39385774cd7a748219f0be848807195c218053f914329b32ae96110547686d9896128ee78201d505fdf13bff68c54adb63a92b6efd1bcc0bf0a646cc0771251a85389f2a37325cd114df43389cef35f3fa08bff50303caeab5379a71c3a7b1bc2"}, 0xa8) 20:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000180)={'batadv_slave_0\x00', @ifru_map}) 20:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 20:35:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002980)={0x16, 0x0, 0x2, 0xf178, 0x200}, 0x40) 20:35:54 executing program 2: restart_syscall() syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2}, "00006371ae9b1c06"}}}}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000040)=0x100060, 0xa808) 20:35:54 executing program 0: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 20:35:54 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 20:35:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) 20:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 20:35:55 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x0, 0x4020031, 0xffffffffffffffff, 0x0) 20:35:55 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='\x00'}, 0x10) 20:35:55 executing program 5: futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, &(0x7f00000021c0), 0x0, 0x0) 20:35:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002980)={0x16, 0x0, 0x2, 0xf178, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x40) 20:35:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) 20:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 20:35:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x18, 0x0, 0x0) 20:35:56 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x10, 0x0, 0x0) 20:35:56 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, &(0x7f0000000040)={0x0}, 0x10) 20:35:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 20:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_1\x00'}) 20:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000480)={'wlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 20:35:57 executing program 5: rt_sigsuspend(&(0x7f0000000040)={[0x2]}, 0x8) 20:35:57 executing program 0: unshare(0x4040800) 20:35:57 executing program 2: prctl$PR_MCE_KILL(0x3a, 0x3, 0x0) 20:35:57 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x16, &(0x7f0000000040)={0x0}, 0x10) 20:35:57 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0xc, 0x0, 0x0) 20:35:58 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) 20:35:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x40) 20:35:58 executing program 0: prctl$PR_MCE_KILL(0x2f, 0x3, 0x0) 20:35:58 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b1b284b9b334a", 0xff8d}], 0x1) 20:35:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:35:59 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), 0x0) 20:35:59 executing program 3: syz_io_uring_setup(0x2812, &(0x7f00000000c0)={0x0, 0x95aa, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2812, &(0x7f00000000c0)={0x0, 0x95aa, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) 20:35:59 executing program 5: socketpair(0x2, 0x3, 0x1000, &(0x7f00000000c0)) 20:35:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001640)=""/171) 20:35:59 executing program 2: syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xffffffffffffffff, 0x0) 20:35:59 executing program 1: setuid(0xee00) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) setuid(r0) 20:35:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0xffffffffffffffb7}}, 0x0) 20:36:00 executing program 5: rt_sigpending(&(0x7f00000001c0), 0x8) 20:36:00 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 20:36:00 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0) 20:36:00 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read(r0, 0x0, 0x0) 20:36:00 executing program 1: r0 = epoll_create(0x10000) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x73) 20:36:00 executing program 4: clock_gettime(0x6, &(0x7f00000007c0)) 20:36:00 executing program 0: getcwd(&(0x7f0000000400)=""/122, 0x7a) 20:36:00 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) fchmod(r0, 0x0) 20:36:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) 20:36:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 20:36:01 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x2, 0x7) 20:36:01 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0xe, 0x0, 0x0) 20:36:01 executing program 0: bpf$OBJ_GET_PROG(0x2, &(0x7f0000000180)={&(0x7f0000000140)='\x00'}, 0x10) 20:36:01 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x3, 0x0) 20:36:01 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 20:36:01 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) select(0x40, &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0xea60}) 20:36:02 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x7, &(0x7f0000000040)={0x0}, 0x10) 20:36:02 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x409, 0x0) 20:36:02 executing program 0: r0 = syz_io_uring_setup(0x3be8, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1) 20:36:02 executing program 3: r0 = epoll_create(0x800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 20:36:02 executing program 2: epoll_create(0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="04", 0x1, 0xffffffffffffffff) 20:36:02 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, 0x0, 0x0) 20:36:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 20:36:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'veth1_to_hsr\x00', @ifru_flags}) 20:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="85c63e08ed29161e2a31fb49f3f18fb4", 0x10) 20:36:03 executing program 0: syz_io_uring_setup(0x6cf1, &(0x7f0000000000)={0x0, 0xe08a, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:36:03 executing program 2: syz_io_uring_setup(0x1b18, &(0x7f0000000280), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 20:36:03 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x11, 0x0) 20:36:03 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x21, 0x0, 0x0) 20:36:03 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read(r0, &(0x7f0000000080)=""/167, 0xa7) 20:36:03 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x5, 0x2) 20:36:03 executing program 0: socket(0x25, 0x3, 0x1) 20:36:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000050000000000000005000000850000007e00000085000000160000006a93800004000000ca194000ecffffff180000000200000000000000010000001819"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000000c0)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:04 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setstatus(r0, 0x804, 0x0) 20:36:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@exit], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x78) 20:36:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60002002}) 20:36:04 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000002140)) 20:36:04 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000340)="c8", 0x1, 0xffffffff}]) 20:36:04 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x700) 20:36:05 executing program 4: r0 = syz_io_uring_setup(0x2812, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 20:36:05 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 20:36:05 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x21, &(0x7f0000000040)={0x0}, 0x10) 20:36:05 executing program 0: syz_io_uring_setup(0x2812, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1b0c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 20:36:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@alu={0x4}, @ldst={0x3}], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:05 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0xffffffffffffffff) 20:36:05 executing program 4: rt_sigpending(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="792ab9f13f0e0e", 0x7) 20:36:06 executing program 3: syz_io_uring_setup(0x5a06, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 20:36:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000100)={0x9}, 0x0) 20:36:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1c00}, 0x0) 20:36:06 executing program 0: ioprio_set$uid(0x0, 0x0, 0x4000) 20:36:06 executing program 5: r0 = epoll_create1(0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000140)=@v3, 0x18, 0x0) 20:36:06 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={0x0, 0x0, 0x18}, 0x10) 20:36:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, 0x0, 0x0) 20:36:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x0, 0x1}, @func, @exit], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000e0605"], 0x48}}, 0x0) 20:36:07 executing program 0: setresgid(0xee01, 0x0, 0xffffffffffffffff) 20:36:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 20:36:07 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0xc400, 0x0) 20:36:07 executing program 4: uname(&(0x7f0000000140)=""/4096) [ 3263.452708][T18145] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 20:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x9, 0x101}, 0x14}}, 0x0) 20:36:07 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, 0x0) 20:36:07 executing program 0: add_key$user(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 20:36:07 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:36:08 executing program 1: prctl$PR_MCE_KILL(0x27, 0x3, 0x0) 20:36:08 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x73bb}, 0x0, &(0x7f00000001c0)={0x0, r0/1000+10000}) 20:36:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x9aa}]) 20:36:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300), 0x0) syz_emit_ethernet(0x57, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x21, 0x3a, 0xff, @local={0xfe, 0x80, [0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, [{0x0, 0x2, "84f0da52ef2457131396805037f559"}]}}}}}}, 0x0) r0 = open(0x0, 0x40c5, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}, 0x49}, {@mpol={'mpol', 0x3d, {'bind', '=relative'}}}]}) open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) 20:36:08 executing program 0: socketpair(0x2, 0x1, 0x0, &(0x7f0000000300)) 20:36:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000e06050000000000000000000a00000605000100070900020073"], 0x48}}, 0x0) 20:36:08 executing program 1: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xa00e00000000}) 20:36:08 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)) [ 3265.049003][T18174] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 20:36:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x6}], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:36:09 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x402, 0x0) 20:36:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000002c0)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 20:36:09 executing program 2: kexec_load(0x0, 0x0, 0x0, 0x400000) 20:36:09 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2812, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1865, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 20:36:09 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000040)={[0x82f]}, 0x8) 20:36:10 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 20:36:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1463) 20:36:10 executing program 2: 20:36:10 executing program 5: 20:36:10 executing program 1: 20:36:10 executing program 4: 20:36:10 executing program 3: 20:36:10 executing program 2: 20:36:10 executing program 0: 20:36:10 executing program 5: 20:36:11 executing program 1: 20:36:11 executing program 4: 20:36:11 executing program 3: 20:36:11 executing program 0: 20:36:11 executing program 2: 20:36:11 executing program 5: 20:36:11 executing program 1: 20:36:11 executing program 4: 20:36:12 executing program 3: 20:36:12 executing program 0: 20:36:12 executing program 2: 20:36:12 executing program 5: 20:36:12 executing program 4: 20:36:12 executing program 1: 20:36:12 executing program 0: 20:36:12 executing program 3: 20:36:12 executing program 2: 20:36:13 executing program 5: 20:36:13 executing program 1: 20:36:13 executing program 4: 20:36:13 executing program 0: 20:36:13 executing program 2: 20:36:13 executing program 3: 20:36:13 executing program 5: 20:36:13 executing program 1: 20:36:13 executing program 4: 20:36:14 executing program 0: 20:36:14 executing program 2: 20:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 20:36:14 executing program 5: 20:36:14 executing program 4: 20:36:14 executing program 1: 20:36:14 executing program 0: 20:36:14 executing program 3: 20:36:14 executing program 2: 20:36:15 executing program 4: 20:36:15 executing program 5: 20:36:15 executing program 1: 20:36:15 executing program 3: 20:36:15 executing program 0: 20:36:15 executing program 2: 20:36:15 executing program 5: 20:36:15 executing program 4: 20:36:15 executing program 1: 20:36:16 executing program 3: 20:36:16 executing program 2: 20:36:16 executing program 0: 20:36:16 executing program 1: 20:36:16 executing program 4: 20:36:16 executing program 5: 20:36:16 executing program 3: 20:36:17 executing program 2: 20:36:17 executing program 0: 20:36:17 executing program 1: 20:36:17 executing program 5: 20:36:17 executing program 4: 20:36:17 executing program 3: 20:36:17 executing program 2: 20:36:17 executing program 1: 20:36:17 executing program 0: 20:36:17 executing program 5: 20:36:18 executing program 4: 20:36:18 executing program 3: 20:36:18 executing program 2: 20:36:18 executing program 5: 20:36:18 executing program 0: 20:36:18 executing program 1: 20:36:18 executing program 3: 20:36:18 executing program 4: 20:36:20 executing program 2: 20:36:20 executing program 1: 20:36:20 executing program 0: 20:36:20 executing program 5: 20:36:20 executing program 4: 20:36:20 executing program 3: 20:36:20 executing program 1: 20:36:20 executing program 2: 20:36:20 executing program 0: 20:36:20 executing program 5: 20:36:20 executing program 3: 20:36:21 executing program 4: 20:36:21 executing program 2: 20:36:21 executing program 1: 20:36:21 executing program 0: 20:36:21 executing program 5: 20:36:21 executing program 3: 20:36:21 executing program 4: 20:36:22 executing program 1: 20:36:22 executing program 2: 20:36:22 executing program 5: 20:36:22 executing program 0: 20:36:22 executing program 3: 20:36:22 executing program 4: 20:36:22 executing program 1: 20:36:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0), 0x40) 20:36:22 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10}, 0x10}}, 0x0) 20:36:22 executing program 4: 20:36:23 executing program 0: 20:36:23 executing program 3: 20:36:23 executing program 1: 20:36:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) 20:36:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) 20:36:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000005480)='ns\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 20:36:23 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x141000, 0x0) 20:36:23 executing program 4: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x9a1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}, 0x0, 0x0, 0xa, 0x0, "0230281abb7f1d5ec5ac8e02eebf577995df40ec92860f814736db8a251aa02b8299632543e23ac524d4845f4f3a106a6e98ea9be196f1b267812912789a1d20f0354f693ec8cdd8aac35843d80c3921"}, 0xd8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='sessionid\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x80, 0x0) syz_open_pts(r0, 0x0) 20:36:23 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) 20:36:24 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7) 20:36:24 executing program 2: add_key(&(0x7f00000009c0)='user\x00', 0x0, &(0x7f0000000a40)='m', 0x1, 0xfffffffffffffffa) 20:36:24 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000054c0)) 20:36:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x8001) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdf52, 0x728df552}) 20:36:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') 20:36:24 executing program 1: get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0xffffffff, &(0x7f0000ff6000/0x4000)=nil, 0x2) 20:36:25 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 20:36:25 executing program 2: clock_gettime(0x0, &(0x7f0000005240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8000}, {{&(0x7f0000002100)=@sco={0x1f, @none}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@vsock, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x8, 0x2000, &(0x7f0000005280)={0x0, r0+60000000}) openat$full(0xffffffffffffff9c, &(0x7f00000052c0)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) clock_gettime(0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000005a40)={0x0, 0x0, 0x0}, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffffa) [ 3281.030390][ T27] audit: type=1804 audit(1603053385.099:58): pid=18361 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir771688448/syzkaller.kL59nM/606/bus" dev="sda1" ino=16225 res=1 errno=0 [ 3281.164261][ T27] audit: type=1804 audit(1603053385.149:59): pid=18359 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir771688448/syzkaller.kL59nM/606/bus" dev="sda1" ino=16225 res=1 errno=0 20:36:25 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x105c0, 0x0) [ 3281.189847][ T27] audit: type=1804 audit(1603053385.189:60): pid=18361 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir771688448/syzkaller.kL59nM/606/bus" dev="sda1" ino=16225 res=1 errno=0 [ 3281.216604][ T27] audit: type=1804 audit(1603053385.199:61): pid=18365 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir771688448/syzkaller.kL59nM/606/bus" dev="sda1" ino=16225 res=1 errno=0 20:36:25 executing program 1: keyctl$set_timeout(0xf, 0x0, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/31) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80080, 0x0) 20:36:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000005f00)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005ec0)={0x0}}, 0x0) 20:36:25 executing program 4: keyctl$reject(0x13, 0x0, 0x0, 0x8c7, 0xfffffffffffffff9) 20:36:25 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$addseals(r0, 0x409, 0x0) 20:36:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 20:36:26 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) 20:36:26 executing program 3: socketpair(0x2, 0x0, 0x80000000, &(0x7f0000000080)) 20:36:26 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000500)="d1", 0x1) 20:36:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="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"}) 20:36:26 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x10000, 0x0) 20:36:26 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 20:36:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000280), 0xc, 0x0}, 0x0) 20:36:26 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000340)) 20:36:27 executing program 1: sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) 20:36:27 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) openat$bsg(0xffffffffffffff9c, &(0x7f00000033c0)='/dev/bsg\x00', 0x80000, 0x0) 20:36:27 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) 20:36:27 executing program 2: syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) 20:36:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000005480)='ns\x00') io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 20:36:27 executing program 3: request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0xfffffffffffffffa) 20:36:27 executing program 1: keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 20:36:27 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 20:36:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='@', 0x1}], 0x2}, 0x0) 20:36:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) 20:36:28 executing program 3: pipe2(&(0x7f00000005c0), 0x0) 20:36:28 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x6d425957}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x8001) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)) 20:36:28 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 20:36:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 20:36:28 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:36:28 executing program 5: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) 20:36:29 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) [ 3285.018849][ T27] audit: type=1804 audit(1603053389.089:62): pid=18443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir437916592/syzkaller.NB7Oen/2992/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3285.155273][ T27] audit: type=1804 audit(1603053389.209:63): pid=18446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir437916592/syzkaller.NB7Oen/2992/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3285.455717][T18450] ISOFS: Unable to identify CD-ROM format. 20:36:29 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 20:36:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 20:36:29 executing program 3: add_key$keyring(&(0x7f0000001d00)='keyring\x00', &(0x7f0000001d40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) 20:36:30 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) 20:36:30 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000001c0)) 20:36:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000005480)='ns\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='[\\-\x00', &(0x7f0000000240)='/dev/vhost-net\x00', 0x0) 20:36:30 executing program 0: fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) 20:36:30 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) get_mempolicy(&(0x7f0000000a00), 0x0, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x2) 20:36:30 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x10000000) 20:36:30 executing program 4: 20:36:30 executing program 5: 20:36:31 executing program 2: 20:36:31 executing program 0: 20:36:31 executing program 3: 20:36:31 executing program 4: 20:36:31 executing program 1: 20:36:31 executing program 5: 20:36:31 executing program 2: 20:36:31 executing program 0: 20:36:32 executing program 3: 20:36:32 executing program 1: 20:36:32 executing program 4: 20:36:32 executing program 5: 20:36:32 executing program 2: 20:36:32 executing program 0: 20:36:32 executing program 1: 20:36:32 executing program 3: 20:36:33 executing program 4: 20:36:33 executing program 5: 20:36:33 executing program 2: 20:36:33 executing program 0: 20:36:33 executing program 1: 20:36:33 executing program 3: 20:36:33 executing program 4: 20:36:33 executing program 5: 20:36:34 executing program 2: 20:36:34 executing program 1: 20:36:34 executing program 0: 20:36:34 executing program 3: 20:36:34 executing program 4: 20:36:34 executing program 5: 20:36:34 executing program 2: 20:36:34 executing program 1: 20:36:34 executing program 3: 20:36:34 executing program 0: 20:36:35 executing program 4: 20:36:35 executing program 5: 20:36:35 executing program 1: 20:36:35 executing program 2: 20:36:35 executing program 3: 20:36:35 executing program 0: 20:36:35 executing program 4: 20:36:35 executing program 5: 20:36:35 executing program 1: 20:36:36 executing program 2: 20:36:36 executing program 0: 20:36:36 executing program 3: 20:36:36 executing program 4: 20:36:36 executing program 5: 20:36:36 executing program 2: 20:36:36 executing program 1: 20:36:36 executing program 0: 20:36:37 executing program 3: 20:36:37 executing program 5: 20:36:37 executing program 4: 20:36:37 executing program 2: 20:36:37 executing program 1: 20:36:37 executing program 0: 20:36:37 executing program 3: 20:36:38 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10b102, 0x0) 20:36:38 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') 20:36:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000000080001007533320044000200080001000000060014000500000000000000000000000000000000ff140008"], 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 20:36:38 executing program 1: keyctl$set_reqkey_keyring(0xc, 0x0) 20:36:38 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f00000005c0), 0x40) 20:36:38 executing program 3: get_robust_list(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') 20:36:38 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 20:36:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') 20:36:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 20:36:39 executing program 2: keyctl$set_reqkey_keyring(0x11, 0x0) 20:36:39 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000001780)='/dev/nullb0\x00', 0x84680, 0x0) 20:36:39 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:36:39 executing program 5: socket(0x28, 0x0, 0x4) 20:36:39 executing program 4: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) 20:36:39 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x100, 0x0) 20:36:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 20:36:40 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 20:36:40 executing program 3: syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 20:36:40 executing program 5: 20:36:40 executing program 2: 20:36:40 executing program 4: 20:36:40 executing program 0: 20:36:40 executing program 1: 20:36:40 executing program 3: 20:36:40 executing program 5: 20:36:41 executing program 4: 20:36:41 executing program 2: 20:36:41 executing program 0: 20:36:41 executing program 1: 20:36:41 executing program 3: 20:36:41 executing program 4: 20:36:41 executing program 2: 20:36:42 executing program 0: 20:36:42 executing program 3: 20:36:42 executing program 1: 20:36:42 executing program 4: 20:36:43 executing program 5: 20:36:43 executing program 0: 20:36:43 executing program 3: 20:36:43 executing program 2: 20:36:43 executing program 4: 20:36:43 executing program 1: 20:36:43 executing program 1: 20:36:43 executing program 0: 20:36:43 executing program 3: 20:36:43 executing program 2: 20:36:43 executing program 4: 20:36:43 executing program 5: 20:36:44 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@dev, @link_local, @void, {@arp={0x8906, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @dev, "", @remote}}}}, 0x0) 20:36:44 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8949, &(0x7f0000002700)={'ipvlan1\x00', @ifru_ivalue}) 20:36:44 executing program 3: mremap(&(0x7f0000ee6000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 20:36:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 20:36:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 20:36:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, &(0x7f0000000040)) 20:36:45 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{r1, 0x0, 0x0, 0x1000}]}) [ 3300.961924][T18643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18643 comm=syz-executor.0 20:36:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000000)) 20:36:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) 20:36:45 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 20:36:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0) 20:36:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000000)) 20:36:45 executing program 2: socket(0x1d, 0x0, 0x75) 20:36:45 executing program 1: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9dba352b00d130ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:46 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x80}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 20:36:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/129, &(0x7f0000000100)=0x81) 20:36:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f40000000301010200000000000000000a0000051c000680080002006401010208000100ffffffff08000100ac1e7f0108000c400000000114001880089803400000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0xa07}, 0x14}}, 0x0) 20:36:46 executing program 5: syz_open_dev$loop(&(0x7f00000010c0)='/dev/loop#\x00', 0x3, 0xa4282) 20:36:46 executing program 2: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 20:36:46 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) [ 3302.542243][T18672] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 20:36:46 executing program 3: syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x40080) 20:36:46 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/\x00', 0x0) [ 3302.814410][T18672] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 20:36:47 executing program 4: pselect6(0x14, &(0x7f0000000000), &(0x7f0000000040)={0x1ff}, &(0x7f0000002200), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 20:36:47 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0xa01}], 0x0, 0x0) 20:36:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) pwrite64(r0, 0x0, 0x0, 0x0) 20:36:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x40, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 20:36:47 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{0x0, 0x0, 0x10000}, {&(0x7f00000002c0)="f4b38469b380da7eca71d68c4a4e3cfee481defb5efe", 0x16}], 0x2008008, &(0x7f0000000680)) 20:36:47 executing program 0: socketpair(0x11, 0x2, 0x40b, &(0x7f00000000c0)) 20:36:47 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}) 20:36:47 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 20:36:47 executing program 0: io_setup(0x1e600924, &(0x7f0000000000)) 20:36:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 20:36:48 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x202042, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 20:36:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x40}}, 0x0) 20:36:48 executing program 0: r0 = eventfd(0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080), 0xc, 0x0) 20:36:48 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r0, 0x0, 0x0) 20:36:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070c9, 0x0) 20:36:48 executing program 3: io_setup(0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) io_setup(0xffff, 0x0) io_setup(0x1, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000080)) 20:36:49 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 20:36:49 executing program 4: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8470964705cc8441, 0xffffffffffffffff) 20:36:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8902, &(0x7f0000000000)) 20:36:49 executing program 2: getresuid(&(0x7f0000000300), &(0x7f0000004400), &(0x7f0000004440)) 20:36:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x0) 20:36:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1268, &(0x7f0000000040)) 20:36:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:36:49 executing program 4: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0xfffffffffffffe06) 20:36:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x20040841, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 20:36:50 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000001b80)='ns/pid_for_children\x00') 20:36:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, 0x0) 20:36:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(0x0, r3) 20:36:50 executing program 5: syz_mount_image$btrfs(&(0x7f0000000300)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@subvolid={'subvolid'}}]}) 20:36:50 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) dup2(r0, r1) 20:36:50 executing program 0: mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8013071, 0xffffffffffffffff, 0x0) 20:36:51 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc_s\x00', 0x0, 0xfffffffffffffffe) 20:36:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x19, 0x40002123, 0x0, 0x0) 20:36:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x0, 0x0, 0x11, &(0x7f0000000040)="626a4cef93d4b6fadd5072ac508d1eb8bd"}) 20:36:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1269, &(0x7f0000000040)) 20:36:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000140)) 20:36:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) 20:36:51 executing program 2: r0 = epoll_create(0x80000e) r1 = fanotify_init(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 20:36:51 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 20:36:51 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000008c0)={0x0, 0x7}) 20:36:52 executing program 5: pselect6(0x14, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000002200)={0x7}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 20:36:52 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) writev(r0, 0x0, 0x0) 20:36:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 20:36:52 executing program 2: socket$netlink(0x10, 0x3, 0x2ecf06d4488d726f) 20:36:52 executing program 3: syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000010c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 20:36:52 executing program 1: clock_nanosleep(0x2, 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) 20:36:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000002900)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 20:36:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000000)) 20:36:52 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000180)={0xfdfdffff}) 20:36:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 20:36:53 executing program 3: prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) 20:36:53 executing program 4: timer_create(0x7, 0x0, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x77359400}, {0x0, r0+10000000}}, 0x0) 20:36:53 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 20:36:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc0481273, &(0x7f0000000040)) 20:36:53 executing program 0: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x40100, 0x0) 20:36:53 executing program 2: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x7) 20:36:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000005c00), 0x4) 20:36:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) setuid(0x0) 20:36:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="153c2e21266e266ae3c4cb62179d6f9f", 0x10) 20:36:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) 20:36:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000a80)) 20:36:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-i\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') r1 = gettid() tkill(r1, 0x1000000000016) r2 = perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x9, 0x4, 0xd7, 0x80, 0x0, 0xc93, 0x22000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80}, 0x1090, 0x3ff, 0x6, 0x4, 0x7, 0x6, 0x8001}, 0x0, 0x1, r0, 0x2) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x3, 0x9, 0x1, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1000, 0x7, 0x9, 0x2, 0x4, 0x0, 0xe64}, r1, 0x8de8, r2, 0x1) 20:36:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xb8) 20:36:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000010000000000000000000a0000dd00000001"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20:36:55 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x7}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 20:36:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddffffffff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x40}}, 0x0) 20:36:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020002000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x104000, 0x0) 20:36:55 executing program 3: [ 3311.326722][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3311.574887][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:36:55 executing program 1: 20:36:56 executing program 4: 20:36:56 executing program 3: 20:36:56 executing program 5: 20:36:56 executing program 4: 20:36:58 executing program 0: 20:36:58 executing program 1: 20:36:58 executing program 2: 20:36:58 executing program 5: 20:36:58 executing program 3: 20:36:58 executing program 4: 20:36:58 executing program 5: 20:36:58 executing program 1: 20:36:58 executing program 2: 20:36:58 executing program 3: 20:36:58 executing program 4: 20:36:58 executing program 0: 20:36:58 executing program 5: 20:36:58 executing program 3: 20:36:59 executing program 1: 20:36:59 executing program 4: 20:36:59 executing program 2: 20:36:59 executing program 0: 20:36:59 executing program 3: 20:36:59 executing program 2: 20:36:59 executing program 5: 20:36:59 executing program 1: 20:36:59 executing program 4: 20:36:59 executing program 0: 20:37:00 executing program 3: 20:37:00 executing program 2: 20:37:00 executing program 1: 20:37:00 executing program 5: 20:37:00 executing program 4: 20:37:00 executing program 0: 20:37:00 executing program 3: 20:37:01 executing program 1: 20:37:01 executing program 2: 20:37:01 executing program 5: 20:37:01 executing program 4: 20:37:01 executing program 0: 20:37:01 executing program 3: 20:37:01 executing program 1: 20:37:01 executing program 5: 20:37:01 executing program 2: 20:37:02 executing program 4: 20:37:02 executing program 0: 20:37:02 executing program 3: 20:37:02 executing program 1: 20:37:02 executing program 4: 20:37:02 executing program 5: 20:37:02 executing program 2: 20:37:02 executing program 0: 20:37:03 executing program 3: 20:37:03 executing program 1: 20:37:03 executing program 4: 20:37:03 executing program 2: 20:37:03 executing program 5: 20:37:03 executing program 0: 20:37:03 executing program 3: 20:37:03 executing program 1: 20:37:03 executing program 4: 20:37:04 executing program 5: 20:37:04 executing program 2: 20:37:04 executing program 0: 20:37:04 executing program 3: 20:37:04 executing program 1: 20:37:05 executing program 4: 20:37:05 executing program 2: 20:37:05 executing program 0: 20:37:05 executing program 5: 20:37:05 executing program 1: 20:37:05 executing program 3: 20:37:05 executing program 4: 20:37:05 executing program 0: 20:37:06 executing program 2: 20:37:06 executing program 1: 20:37:06 executing program 5: 20:37:06 executing program 3: 20:37:06 executing program 4: 20:37:06 executing program 0: 20:37:06 executing program 2: 20:37:06 executing program 1: 20:37:06 executing program 5: 20:37:06 executing program 3: 20:37:07 executing program 4: 20:37:07 executing program 2: 20:37:07 executing program 0: 20:37:07 executing program 1: 20:37:07 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 20:37:07 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f0000002180)='$(\'@[:U$*!-/\x1a*\x00', 0x0) dup2(r0, r1) 20:37:07 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$char_usb(r0, &(0x7f0000000040)="868560b7f2ceee375ae34ff4e7721224492931002d042d49a21057b9b76022b055147a24148b4a5ae38548dd5abac542df74e953cbf70e099036ef77c173125809", 0xfffffffffffffd8e) 20:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f00000000c0)=0xd132e599d28c43a) 20:37:08 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 20:37:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x0) 20:37:08 executing program 3: 20:37:08 executing program 5: signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) 20:37:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x0) 20:37:08 executing program 0: r0 = socket(0x11, 0xa, 0x0) r1 = dup2(r0, r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:37:09 executing program 3: syz_emit_ethernet(0x11, &(0x7f0000000100)={@broadcast, @dev, @void, {@x25}}, 0x0) 20:37:09 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x20e020, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 20:37:09 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @timestamp}}}, 0x28) 20:37:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4) 20:37:09 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x1}, &(0x7f0000000080)={0x9}, 0x0, 0x0) 20:37:09 executing program 3: r0 = epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 20:37:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) 20:37:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}}, 0x0) 20:37:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:37:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000008100)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000002240)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/47, 0x2f}, {&(0x7f0000001140)=""/206, 0xfffffffffffffd4c}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x4, &(0x7f0000004300)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000021280)=[{&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/23, 0x17}, {&(0x7f0000006340)=""/225, 0xe1}, {&(0x7f0000006440)=""/154, 0x9a}, {&(0x7f0000006500)=""/76, 0x4c}, {&(0x7f0000006580)}, {&(0x7f00000065c0)=""/175, 0xaf}, {&(0x7f0000006580)=""/29, 0x1d}, {&(0x7f0000021300)=""/158, 0x99}], 0x9}}, {{&(0x7f0000006700)=@hci, 0x80, &(0x7f0000007d00)=[{&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/106, 0x6a}, {&(0x7f0000007800)=""/195, 0xc3}, {&(0x7f0000007900)=""/73, 0x49}, {&(0x7f0000007980)=""/36, 0x24}, {&(0x7f00000079c0)=""/249, 0xf9}, {&(0x7f00000081c0)=""/102400, 0x19000}, {&(0x7f00000213c0)=""/215, 0xd7}, {&(0x7f0000007c00)=""/252, 0xfc}], 0x9, &(0x7f0000007d80)=""/50, 0x3c}}, {{&(0x7f0000007dc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007e40)=""/85, 0x5b}, {&(0x7f0000007ec0)=""/30, 0x1e}, {&(0x7f0000007f00)=""/111, 0x6f}, {&(0x7f0000007f80)=""/128, 0x80}, {&(0x7f0000008000)=""/7, 0x7}], 0x5, &(0x7f0000008080)=""/85, 0x55}}], 0x4, 0x0, &(0x7f0000008180)) 20:37:10 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 20:37:10 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = dup2(r0, r0) getpeername$netlink(r1, 0x0, 0x0) 20:37:10 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 20:37:10 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 20:37:10 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000002180)={0x0, 0x0, 0x1, 0x0, 0x0, [{{r0}}]}) 20:37:10 executing program 2: r0 = inotify_init1(0x0) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) 20:37:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) 20:37:11 executing program 1: pselect6(0x24, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x77359400}, 0x0) 20:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xff1e}}, 0x0) 20:37:11 executing program 0: r0 = socket(0x11, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) r3 = dup2(r2, r0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000002140)) 20:37:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x8}]}) 20:37:11 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 20:37:11 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, 0x0) 20:37:11 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 20:37:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x0) 20:37:12 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 20:37:12 executing program 2: r0 = socket(0x1, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 20:37:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="30c1000000000000010000bb000000661475"]) 20:37:12 executing program 1: syz_emit_ethernet(0xffffffffffffffd6, 0x0, 0x0) 20:37:12 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001040)) 20:37:13 executing program 0: r0 = getpgrp(0xffffffffffffffff) r1 = getpid() r2 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000001c0)={r3}) 20:37:13 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000002280)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0xe09) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 20:37:13 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 20:37:13 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x10, 0x0, 0xfff}}) 20:37:13 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000001000)) 20:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000005}) 20:37:13 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) 20:37:13 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000380)='FREEZING\x00', 0xfffffffffffffe91) 20:37:13 executing program 4: r0 = socket(0x11, 0xa, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) 20:37:14 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 20:37:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 20:37:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_misc(r0, 0x0, 0x85) 20:37:14 executing program 0: syz_genetlink_get_family_id$batadv(0x0) pselect6(0x24, &(0x7f0000000100), &(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, 0x0) 20:37:14 executing program 4: r0 = socket(0x11, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 20:37:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000000009040000020300010009210000070122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:37:15 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 20:37:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03842a01093260004003022c0200", 0xe, 0x0, 0x0, 0x0) 20:37:15 executing program 0: bpf$MAP_CREATE(0xe, &(0x7f0000000000), 0x40) 20:37:15 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 20:37:15 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 3331.549886][T19138] ===================================================== [ 3331.557698][T19138] BUG: KMSAN: uninit-value in ieee80211_skb_resize+0x899/0x930 [ 3331.565282][T19138] CPU: 1 PID: 19138 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 3331.573958][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3331.584019][T19138] Call Trace: [ 3331.587340][T19138] dump_stack+0x21c/0x280 [ 3331.591717][T19138] kmsan_report+0xf7/0x1e0 [ 3331.596171][T19138] __msan_warning+0x55/0x90 [ 3331.600706][T19138] ieee80211_skb_resize+0x899/0x930 [ 3331.605942][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3331.611804][T19138] ieee80211_build_hdr+0x298a/0x4290 [ 3331.617177][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.622407][T19138] __ieee80211_subif_start_xmit+0x188a/0x7170 [ 3331.625387][ T8861] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3331.628599][T19138] ? dev_hard_start_xmit+0x195/0x430 [ 3331.641464][T19138] ? sch_direct_xmit+0x5c7/0x1a30 [ 3331.646513][T19138] ? __qdisc_run+0x361/0x4a0 [ 3331.651124][T19138] ? __dev_queue_xmit+0x24b3/0x4490 [ 3331.656372][T19138] ? dev_queue_xmit+0x4b/0x60 [ 3331.661747][T19138] ? packet_sendmsg+0x86e9/0x99c0 [ 3331.666851][T19138] ? __sys_sendto+0x9dc/0xc80 [ 3331.671550][T19138] ? __se_sys_sendto+0x107/0x130 [ 3331.676504][T19138] ? __ia32_sys_sendto+0x6e/0x90 [ 3331.681462][T19138] ? __do_fast_syscall_32+0x129/0x180 [ 3331.686852][T19138] ? do_fast_syscall_32+0x6a/0xc0 [ 3331.691902][T19138] ? do_SYSENTER_32+0x73/0x90 [ 3331.696644][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.701881][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.707104][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3331.712929][T19138] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3331.719016][T19138] ? sock_def_readable+0x189/0x240 [ 3331.724171][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.729659][T19138] ieee80211_subif_start_xmit+0x14b/0x1990 [ 3331.735487][T19138] ? packet_sock_destruct+0x260/0x260 [ 3331.741579][T19138] ? dev_queue_xmit_nit+0x127d/0x13b0 [ 3331.746993][T19138] ? ieee80211_build_hdr+0x4290/0x4290 [ 3331.752495][T19138] xmit_one+0x1fc/0x760 [ 3331.756696][T19138] dev_hard_start_xmit+0x195/0x430 [ 3331.761853][T19138] sch_direct_xmit+0x5c7/0x1a30 [ 3331.766755][T19138] __qdisc_run+0x361/0x4a0 [ 3331.771222][T19138] __dev_queue_xmit+0x24b3/0x4490 [ 3331.776306][T19138] dev_queue_xmit+0x4b/0x60 [ 3331.780828][T19138] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 3331.786134][T19138] packet_sendmsg+0x86e9/0x99c0 [ 3331.790580][T14226] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3331.791041][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.803779][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3331.809609][T19138] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3331.815731][T19138] ? propagate_entity_load_avg+0x4a/0x13e0 [ 3331.822444][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.827662][T19138] ? kmsan_internal_set_origin+0x85/0xc0 [ 3331.833315][T19138] ? calculate_sizes+0xb0/0x1750 [ 3331.838274][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.843494][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3331.849323][T19138] ? tomoyo_socket_sendmsg_permission+0x4a1/0x5e0 [ 3331.855811][T19138] ? packet_getsockopt+0x1110/0x1110 [ 3331.861116][T19138] __sys_sendto+0x9dc/0xc80 [ 3331.865670][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3331.870888][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3331.876729][T19138] __se_sys_sendto+0x107/0x130 [ 3331.881529][T19138] __ia32_sys_sendto+0x6e/0x90 [ 3331.886319][T19138] __do_fast_syscall_32+0x129/0x180 [ 3331.891646][T19138] do_fast_syscall_32+0x6a/0xc0 [ 3331.896520][T19138] do_SYSENTER_32+0x73/0x90 [ 3331.901046][T19138] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3331.907392][T19138] RIP: 0023:0xf7ffb549 [ 3331.911737][T19138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3331.931356][T19138] RSP: 002b:00000000f55f50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 3331.939797][T19138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 3331.947793][T19138] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 3331.956586][T19138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3331.964580][T19138] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3331.972585][T19138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3331.980582][T19138] [ 3331.982916][T19138] Uninit was created at: [ 3331.987178][T19138] kmsan_internal_poison_shadow+0x5c/0xf0 [ 3331.992910][T19138] kmsan_slab_alloc+0x83/0xd0 [ 3331.993209][ T8861] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3331.997658][T19138] __kmalloc_node_track_caller+0x7de/0x1320 [ 3332.016315][T19138] __alloc_skb+0x309/0xae0 [ 3332.020838][T19138] alloc_skb_with_frags+0x1f3/0xc20 [ 3332.026098][T19138] sock_alloc_send_pskb+0xc73/0xe40 [ 3332.031309][T19138] packet_sendmsg+0x6a93/0x99c0 [ 3332.036192][T19138] __sys_sendto+0x9dc/0xc80 [ 3332.040516][T14226] usb 4-1: Using ep0 maxpacket: 16 [ 3332.041665][T19138] __se_sys_sendto+0x107/0x130 [ 3332.041688][T19138] __ia32_sys_sendto+0x6e/0x90 [ 3332.041713][T19138] __do_fast_syscall_32+0x129/0x180 [ 3332.041773][T19138] do_fast_syscall_32+0x6a/0xc0 [ 3332.066420][T19138] do_SYSENTER_32+0x73/0x90 [ 3332.070942][T19138] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3332.077270][T19138] ===================================================== [ 3332.084204][T19138] Disabling lock debugging due to kernel taint [ 3332.090363][T19138] Kernel panic - not syncing: panic_on_warn set ... [ 3332.096980][T19138] CPU: 1 PID: 19138 Comm: syz-executor.1 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 3332.107058][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3332.118094][T19138] Call Trace: [ 3332.121419][T19138] dump_stack+0x21c/0x280 [ 3332.125870][T19138] panic+0x4ca/0xed7 [ 3332.129803][T19138] ? add_taint+0x17c/0x210 [ 3332.135201][T19138] kmsan_report+0x1da/0x1e0 [ 3332.139728][T19138] __msan_warning+0x55/0x90 [ 3332.144255][T19138] ieee80211_skb_resize+0x899/0x930 [ 3332.149476][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3332.155323][T19138] ieee80211_build_hdr+0x298a/0x4290 [ 3332.160669][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.165896][T19138] __ieee80211_subif_start_xmit+0x188a/0x7170 [ 3332.172938][T19138] ? dev_hard_start_xmit+0x195/0x430 [ 3332.178241][T19138] ? sch_direct_xmit+0x5c7/0x1a30 [ 3332.183283][T19138] ? __qdisc_run+0x361/0x4a0 [ 3332.187884][T19138] ? __dev_queue_xmit+0x24b3/0x4490 [ 3332.193096][T19138] ? dev_queue_xmit+0x4b/0x60 [ 3332.197787][T19138] ? packet_sendmsg+0x86e9/0x99c0 [ 3332.203092][T19138] ? __sys_sendto+0x9dc/0xc80 [ 3332.207799][T19138] ? __se_sys_sendto+0x107/0x130 [ 3332.212751][T19138] ? __ia32_sys_sendto+0x6e/0x90 [ 3332.217707][T19138] ? __do_fast_syscall_32+0x129/0x180 [ 3332.224045][T19138] ? do_fast_syscall_32+0x6a/0xc0 [ 3332.229341][T19138] ? do_SYSENTER_32+0x73/0x90 [ 3332.234038][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.239248][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.244462][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3332.250977][T19138] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3332.257053][T19138] ? sock_def_readable+0x189/0x240 [ 3332.262205][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.267425][T19138] ieee80211_subif_start_xmit+0x14b/0x1990 [ 3332.273242][T19138] ? packet_sock_destruct+0x260/0x260 [ 3332.278630][T19138] ? dev_queue_xmit_nit+0x127d/0x13b0 [ 3332.284038][T19138] ? ieee80211_build_hdr+0x4290/0x4290 [ 3332.289506][T19138] xmit_one+0x1fc/0x760 [ 3332.293710][T19138] dev_hard_start_xmit+0x195/0x430 [ 3332.298859][T19138] sch_direct_xmit+0x5c7/0x1a30 [ 3332.303749][T19138] __qdisc_run+0x361/0x4a0 [ 3332.308202][T19138] __dev_queue_xmit+0x24b3/0x4490 [ 3332.313277][T19138] dev_queue_xmit+0x4b/0x60 [ 3332.317787][T19138] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 3332.323088][T19138] packet_sendmsg+0x86e9/0x99c0 [ 3332.327951][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.333162][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3332.338981][T19138] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3332.345067][T19138] ? propagate_entity_load_avg+0x4a/0x13e0 [ 3332.350895][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.356115][T19138] ? kmsan_internal_set_origin+0x85/0xc0 [ 3332.361775][T19138] ? calculate_sizes+0xb0/0x1750 [ 3332.366731][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.371949][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3332.377773][T19138] ? tomoyo_socket_sendmsg_permission+0x4a1/0x5e0 [ 3332.384260][T19138] ? packet_getsockopt+0x1110/0x1110 [ 3332.389572][T19138] __sys_sendto+0x9dc/0xc80 [ 3332.394127][T19138] ? kmsan_get_metadata+0x116/0x180 [ 3332.399337][T19138] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3332.405171][T19138] __se_sys_sendto+0x107/0x130 [ 3332.410142][T19138] __ia32_sys_sendto+0x6e/0x90 [ 3332.414921][T19138] __do_fast_syscall_32+0x129/0x180 [ 3332.420143][T19138] do_fast_syscall_32+0x6a/0xc0 [ 3332.425023][T19138] do_SYSENTER_32+0x73/0x90 [ 3332.429543][T19138] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3332.435878][T19138] RIP: 0023:0xf7ffb549 [ 3332.439952][T19138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3332.459590][T19138] RSP: 002b:00000000f55f50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 3332.468031][T19138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 3332.476005][T19138] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 3332.483983][T19138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3332.491960][T19138] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3332.500892][T19138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3332.510084][T19138] Kernel Offset: disabled [ 3332.514409][T19138] Rebooting in 86400 seconds..