[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.904878][ T26] audit: type=1800 audit(1572366407.072:25): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.932831][ T26] audit: type=1800 audit(1572366407.072:26): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.986103][ T26] audit: type=1800 audit(1572366407.082:27): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/10/29 16:26:54 fuzzer started 2019/10/29 16:26:55 dialing manager at 10.128.0.26:34715 2019/10/29 16:26:56 syscalls: 2541 2019/10/29 16:26:56 code coverage: enabled 2019/10/29 16:26:56 comparison tracing: enabled 2019/10/29 16:26:56 extra coverage: extra coverage is not supported by the kernel 2019/10/29 16:26:56 setuid sandbox: enabled 2019/10/29 16:26:56 namespace sandbox: enabled 2019/10/29 16:26:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/29 16:26:56 fault injection: enabled 2019/10/29 16:26:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/29 16:26:56 net packet injection: enabled 2019/10/29 16:26:56 net device setup: enabled 2019/10/29 16:26:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 16:28:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000100)=""/83) 16:28:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x1bd, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syzkaller login: [ 181.664005][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 181.760858][ T8757] IPVS: ftp: loaded support on port[0] = 21 16:28:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x23cdc00d52ef0bb1) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x7, &(0x7f00000003c0)=[{}, {}]}) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x100000001, 0x400000) pipe2(&(0x7f0000000200), 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000140)={0xcccccccccccd03b, &(0x7f0000000300)}) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 181.861120][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 181.955232][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.962846][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.971005][ T8755] device bridge_slave_0 entered promiscuous mode [ 182.003636][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.010743][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.043615][ T8755] device bridge_slave_1 entered promiscuous mode 16:28:54 executing program 3: socketpair(0x8, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000b80), 0x8) socket$inet6_sctp(0xa, 0x0, 0x84) accept(0xffffffffffffffff, 0x0, &(0x7f0000000d80)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000e80)={0x84, @empty, 0x0, 0x2, 'nq\x00', 0x6, 0x0, 0x4d}, 0x2c) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00'}) [ 182.104054][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.139720][ T8760] IPVS: ftp: loaded support on port[0] = 21 [ 182.158962][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.203981][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 182.252499][ T8755] team0: Port device team_slave_0 added [ 182.310756][ T8755] team0: Port device team_slave_1 added [ 182.334381][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.341545][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.352300][ T8757] device bridge_slave_0 entered promiscuous mode [ 182.369914][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.378444][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.389022][ T8757] device bridge_slave_1 entered promiscuous mode [ 182.399583][ T8763] IPVS: ftp: loaded support on port[0] = 21 16:28:54 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) [ 182.492357][ T8755] device hsr_slave_0 entered promiscuous mode [ 182.564752][ T8755] device hsr_slave_1 entered promiscuous mode [ 182.639713][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.665804][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.678671][ T8765] IPVS: ftp: loaded support on port[0] = 21 16:28:54 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 182.859111][ T8757] team0: Port device team_slave_0 added [ 182.869031][ T8757] team0: Port device team_slave_1 added [ 182.875748][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 182.920011][ T8768] IPVS: ftp: loaded support on port[0] = 21 [ 183.005990][ T8757] device hsr_slave_0 entered promiscuous mode [ 183.043016][ T8757] device hsr_slave_1 entered promiscuous mode [ 183.112794][ T8757] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.145297][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.154077][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.161894][ T8760] device bridge_slave_0 entered promiscuous mode [ 183.172466][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.179769][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.187845][ T8760] device bridge_slave_1 entered promiscuous mode [ 183.299415][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.321138][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.365382][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 183.389627][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 183.400465][ T8760] team0: Port device team_slave_0 added [ 183.421904][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.430400][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.438350][ T8763] device bridge_slave_0 entered promiscuous mode [ 183.446160][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.453280][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.461142][ T8763] device bridge_slave_1 entered promiscuous mode [ 183.480685][ T8760] team0: Port device team_slave_1 added [ 183.547062][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.558103][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.568869][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 183.604937][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.612039][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.623695][ T8765] device bridge_slave_0 entered promiscuous mode [ 183.715791][ T8760] device hsr_slave_0 entered promiscuous mode [ 183.753037][ T8760] device hsr_slave_1 entered promiscuous mode [ 183.792739][ T8760] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.800478][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.808067][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.819165][ T8765] device bridge_slave_1 entered promiscuous mode [ 183.826273][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.834543][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.842225][ T8768] device bridge_slave_0 entered promiscuous mode [ 183.849953][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.857146][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.865263][ T8768] device bridge_slave_1 entered promiscuous mode [ 183.876225][ T8763] team0: Port device team_slave_0 added [ 183.884418][ T8763] team0: Port device team_slave_1 added [ 183.919856][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.938571][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.950204][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.969231][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.008921][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.104598][ T8763] device hsr_slave_0 entered promiscuous mode [ 184.142940][ T8763] device hsr_slave_1 entered promiscuous mode [ 184.192761][ T8763] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.203359][ T8765] team0: Port device team_slave_0 added [ 184.222117][ T8768] team0: Port device team_slave_0 added [ 184.230384][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.239593][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.249665][ T8765] team0: Port device team_slave_1 added [ 184.278912][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.291404][ T8768] team0: Port device team_slave_1 added [ 184.395031][ T8768] device hsr_slave_0 entered promiscuous mode [ 184.443230][ T8768] device hsr_slave_1 entered promiscuous mode [ 184.482724][ T8768] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.525867][ T8765] device hsr_slave_0 entered promiscuous mode [ 184.572917][ T8765] device hsr_slave_1 entered promiscuous mode [ 184.632655][ T8765] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.659030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.667828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.681540][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.688778][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.698001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.706953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.715434][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.722615][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.730099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.739782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.748276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.757055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.765807][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.773790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.817099][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.826735][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.844410][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.851261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.861053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.893485][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.908230][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.939099][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.948347][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.002900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.010567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.042049][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.051688][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.079820][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.099508][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.140485][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.148739][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.158518][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.167897][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.175017][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.182824][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.191551][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.200260][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.207369][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.215095][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.222973][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.231020][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.249754][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.263736][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.278110][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.286042][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.294769][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.325324][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.343559][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.352558][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.361122][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.370406][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.377536][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.386190][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.395011][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.403613][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.410662][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.418331][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.427807][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.436315][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.449407][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.467293][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.483227][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.514490][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.531581][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.540762][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.549872][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.559084][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.566192][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.575303][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.583833][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.614513][ T8757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 16:28:57 executing program 0: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000100)=0x24) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 185.625225][ T8757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.641996][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.651514][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.660677][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.669403][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.681280][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.689911][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.697060][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.697963][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.714324][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.722814][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.731577][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.741117][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.757786][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.767996][ C1] hrtimer: interrupt took 45398 ns [ 185.770372][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.847147][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.861760][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.870241][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.885549][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 16:28:58 executing program 0: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000100)=0x24) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 185.897835][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.905005][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.924171][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.940103][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.949890][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.957052][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.970998][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.979990][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.995887][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.008996][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.020169][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.035570][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 16:28:58 executing program 0: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000100)=0x24) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 186.051507][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.067337][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.078127][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.090851][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.107844][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.126662][ T8760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.160750][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:28:58 executing program 0: [ 186.263242][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.287831][ T8765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 16:28:58 executing program 0: [ 186.331833][ T8765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.348205][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.366589][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 16:28:58 executing program 0: [ 186.383308][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.423156][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:28:58 executing program 0: [ 186.449194][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.465990][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.475047][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.503361][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.511849][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.520933][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.531362][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.540472][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.549180][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.559161][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.567943][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.576499][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.585639][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.597329][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.649181][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.663630][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.671074][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.689025][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.710112][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.725140][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.762355][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.778527][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.789498][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.796648][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.811150][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.820437][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.835483][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.842661][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state 16:28:59 executing program 1: [ 186.864463][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.879338][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.892160][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.924929][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.954432][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.973912][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.991840][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.000273][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.009340][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.025504][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.055120][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.082308][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.090745][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.099274][ T8769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.123636][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 16:28:59 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) umount2(&(0x7f0000000280)='./file0\x00', 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x23cdc00d52ef0bb1) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x7, &(0x7f00000003c0)=[{}, {}]}) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x100000001, 0x400000) pipe2(&(0x7f0000000200), 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000140)={0xcccccccccccd03b, &(0x7f0000000300)}) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) creat(&(0x7f0000000000)='./file0\x00', 0x0) 16:28:59 executing program 0: 16:28:59 executing program 1: 16:28:59 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:28:59 executing program 3: 16:28:59 executing program 4: 16:28:59 executing program 0: 16:28:59 executing program 1: 16:29:00 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x800000000000007) 16:29:00 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:00 executing program 0: 16:29:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 16:29:00 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='*\r'], 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 16:29:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x584b4288}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x3b) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@noop]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 16:29:00 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='*\r'], 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 16:29:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 16:29:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 16:29:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000500)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x6, &(0x7f00000000c0), 0xfdcc) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 16:29:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) 16:29:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffb, 0x2a, 0x81, @buffer={0x0, 0x7e, &(0x7f0000000300)=""/126}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8ebb4e0489d6052fbe8", 0x0, 0x1ff, 0x4, 0x0, &(0x7f0000000100)}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 16:29:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040)=0x2) [ 189.389566][ T8941] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:29:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4caa8c7a85685e4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x81, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xe93f, 0x4) 16:29:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)) 16:29:02 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffb, 0x2a, 0x81, @buffer={0x0, 0x7e, &(0x7f0000000300)=""/126}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8ebb4e0489d6052fbe8", 0x0, 0x1ff, 0x4, 0x0, &(0x7f0000000100)}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 16:29:02 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:02 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 190.203293][ T8989] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 190.385387][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 190.385401][ T26] audit: type=1804 audit(1572366542.552:31): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir661392652/syzkaller.DtoYP2/5/bus" dev="sda1" ino=16536 res=1 16:29:02 executing program 4: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) 16:29:02 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:02 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f00000001c0), 0x3c) 16:29:02 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4caa8c7a85685e4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x81, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xe93f, 0x4) 16:29:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4caa8c7a85685e4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x81, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xe93f, 0x4) 16:29:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4caa8c7a85685e4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x81, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xe93f, 0x4) 16:29:03 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:03 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:03 executing program 4: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:03 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4caa8c7a85685e4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x81, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6628, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0xe93f, 0x4) 16:29:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 16:29:03 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:03 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="fb05310300ee761500", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00=0x0000000000000004,allow_other,allow_other,default_permissions,max_read=0xfffffffffffffffd,fsmagic=0x000', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000300)=""/242}, 0x20) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004400}, 0x4000080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$unix(0x1, 0x800000000005, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000480)='\"', &(0x7f00000000c0)}, 0x20) r2 = dup(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000300)=""/242}, 0x20) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x90}, {0xa, 0x0, 0x5, @local, 0x9}, 0x4000, [0x0, 0x8000, 0x0, 0x0, 0xab3a, 0x0, 0x3ff, 0x9]}, 0x5c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:29:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 16:29:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:04 executing program 2: 16:29:04 executing program 4: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @local, @remote}, &(0x7f00000012c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x36, "d34f6096c32f5aa6f287d3df6df39f00fbe30f23370de96168d24b5276982858c2f43d2253146926f9aced3feb2d2a8b1c18a011ca42"}, &(0x7f0000000100)=0x5a) socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1b, r0, 0x1, 0x6, 0x6, @dev={[], 0x1a}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000600)) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x1) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 16:29:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 16:29:04 executing program 2: 16:29:04 executing program 0: 16:29:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r5/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:04 executing program 2: 16:29:04 executing program 1: 16:29:04 executing program 4: 16:29:04 executing program 3: 16:29:04 executing program 0: 16:29:04 executing program 4: 16:29:04 executing program 2: 16:29:04 executing program 0: 16:29:04 executing program 3: 16:29:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r5/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:04 executing program 1: 16:29:05 executing program 2: 16:29:05 executing program 3: 16:29:05 executing program 4: 16:29:05 executing program 0: 16:29:05 executing program 1: 16:29:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r5/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:05 executing program 2: 16:29:05 executing program 3: 16:29:05 executing program 4: 16:29:05 executing program 1: 16:29:05 executing program 0: 16:29:05 executing program 3: 16:29:05 executing program 4: 16:29:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:05 executing program 2: 16:29:05 executing program 1: 16:29:05 executing program 0: 16:29:05 executing program 3: 16:29:05 executing program 2: 16:29:05 executing program 4: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x3501, 0x81, 0x4, 0xfff}, {0x8000, 0x40, 0x6, 0x5}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x8}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) ioctl$TCXONC(r4, 0x540a, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x828000, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8001) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x400000000000, 0xfffffffffffffffd}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r7, 0x0) syz_open_dev$loop(&(0x7f0000000ac0)='/dev/loop#\x00', 0x2, 0x2000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @remote}, 0x1c) dup2(r10, r10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) fanotify_init(0xa, 0x101000) r11 = getpid() getpriority(0x0, r11) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r12, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x2c, 0x21, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r13}}]}, 0x2c}}, 0x0) r14 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r14, 0x6609) r15 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r16 = openat$random(0xffffffffffffff9c, &(0x7f0000001380)='/dev/urandom\x00', 0x6c8402, 0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, 0x0) fstat(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r17, @ANYBLOB="2cd4c29389bb6da6963d0936b65a345a54620cba5bef1272c0ae", @ANYRESDEC=r18, @ANYBLOB=',max_read=0x0000000000000006,fowner=', @ANYRESDEC=r19, @ANYBLOB=',\x00']) r20 = getpid() getpriority(0x0, r20) r21 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r21, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000021000101000000000000040037cd1e889787", @ANYRES32=r22, @ANYRES32=0x0], 0x2c}}, 0x0) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)) geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r23 = getpid() getpriority(0x0, r23) r24 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r25 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) bind$inet(r25, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r25, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000180)=0x18) sendto$inet(r25, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(r25, 0x5452, &(0x7f00000003c0)=0xe1) shutdown(r25, 0x1) r26 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r26, 0x4, 0x6900) ftruncate(r26, 0x800) lseek(r26, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r27 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r27, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'bpq0\x00'}, 0x18) 16:29:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @random="7994bd439590"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 16:29:05 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000140)) 16:29:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x252, &(0x7f0000000080)={0x0, 0x2ae}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="5500000018007f1de7fe01b2a4a280930a00000000000000000000003900090035000c000600000019000500fe800000000000dc1338d54400009b8413200000008307008daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 16:29:05 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 193.772825][ T9157] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 193.787864][ T26] audit: type=1804 audit(1572366545.952:32): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 16:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)) [ 193.924572][ T26] audit: type=1804 audit(1572366546.042:33): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 16:29:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625df08300200"], 0x24) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 16:29:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 194.125947][ T26] audit: type=1804 audit(1572366546.042:34): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 [ 194.173505][ T9154] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.203925][ T26] audit: type=1804 audit(1572366546.052:35): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2328 res=1 [ 194.233330][ T9154] IPVS: stopping backup sync thread 9157 ... 16:29:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x4000}) 16:29:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000300000000c40500cf", 0x2e4) [ 194.409077][ T9188] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 194.418054][ T9188] FAT-fs (loop1): Filesystem has been set read-only [ 194.424985][ T9188] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 194.467414][ T9194] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.506917][ T26] audit: type=1804 audit(1572366546.072:36): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2328 res=1 [ 194.519291][ T9197] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 194.620020][ T26] audit: type=1804 audit(1572366546.392:37): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 [ 194.650543][ T26] audit: type=1804 audit(1572366546.682:38): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 [ 194.681684][ T26] audit: type=1804 audit(1572366546.702:39): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 [ 194.712284][ T26] audit: type=1804 audit(1572366546.712:40): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/14/bus" dev="sda1" ino=16572 res=1 16:29:07 executing program 4: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'syz_tun\x00'}, 0x18) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x3501, 0x81, 0x4, 0xfff}, {0x8000, 0x40, 0x6, 0x5}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x8}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) ioctl$TCXONC(r4, 0x540a, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x828000, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6900) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8001) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x400000000000, 0xfffffffffffffffd}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r7, 0x0) syz_open_dev$loop(&(0x7f0000000ac0)='/dev/loop#\x00', 0x2, 0x2000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @remote}, 0x1c) dup2(r10, r10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) fanotify_init(0xa, 0x101000) r11 = getpid() getpriority(0x0, r11) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r12, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x2c, 0x21, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r13}}]}, 0x2c}}, 0x0) r14 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r14, 0x6609) r15 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r16 = openat$random(0xffffffffffffff9c, &(0x7f0000001380)='/dev/urandom\x00', 0x6c8402, 0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r16, 0x0) fstat(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r17, @ANYBLOB="2cd4c29389bb6da6963d0936b65a345a54620cba5bef1272c0ae", @ANYRESDEC=r18, @ANYBLOB=',max_read=0x0000000000000006,fowner=', @ANYRESDEC=r19, @ANYBLOB=',\x00']) r20 = getpid() getpriority(0x0, r20) r21 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r21, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000021000101000000000000040037cd1e889787", @ANYRES32=r22, @ANYRES32=0x0], 0x2c}}, 0x0) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)) geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r23 = getpid() getpriority(0x0, r23) r24 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r25 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) bind$inet(r25, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r25, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000180)=0x18) sendto$inet(r25, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(r25, 0x5452, &(0x7f00000003c0)=0xe1) shutdown(r25, 0x1) r26 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r26, 0x4, 0x6900) ftruncate(r26, 0x800) lseek(r26, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r27 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r27, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'bpq0\x00'}, 0x18) 16:29:07 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625df08300200"], 0x24) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 16:29:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x4000}) [ 195.097135][ T9220] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 195.230227][ T9208] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 195.238964][ T9208] FAT-fs (loop1): Filesystem has been set read-only [ 195.245765][ T9208] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 195.446376][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 195.446390][ T26] audit: type=1804 audit(1572366547.612:45): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir526423781/syzkaller.dJ6gSq/15/bus" dev="sda1" ino=16572 res=1 [ 195.487007][ T9217] IPVS: stopping backup sync thread 9220 ... 16:29:13 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:13 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000300000000c40500cf", 0x2e4) 16:29:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x3, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 16:29:13 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(0x0) [ 201.373715][ T9237] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.387834][ T9241] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.440386][ T9244] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 201.443231][ T9232] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 201.498525][ T9237] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 16:29:13 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:29:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x3, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 16:29:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 201.837932][ T9259] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.908696][ T9259] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x3, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) [ 202.385946][ T9268] kvm: pic: non byte read [ 202.391486][ T9268] kvm: pic: non byte write [ 202.424209][ T9268] kvm: pic: single mode not supported [ 202.425015][ T9268] kvm: pic: non byte read [ 202.449058][ T9268] kvm: pic: non byte write [ 202.474080][ T9268] kvm: pic: non byte read [ 202.479172][ T9268] kvm: pic: non byte write [ 202.492433][ T9268] kvm: pic: non byte read [ 202.513387][ T9268] kvm: pic: non byte write [ 202.519056][ T9268] kvm: pic: non byte read [ 202.533223][ T9268] kvm: pic: non byte write [ 202.544671][ T9268] kvm: pic: non byte read [ 202.564054][ T9268] kvm: pic: non byte write [ 202.587142][ T9268] kvm: pic: non byte read [ 202.644129][ T9268] kvm: pic: non byte write [ 202.649710][ T9268] kvm: pic: non byte read [ 202.674473][ T9268] kvm: pic: non byte write [ 202.680564][ T9268] kvm: pic: non byte read [ 202.691862][ T9268] kvm: pic: non byte write [ 202.698382][ T9268] kvm: pic: non byte read [ 202.717821][ T9268] kvm: pic: non byte write [ 202.769780][ T9268] kvm: pic: single mode not supported 16:29:20 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:20 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:20 executing program 4: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(0x0) 16:29:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) recvfrom(r0, &(0x7f0000000040)=""/82, 0x52, 0x0, 0x0, 0x0) [ 208.709124][ T9285] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.732459][ T9283] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 16:29:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 208.778055][ T9285] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) [ 209.036852][ T9299] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 16:29:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 209.159328][ T9299] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 209.448529][ T9313] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:27 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:27 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) close(r0) 16:29:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 215.651366][ T9330] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) 16:29:28 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0xb, {0x2, 0x0, @dev}}, 0x24) [ 215.920637][ T9340] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:28 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:34 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:34 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xaaaaaaaaaaaab27, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 16:29:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:34 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:34 executing program 0: io_setup(0x2, &(0x7f00000004c0)=0x0) io_getevents(r0, 0xffffffffffffff81, 0x0, 0x0, 0x0) 16:29:34 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:34 executing program 0: io_setup(0x2, &(0x7f00000004c0)=0x0) io_getevents(r0, 0xffffffffffffff81, 0x0, 0x0, 0x0) 16:29:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:34 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) [ 222.647579][ T9373] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:29:34 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 222.719623][ T9373] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 222.730898][ T9395] overlayfs: failed to resolve './file0': -2 [ 222.772782][ T9373] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 222.807331][ T9373] EXT4-fs (loop4): corrupt root inode, run e2fsck 16:29:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 222.835736][ T9373] EXT4-fs (loop4): mount failed 16:29:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$inet6(r0, 0x0, 0x0) 16:29:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) move_pages(0x0, 0x6, &(0x7f0000000040)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000000), 0x0) [ 222.875811][ T9400] overlayfs: failed to resolve './file0': -2 16:29:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:35 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 223.106704][ T9413] overlayfs: failed to resolve './file0': -2 16:29:35 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x100, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80c00) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 16:29:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x0) 16:29:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 223.226868][ T9423] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.320123][ T9434] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:35 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:35 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 223.508559][ T9448] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.525575][ T9448] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 223.595413][ T9452] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.626421][ T9452] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x8, 0x6, 0x0, 0x5, 0x0, 0x7fd7, 0x90000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x3, @perf_bp={&(0x7f0000000000), 0xc}, 0x10, 0x9f, 0x0, 0x4, 0x6, 0x6, 0x3c}, 0xffffffffffffffff, 0x4, r0, 0x8) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) write(r2, &(0x7f00000003c0)="40ed2e62d2fd4dd0835c58b451fa7d5d4bb5dd61342f593e6649109658d79c3b00ee96cb10fc0a26aff37186bbe23f4651cce23df73fe91102895981050e6b469b6a9f5c7cfd8f9f2124902b31b51be0052456dac20add26dffad37c4c5774372bb474e196e5f2b36998ae79fec8b7f1e019f46dfab508cf0da0029ba1df3c0432f499f950ee6665afe613ee2653000000000000000000000000000000600c5601a6240a3340b100b119087328d6cf7c58adbb9753cac47aaedc81a4627babc5fabcf9c40c01ab6f439232bdf23103", 0xcf) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) [ 224.012903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.018921][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:29:36 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x100, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80c00) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 16:29:36 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)) 16:29:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 224.278180][ T9479] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.317943][ T9479] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:36 executing program 1: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 224.412621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.418483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 224.424342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.430112][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:29:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:36 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x100, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80c00) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) [ 224.599761][ T9494] overlayfs: failed to resolve './file1': -2 [ 224.635550][ T9497] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 16:29:36 executing program 1: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 224.717992][ T9499] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 224.812952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.819097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 224.857765][ T9504] overlayfs: failed to resolve './file1': -2 [ 224.902636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.908473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 224.953315][ T9512] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.036719][ T9514] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x8, 0x6, 0x0, 0x5, 0x0, 0x7fd7, 0x90000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x3, @perf_bp={&(0x7f0000000000), 0xc}, 0x10, 0x9f, 0x0, 0x4, 0x6, 0x6, 0x3c}, 0xffffffffffffffff, 0x4, r0, 0x8) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) write(r2, &(0x7f00000003c0)="40ed2e62d2fd4dd0835c58b451fa7d5d4bb5dd61342f593e6649109658d79c3b00ee96cb10fc0a26aff37186bbe23f4651cce23df73fe91102895981050e6b469b6a9f5c7cfd8f9f2124902b31b51be0052456dac20add26dffad37c4c5774372bb474e196e5f2b36998ae79fec8b7f1e019f46dfab508cf0da0029ba1df3c0432f499f950ee6665afe613ee2653000000000000000000000000000000600c5601a6240a3340b100b119087328d6cf7c58adbb9753cac47aaedc81a4627babc5fabcf9c40c01ab6f439232bdf23103", 0xcf) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) 16:29:37 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x100, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80c00) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 16:29:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:37 executing program 1: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:37 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)) 16:29:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 225.451155][ T9526] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.468424][ T9525] overlayfs: failed to resolve './file1': -2 [ 225.533848][ T9534] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:37 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 225.851380][ T9542] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.863795][ T9540] overlayfs: failed to resolve './file1': -2 [ 225.919760][ T9543] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:38 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 226.194799][ T9551] overlayfs: failed to resolve './file1': -2 [ 226.237104][ T9552] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.278002][ T9552] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:38 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x200}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:29:38 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xa0) 16:29:38 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)) [ 226.697527][ T9568] overlayfs: failed to resolve './file1': -2 [ 226.698610][ T9570] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.780996][ T9574] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:39 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:39 executing program 0: clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 16:29:39 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:39 executing program 0: clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 16:29:39 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:39 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xa0) 16:29:39 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:29:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:39 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) 16:29:39 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:39 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:29:39 executing program 4: 16:29:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:40 executing program 4: 16:29:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:29:40 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 228.039751][ T9646] overlayfs: failed to resolve './file0': -2 16:29:40 executing program 4: 16:29:40 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) 16:29:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1003e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 16:29:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket(0x0, 0x0, 0x0) 16:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:40 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 228.613959][ T9674] overlayfs: failed to resolve './file0': -2 16:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:29:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:40 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket(0x0, 0x0, 0x0) [ 228.848571][ T9692] validate_nla: 2 callbacks suppressed [ 228.848582][ T9692] netlink: 'syz-executor.0': attribute type 21 has an invalid length. 16:29:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 228.935048][ T9692] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 228.950569][ T9695] overlayfs: failed to resolve './file0': -2 [ 228.974282][ T9692] INFO: trying to register non-static key. [ 228.980142][ T9692] the code is fine but needs lockdep annotation. [ 228.986468][ T9692] turning off the locking correctness validator. [ 228.992804][ T9692] CPU: 0 PID: 9692 Comm: syz-executor.0 Not tainted 5.4.0-rc5-next-20191029 #0 [ 228.996005][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env [ 229.001738][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.019082][ T9692] Call Trace: [ 229.022376][ T9692] dump_stack+0x172/0x1f0 [ 229.026709][ T9692] register_lock_class+0x179e/0x1850 [ 229.032076][ T9692] ? is_dynamic_key+0x1c0/0x1c0 [ 229.036924][ T9692] ? mark_held_locks+0xa4/0xf0 [ 229.041678][ T9692] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 229.047475][ T9692] ? stack_depot_save+0x25a/0x450 [ 229.052489][ T9692] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 229.058310][ T9692] __lock_acquire+0xf4/0x4a00 [ 229.062981][ T9692] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 229.068780][ T9692] ? stack_depot_save+0x25a/0x450 [ 229.073793][ T9692] ? mark_held_locks+0xf0/0xf0 [ 229.078546][ T9692] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 229.084357][ T9692] ? kasan_kmalloc+0x9/0x10 [ 229.088847][ T9692] ? __kmalloc_node+0x4e/0x70 [ 229.093514][ T9692] ? kvmalloc_node+0x68/0x100 [ 229.098180][ T9692] ? alloc_netdev_mqs+0x8b4/0xde0 [ 229.103188][ T9692] ? rtnl_create_link+0x22d/0xab0 [ 229.108203][ T9692] ? __rtnl_newlink+0xfa3/0x16e0 [ 229.113135][ T9692] ? rtnl_newlink+0x69/0xa0 [ 229.117648][ T9692] lock_acquire+0x190/0x410 [ 229.122142][ T9692] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 229.127850][ T9692] _raw_spin_lock_bh+0x33/0x50 [ 229.132621][ T9692] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 229.138343][ T9692] bond_3ad_update_lacp_rate+0xb9/0x290 [ 229.143895][ T9692] ? bond_opt_get_val+0x120/0x120 [ 229.148922][ T9692] ? bond_3ad_lacpdu_recv+0x730/0x730 [ 229.154295][ T9692] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 229.160292][ T9692] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 229.166091][ T9692] bond_option_lacp_rate_set+0x66/0x80 [ 229.171571][ T9692] __bond_opt_set+0x2a1/0x540 [ 229.176252][ T9692] bond_changelink+0x139e/0x1bd0 [ 229.181187][ T9692] ? memset+0x32/0x40 [ 229.185164][ T9692] ? bond_slave_changelink+0x1e0/0x1e0 [ 229.190616][ T9692] bond_newlink+0x2d/0x90 [ 229.194935][ T9692] ? bond_changelink+0x1bd0/0x1bd0 [ 229.200032][ T9692] __rtnl_newlink+0x10a1/0x16e0 [ 229.204894][ T9692] ? rtnl_link_unregister+0x250/0x250 [ 229.210254][ T9692] ? is_bpf_text_address+0xce/0x160 [ 229.215444][ T9692] ? kernel_text_address+0x73/0xf0 [ 229.220544][ T9692] ? unwind_get_return_address+0x61/0xa0 [ 229.226168][ T9692] ? profile_setup.cold+0xbb/0xbb [ 229.231193][ T9692] ? arch_stack_walk+0x97/0xf0 [ 229.235949][ T9692] ? stack_trace_save+0xac/0xe0 [ 229.240801][ T9692] ? stack_trace_consume_entry+0x190/0x190 [ 229.246610][ T9692] ? mark_lock+0xc2/0x1220 [ 229.251021][ T9692] ? save_stack+0x5c/0x90 [ 229.255352][ T9692] ? save_stack+0x23/0x90 [ 229.259672][ T9692] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 229.265479][ T9692] ? kasan_kmalloc+0x9/0x10 [ 229.269972][ T9692] ? kmem_cache_alloc_trace+0x158/0x790 [ 229.275519][ T9692] ? rtnl_newlink+0x4b/0xa0 [ 229.280010][ T9692] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 229.285564][ T9692] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 229.291538][ T9692] rtnl_newlink+0x69/0xa0 [ 229.295859][ T9692] ? __rtnl_newlink+0x16e0/0x16e0 [ 229.300880][ T9692] rtnetlink_rcv_msg+0x45e/0xaf0 [ 229.305807][ T9692] ? rtnl_bridge_getlink+0x910/0x910 [ 229.311082][ T9692] ? netlink_deliver_tap+0x228/0xbe0 [ 229.316356][ T9692] ? find_held_lock+0x35/0x130 [ 229.321112][ T9692] netlink_rcv_skb+0x177/0x450 [ 229.325876][ T9692] ? rtnl_bridge_getlink+0x910/0x910 [ 229.331149][ T9692] ? netlink_ack+0xb50/0xb50 [ 229.335726][ T9692] ? __kasan_check_read+0x11/0x20 [ 229.340843][ T9692] ? netlink_deliver_tap+0x24a/0xbe0 [ 229.346131][ T9692] rtnetlink_rcv+0x1d/0x30 [ 229.350548][ T9692] netlink_unicast+0x531/0x710 [ 229.355301][ T9692] ? netlink_attachskb+0x7c0/0x7c0 [ 229.360486][ T9692] ? _copy_from_iter_full+0x25d/0x8c0 [ 229.365851][ T9692] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 229.371558][ T9692] ? __check_object_size+0x3d/0x437 [ 229.376745][ T9692] netlink_sendmsg+0x8cf/0xda0 [ 229.381499][ T9692] ? netlink_unicast+0x710/0x710 [ 229.386436][ T9692] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 229.391986][ T9692] ? apparmor_socket_sendmsg+0x2a/0x30 [ 229.397433][ T9692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.403661][ T9692] ? security_socket_sendmsg+0x8d/0xc0 [ 229.409109][ T9692] ? netlink_unicast+0x710/0x710 [ 229.414034][ T9692] sock_sendmsg+0xd7/0x130 [ 229.418441][ T9692] ___sys_sendmsg+0x803/0x920 [ 229.423118][ T9692] ? copy_msghdr_from_user+0x440/0x440 [ 229.428576][ T9692] ? __kasan_check_read+0x11/0x20 [ 229.433601][ T9692] ? __fget+0x37f/0x550 [ 229.437745][ T9692] ? ksys_dup3+0x3e0/0x3e0 [ 229.442155][ T9692] ? __fget_light+0x1a9/0x230 [ 229.446832][ T9692] ? __fdget+0x1b/0x20 [ 229.450893][ T9692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.457121][ T9692] __sys_sendmsg+0x105/0x1d0 [ 229.461785][ T9692] ? __sys_sendmsg_sock+0xd0/0xd0 [ 229.466802][ T9692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.472248][ T9692] ? do_syscall_64+0x26/0x760 [ 229.476914][ T9692] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.482968][ T9692] ? do_syscall_64+0x26/0x760 [ 229.487635][ T9692] __x64_sys_sendmsg+0x78/0xb0 [ 229.492404][ T9692] do_syscall_64+0xfa/0x760 [ 229.496895][ T9692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.502773][ T9692] RIP: 0033:0x459f49 [ 229.506670][ T9692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.526262][ T9692] RSP: 002b:00007fb6ed7aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.534662][ T9692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 229.542628][ T9692] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 229.550605][ T9692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.558651][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6ed7af6d4 [ 229.566614][ T9692] R13: 00000000004c8338 R14: 00000000004de608 R15: 00000000ffffffff [ 229.574831][ C0] net_ratelimit: 22 callbacks suppressed [ 229.574842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.586286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 229.590797][ T3920] kobject: 'loop3' (000000003065d84b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 229.635302][ T9692] kobject: 'bond1' (00000000eba32fb0): kobject_add_internal: parent: 'net', set: 'devices' [ 229.657290][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 229.672742][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 229.691205][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 229.699104][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:29:41 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) 16:29:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:41 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket(0x0, 0x0, 0x0) [ 229.735807][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env [ 229.753801][ T3920] kobject: 'loop3' (000000003065d84b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 229.772570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.778426][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:29:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:42 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 229.812807][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 229.842179][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 229.887972][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env [ 229.909499][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 229.923699][ T9692] kobject: 'bond1' (00000000eba32fb0): kobject_uevent_env [ 229.943792][ T9692] kobject: 'bond1' (00000000eba32fb0): fill_kobj_path: path = '/devices/virtual/net/bond1' [ 229.956788][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 229.979436][ T9692] kobject: 'queues' (000000000dd1092d): kobject_add_internal: parent: 'bond1', set: '' [ 229.997386][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 230.014773][ T9692] kobject: 'queues' (000000000dd1092d): kobject_uevent_env [ 230.029888][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env [ 230.039707][ T9692] kobject: 'queues' (000000000dd1092d): kobject_uevent_env: filter function caused the event to drop! [ 230.051050][ T3920] kobject: 'loop3' (000000003065d84b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 230.063982][ T9692] kobject: 'rx-0' (00000000f742d8a1): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.069199][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 230.081461][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 230.085002][ T9692] kobject: 'rx-0' (00000000f742d8a1): kobject_uevent_env [ 230.100213][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 230.100952][ T9692] kobject: 'rx-0' (00000000f742d8a1): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-0' [ 230.120778][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 230.121116][ T9692] kobject: 'rx-1' (00000000341fd323): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.140904][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 230.144314][ T9692] kobject: 'rx-1' (00000000341fd323): kobject_uevent_env [ 230.148968][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 230.156438][ T9692] kobject: 'rx-1' (00000000341fd323): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-1' [ 230.214908][ T9692] kobject: 'rx-2' (00000000e0778b3b): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.231250][ T9692] kobject: 'rx-2' (00000000e0778b3b): kobject_uevent_env [ 230.241494][ T9692] kobject: 'rx-2' (00000000e0778b3b): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-2' [ 230.252584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.252626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.264330][ T9692] kobject: 'rx-3' (0000000007fb5686): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.274624][ T9692] kobject: 'rx-3' (0000000007fb5686): kobject_uevent_env [ 230.281662][ T9692] kobject: 'rx-3' (0000000007fb5686): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-3' [ 230.292823][ T9692] kobject: 'rx-4' (000000001408b144): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.302985][ T9692] kobject: 'rx-4' (000000001408b144): kobject_uevent_env [ 230.310027][ T9692] kobject: 'rx-4' (000000001408b144): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-4' [ 230.321066][ T9692] kobject: 'rx-5' (0000000018944782): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.331201][ T9692] kobject: 'rx-5' (0000000018944782): kobject_uevent_env [ 230.338284][ T9692] kobject: 'rx-5' (0000000018944782): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-5' [ 230.349309][ T9692] kobject: 'rx-6' (0000000008e0c088): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.359727][ T9692] kobject: 'rx-6' (0000000008e0c088): kobject_uevent_env [ 230.366828][ T9692] kobject: 'rx-6' (0000000008e0c088): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-6' [ 230.378017][ T9692] kobject: 'rx-7' (000000004946c700): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.388151][ T9692] kobject: 'rx-7' (000000004946c700): kobject_uevent_env [ 230.395220][ T9692] kobject: 'rx-7' (000000004946c700): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-7' [ 230.406262][ T9692] kobject: 'rx-8' (00000000b1df5788): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.416399][ T9692] kobject: 'rx-8' (00000000b1df5788): kobject_uevent_env [ 230.423504][ T9692] kobject: 'rx-8' (00000000b1df5788): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-8' [ 230.434571][ T9692] kobject: 'rx-9' (00000000b8afaa3d): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.444720][ T9692] kobject: 'rx-9' (00000000b8afaa3d): kobject_uevent_env [ 230.451760][ T9692] kobject: 'rx-9' (00000000b8afaa3d): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-9' [ 230.462831][ T9692] kobject: 'rx-10' (000000007c2df9a6): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.473082][ T9692] kobject: 'rx-10' (000000007c2df9a6): kobject_uevent_env [ 230.480228][ T9692] kobject: 'rx-10' (000000007c2df9a6): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-10' [ 230.492013][ T9692] kobject: 'rx-11' (00000000ef531a66): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.502373][ T9692] kobject: 'rx-11' (00000000ef531a66): kobject_uevent_env [ 230.509553][ T9692] kobject: 'rx-11' (00000000ef531a66): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-11' [ 230.520768][ T9692] kobject: 'rx-12' (0000000066dcfb1f): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.531018][ T9692] kobject: 'rx-12' (0000000066dcfb1f): kobject_uevent_env [ 230.538179][ T9692] kobject: 'rx-12' (0000000066dcfb1f): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-12' [ 230.549379][ T9692] kobject: 'rx-13' (000000002920b328): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.559593][ T9692] kobject: 'rx-13' (000000002920b328): kobject_uevent_env [ 230.566758][ T9692] kobject: 'rx-13' (000000002920b328): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-13' [ 230.577973][ T9692] kobject: 'rx-14' (00000000859164b8): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.588191][ T9692] kobject: 'rx-14' (00000000859164b8): kobject_uevent_env [ 230.595410][ T9692] kobject: 'rx-14' (00000000859164b8): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-14' [ 230.606801][ T9692] kobject: 'rx-15' (00000000d77528da): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.617347][ T9692] kobject: 'rx-15' (00000000d77528da): kobject_uevent_env [ 230.624545][ T9692] kobject: 'rx-15' (00000000d77528da): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-15' [ 230.635748][ T9692] kobject: 'tx-0' (0000000012eac841): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.645977][ T9692] kobject: 'tx-0' (0000000012eac841): kobject_uevent_env [ 230.653696][ T9692] kobject: 'tx-0' (0000000012eac841): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-0' [ 230.662625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.664803][ T9692] kobject: 'tx-1' (00000000e1c051a3): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.670405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.680677][ T9692] kobject: 'tx-1' (00000000e1c051a3): kobject_uevent_env [ 230.686334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.693407][ T9692] kobject: 'tx-1' (00000000e1c051a3): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-1' [ 230.699091][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.710154][ T9692] kobject: 'tx-2' (000000001aaa599b): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.725893][ T9692] kobject: 'tx-2' (000000001aaa599b): kobject_uevent_env [ 230.732987][ T9692] kobject: 'tx-2' (000000001aaa599b): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-2' [ 230.744421][ T9692] kobject: 'tx-3' (00000000b87bbd14): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.754678][ T9692] kobject: 'tx-3' (00000000b87bbd14): kobject_uevent_env [ 230.761740][ T9692] kobject: 'tx-3' (00000000b87bbd14): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-3' [ 230.773669][ T9692] kobject: 'tx-4' (00000000970fad66): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.783928][ T9692] kobject: 'tx-4' (00000000970fad66): kobject_uevent_env [ 230.790968][ T9692] kobject: 'tx-4' (00000000970fad66): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-4' [ 230.802040][ T9692] kobject: 'tx-5' (0000000027c24b75): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.812224][ T9692] kobject: 'tx-5' (0000000027c24b75): kobject_uevent_env [ 230.819394][ T9692] kobject: 'tx-5' (0000000027c24b75): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-5' [ 230.830441][ T9692] kobject: 'tx-6' (00000000485cceee): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.840675][ T9692] kobject: 'tx-6' (00000000485cceee): kobject_uevent_env [ 230.847755][ T9692] kobject: 'tx-6' (00000000485cceee): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-6' [ 230.858803][ T9692] kobject: 'tx-7' (00000000579d0540): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.869043][ T9692] kobject: 'tx-7' (00000000579d0540): kobject_uevent_env [ 230.876400][ T9692] kobject: 'tx-7' (00000000579d0540): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-7' [ 230.887462][ T9692] kobject: 'tx-8' (00000000903a584c): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.897681][ T9692] kobject: 'tx-8' (00000000903a584c): kobject_uevent_env [ 230.904766][ T9692] kobject: 'tx-8' (00000000903a584c): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-8' [ 230.915781][ T9692] kobject: 'tx-9' (000000007a91df31): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.926095][ T9692] kobject: 'tx-9' (000000007a91df31): kobject_uevent_env [ 230.933197][ T9692] kobject: 'tx-9' (000000007a91df31): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-9' [ 230.944256][ T9692] kobject: 'tx-10' (0000000045324bec): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.954538][ T9692] kobject: 'tx-10' (0000000045324bec): kobject_uevent_env [ 230.961766][ T9692] kobject: 'tx-10' (0000000045324bec): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-10' [ 230.973104][ T9692] kobject: 'tx-11' (0000000022a22f92): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.983738][ T9692] kobject: 'tx-11' (0000000022a22f92): kobject_uevent_env [ 230.990886][ T9692] kobject: 'tx-11' (0000000022a22f92): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-11' [ 231.002111][ T9692] kobject: 'tx-12' (00000000c6f03af0): kobject_add_internal: parent: 'queues', set: 'queues' [ 231.012716][ T9692] kobject: 'tx-12' (00000000c6f03af0): kobject_uevent_env [ 231.019851][ T9692] kobject: 'tx-12' (00000000c6f03af0): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-12' [ 231.031062][ T9692] kobject: 'tx-13' (000000000d44a221): kobject_add_internal: parent: 'queues', set: 'queues' [ 231.041387][ T9692] kobject: 'tx-13' (000000000d44a221): kobject_uevent_env [ 231.048810][ T9692] kobject: 'tx-13' (000000000d44a221): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-13' [ 231.060092][ T9692] kobject: 'tx-14' (000000009da5ad9b): kobject_add_internal: parent: 'queues', set: 'queues' [ 231.070442][ T9692] kobject: 'tx-14' (000000009da5ad9b): kobject_uevent_env [ 231.077631][ T9692] kobject: 'tx-14' (000000009da5ad9b): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-14' [ 231.089333][ T9692] kobject: 'tx-15' (00000000416b7123): kobject_add_internal: parent: 'queues', set: 'queues' [ 231.099649][ T9692] kobject: 'tx-15' (00000000416b7123): kobject_uevent_env [ 231.106867][ T9692] kobject: 'tx-15' (00000000416b7123): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/tx-15' 16:29:43 executing program 0: 16:29:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket(0x0, 0x0, 0x0) 16:29:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) [ 231.118652][ T9692] kobject: 'batman_adv' (00000000c8219a70): kobject_add_internal: parent: 'bond1', set: '' 16:29:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) [ 231.166488][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 231.179231][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:29:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:43 executing program 0: [ 231.237569][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env [ 231.262934][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' 16:29:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:43 executing program 4: 16:29:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) [ 231.315500][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 231.370627][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:29:43 executing program 0: 16:29:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 231.412004][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env 16:29:43 executing program 4: 16:29:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 231.456567][ T3920] kobject: 'loop3' (000000003065d84b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 231.493144][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env 16:29:43 executing program 0: 16:29:43 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) [ 231.500347][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 231.525477][ T9772] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:43 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:43 executing program 4: 16:29:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:43 executing program 0: 16:29:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 231.561250][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 231.586792][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:29:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 16:29:43 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) [ 231.656026][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 231.672113][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 231.697715][ T9783] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 16:29:43 executing program 4: 16:29:43 executing program 0: [ 231.722817][ T9788] overlayfs: missing 'lowerdir' [ 231.729140][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 231.755924][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:29:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:43 executing program 4: 16:29:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 16:29:44 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) [ 231.778955][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env [ 231.792117][ T3920] kobject: 'loop3' (000000003065d84b): fill_kobj_path: path = '/devices/virtual/block/loop3' 16:29:44 executing program 0: 16:29:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:44 executing program 4: [ 231.843743][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 231.850932][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 231.891395][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 231.924860][ T9803] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 231.935707][ T9801] overlayfs: missing 'lowerdir' 16:29:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:44 executing program 0: 16:29:44 executing program 4: [ 231.940673][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:29:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 231.983930][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env [ 231.991236][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' 16:29:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:44 executing program 4: 16:29:44 executing program 0: 16:29:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 232.071178][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 232.101138][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 232.115562][ T9810] overlayfs: missing 'lowerdir' [ 232.129657][ T9814] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 232.159216][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 232.211512][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 232.233408][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env [ 232.240736][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' 16:29:44 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:44 executing program 4: 16:29:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:29:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 16:29:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 232.261261][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 232.272086][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' 16:29:44 executing program 4: 16:29:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 232.323896][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 232.331090][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 232.362082][ T9820] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 232.388649][ T9831] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 232.405637][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 232.409743][ T9820] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 16:29:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 16:29:44 executing program 4: 16:29:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 232.455972][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 232.510772][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env 16:29:44 executing program 4: [ 232.551413][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 232.593893][ T9837] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 232.606432][ T9838] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 232.612329][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 232.637850][ T9837] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 232.642618][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 232.678342][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env 16:29:44 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:44 executing program 0: 16:29:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:44 executing program 4: 16:29:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 232.685571][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 232.697107][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 232.711890][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:29:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:44 executing program 0: 16:29:44 executing program 4: [ 232.747566][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 232.774494][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) [ 232.819585][ T9846] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 232.830075][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 232.841026][ T9850] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 232.850158][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 232.860471][ T9846] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 16:29:45 executing program 4: [ 232.890105][ T3920] kobject: 'loop2' (00000000f2f411e8): kobject_uevent_env 16:29:45 executing program 0: 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 232.933610][ T3920] kobject: 'loop2' (00000000f2f411e8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 233.004218][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 233.011429][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 233.040880][ T9858] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 233.077510][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 233.096720][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:29:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:45 executing program 4: 16:29:45 executing program 0: 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000), 0x0) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 233.138749][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 233.146034][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 233.157447][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env [ 233.179294][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:29:45 executing program 4: [ 233.210359][ T9865] overlayfs: missing 'workdir' 16:29:45 executing program 0: 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 233.234776][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 233.259556][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:29:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) 16:29:45 executing program 0: 16:29:45 executing program 4: [ 233.349970][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 233.382991][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:29:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)) [ 233.399793][ T9878] overlayfs: missing 'workdir' 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r4, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(r4, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(r4, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r6/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:45 executing program 0: 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) 16:29:45 executing program 4: 16:29:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 233.443444][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 233.471035][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:29:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000088d0781af9e32979d779224f5de6c7e448a1c31c67709f8fadbb5129eb0ceeec01a8562dbd95de6f59181f485af0b7ee4b67049226a936c9c675e620"], 0x44) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 16:29:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) [ 233.516569][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env 16:29:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) socketpair(0xb, 0x0, 0x0, 0x0) [ 233.569959][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 233.590512][ T3920] kobject: 'loop5' (00000000625684da): kobject_uevent_env [ 233.607194][ T9890] overlayfs: missing 'workdir' 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(0xffffffffffffffff, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(0xffffffffffffffff, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r5/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 233.612868][ T3920] kobject: 'loop5' (00000000625684da): fill_kobj_path: path = '/devices/virtual/block/loop5' 16:29:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 233.647217][ T3920] kobject: 'loop4' (00000000e9c540a5): kobject_uevent_env [ 233.675002][ T3920] kobject: 'loop4' (00000000e9c540a5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 233.713981][ T3920] kobject: 'loop1' (00000000499a2f4f): kobject_uevent_env [ 233.721228][ T3920] kobject: 'loop1' (00000000499a2f4f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 233.735942][ T3920] kobject: 'loop0' (0000000005625226): kobject_uevent_env 16:29:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) socketpair(0xb, 0x0, 0x0, 0x0) 16:29:45 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x3, 0x187002) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1}}], 0x238}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ac547e6215f3132b1401000001000000000000000000ef0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef81ae1d748d257d094d66d9bf7c7a94a5b643de68595430704201bd58d8dda61d0e1664b2e4d2203b5a420593ed6b25670b8ecdec1803c9b4c42f1d1e1c73dd286f1d0422453ce396381f341685493740e1a45a703d2cfc841ceffb95bf04b88a7c21badd8df1"], 0xaf}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)}, 0x0) sendmsg$kcm(r0, &(0x7f0000005240)={&(0x7f0000000380)=@l2={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7}, 0xeb, 0x3f}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000a40)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)}, {&(0x7f0000002d40)="45be18d7f173a875a05079b769ca319db63e0306e6a65d5edea447a879993067c37efaf6a0c75ec529aadfdd504c2790db9b88c78aa435c0610a86d2ed57ff6393d4f89efba9c2b101da8b455ea86f3a4ed6b9efdc0dcdd5bacc541c45b86c97c688a5708b69f72ccc78bb1141601ba587e7158da4625326", 0x78}], 0x6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x1, &(0x7f0000000540)=0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) bind$inet(0xffffffffffffffff, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) kexec_load(0x7ff, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40), 0x0, 0x81, 0x5}], 0x0) nanosleep(0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) io_getevents(0x0, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000003e80)={0x0, 0x0, 0x7, &(0x7f00000001c0)=0x1}) sendto(0xffffffffffffffff, &(0x7f0000000880)="c5", 0x1, 0x4000051, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xffffffc8) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000003ec0)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000003e40)={&(0x7f00000009c0)={0x7, 0x4, 0x5, {}, {0x0, r5/1000+10000}, {0x1, 0x0, 0x81, 0x8001}, 0x1, @can={{0x1}, 0x3, 0x0, 0x0, 0x0, "b8a336b6db6dbfd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x7be7ec9f513cbe0d) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x0, 0x3}, @mss, @timestamp, @mss={0x2, 0x100000}], 0x5) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) 16:29:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b54c007110000f30501000b000600000000c40500cf", 0x2e4) [ 233.760828][ T3920] kobject: 'loop0' (0000000005625226): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 233.795768][ T9906] overlayfs: missing 'lowerdir' [ 233.806309][ T3920] kobject: 'loop3' (000000003065d84b): kobject_uevent_env 16:29:46 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\