er 'ÿÿÿÿÿÿÿÿ' 00:06:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000004540)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) 00:06:13 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002c40)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:14 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:14 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000400)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="038333a45d7abc6686b09563df03f8bfb9c01fa7ed557db8552de00b02b94297bc23167fe85761da902d03f3a06f97c199e77de848090000003bd2374ca1009be50bccf148b2d6b41db0769d45c33c33aaefa9c6e50153d6e043c6081068ce80aefd8d940233efb21758c5e27abaab", 0x6f}], 0x1}}], 0x1, 0x0) 00:06:14 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002c40)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close(r0) [ 375.746182][ T7610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:06:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 375.902522][ T7610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.050853][ T7610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.083335][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.095799][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.205717][ T7610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:06:16 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) [ 376.562414][ T7610] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.622333][ T7610] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.673739][ T7610] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.675837][ T30] audit: type=1400 audit(376.620:246): avc: denied { bind } for pid=7623 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 376.706726][ T7610] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 00:06:16 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:16 executing program 0: r0 = syz_clone(0x34928400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0, 0x0], 0x2}, 0x58) 00:06:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ftruncate(0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) ioctl$KDGKBMODE(r0, 0x4b4b, &(0x7f0000000040)) [ 376.994431][ T30] audit: type=1400 audit(376.940:247): avc: denied { checkpoint_restore } for pid=7635 comm="syz-executor.0" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap2_userns permissive=1 00:06:17 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:17 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:17 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 377.944853][ T7647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.058011][ T7648] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 [ 378.110356][ T7647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:06:18 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 378.311285][ T7647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.461391][ T7647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:06:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x9, &(0x7f0000001fc0)={0x11, 0x29, &(0x7f0000002080)=ANY=[], &(0x7f0000000b40)='syzkaller\x00'}, 0x90) [ 378.784147][ T7647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.829779][ T7647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.866492][ T7647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.970015][ T7647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 00:06:18 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 379.290581][ T7672] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 00:06:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002c40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:06:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x4c000) [ 379.790336][ T7679] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.868550][ T7679] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.998808][ T7679] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.113707][ T7679] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:06:20 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000280)=[{r1, 0x145}], 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 381.290635][ T30] audit: type=1400 audit(381.240:248): avc: denied { nlmsg_write } for pid=7692 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 00:06:21 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:21 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 382.510956][ T7702] usb usb1: usbfs: process 7702 (syz-executor.1) did not claim interface 0 before use 00:06:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80) 00:06:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x4c000) 00:06:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008e0a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 00:06:23 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 384.250021][ T7679] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.309558][ T7679] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.354250][ T7679] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.429673][ T7679] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 00:06:24 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:24 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5450, 0x0) 00:06:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, 0x0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:25 executing program 1: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x4c000) 00:06:25 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) 00:06:25 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5450, 0x0) 00:06:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, 0x0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:26 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d"], 0x0) 00:06:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x6, 0x0, [], 0x0}) 00:06:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:27 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 387.368137][ T3681] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 387.618250][ T3681] usb 2-1: Using ep0 maxpacket: 8 00:06:27 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) [ 387.758213][ T3681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.758797][ T3681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 387.759186][ T3681] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.978487][ T3681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.979044][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.979364][ T3681] usb 2-1: Product: syz [ 387.979564][ T3681] usb 2-1: Manufacturer: syz [ 387.979766][ T3681] usb 2-1: SerialNumber: syz 00:06:27 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(r0) [ 388.030165][ T3681] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 388.030837][ T3681] cdc_ncm 2-1:1.0: bind() failure [ 388.271835][ T7570] usb 2-1: USB disconnect, device number 6 00:06:28 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:28 executing program 0: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5450, 0x0) 00:06:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f4, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 00:06:29 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x4c000) 00:06:29 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syncfs(r0) 00:06:29 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffd}, {0x16}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid\x00') 00:06:30 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:30 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x4c000) [ 390.630133][ T30] audit: type=1326 audit(390.540:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=40000028 syscall=240 compat=0 ip=0x50bc0 code=0xffff0000 00:06:30 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5450, 0x0) 00:06:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:31 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000740)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:06:31 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:06:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x4c000) 00:06:32 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:33 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5450, 0x0) 00:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:33 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000180)="1f", 0x1, 0x0, 0x0, 0x0) 00:06:33 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:34 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syncfs(0xffffffffffffffff) 00:06:34 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5450, 0x0) 00:06:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 00:06:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x4c000) 00:06:35 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:36 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) 00:06:36 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r4, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 396.830585][ T30] audit: type=1400 audit(396.780:250): avc: denied { create } for pid=7818 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 00:06:36 executing program 0: sendto(0xffffffffffffffff, &(0x7f0000000180)="1f", 0x1, 0x0, 0x0, 0x0) 00:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x0) 00:06:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10842, 0x0) pwrite64(r0, &(0x7f00000013c0)='<', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) sendfile(r1, r1, &(0x7f0000000080), 0xe0000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') lseek(r2, 0x0, 0x0) [ 397.815360][ T30] audit: type=1800 audit(397.760:251): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=701 res=0 errno=0 00:06:37 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000fe1000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000fe0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00008ce000/0x3000)=nil) mlock2(&(0x7f0000875000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f00008d0000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 00:06:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x4c000) 00:06:38 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:38 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000180)="1f", 0x1, 0x0, 0x0, 0x0) 00:06:38 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:06:39 executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000001fc0)='./file0/file1\x00', 0x0, 0x0) 00:06:39 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) memfd_create(&(0x7f0000000180)='\xd4\xb4y\x05F%v\xd5\xb2\xad\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\x00J6h\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x1a\xd6\xb7w]\x9d`\x15\xf3\x90\x8e\xe5x\xfe\x93>\x1c\xb1\xde\xf7\xebY;b\xd0[\xed2\x1b\xd0\x80u\x80\xf1\xbe\xe0V\x1bp\xc1\x03J\xbb\xfd\x18\x03\xa5\x1c\xd1\xbcp:\xb2\xfa\xaf\xd5\xd3\xc1}\xd7\x95\xc0\xca\x00\x00\x00\x00Q\'^\x83\xbcV\xefw|\xceK\x01R\xa1D\xf9v\xab\xe21{\x9c\xd0\xe9\xe4\x92\nT\xf0\x87Q\x8d\xdd\xfb\x10s\x0e\x00\xec\xbd\x82\xd1\xc9^\xcb\x82\xac\xbb\xeaw\xc9\xe3\x19(\xfe\xf1\x8b\xb6-w\xa4&\xe8\nSu\xe4\x8d\xe9nL\x18\xe8\x06G\x80\xa2\v\xaf\x94\n\xa9;M\xd4\xd8\xca\xda%\x0e\xf5\xdbR', 0x0) read$FUSE(r0, 0x0, 0x0) 00:06:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14}, 0x14}}, 0xc000) 00:06:39 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000180)="1f", 0x1, 0x0, 0x0, 0x0) 00:06:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x1, 0x8, [0x0, 0x0]}) 00:06:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 00:06:40 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x0) 00:06:40 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:06:40 executing program 0: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) memfd_create(&(0x7f0000000180)='\xd4\xb4y\x05F%v\xd5\xb2\xad\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\x00J6h\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x1a\xd6\xb7w]\x9d`\x15\xf3\x90\x8e\xe5x\xfe\x93>\x1c\xb1\xde\xf7\xebY;b\xd0[\xed2\x1b\xd0\x80u\x80\xf1\xbe\xe0V\x1bp\xc1\x03J\xbb\xfd\x18\x03\xa5\x1c\xd1\xbcp:\xb2\xfa\xaf\xd5\xd3\xc1}\xd7\x95\xc0\xca\x00\x00\x00\x00Q\'^\x83\xbcV\xefw|\xceK\x01R\xa1D\xf9v\xab\xe21{\x9c\xd0\xe9\xe4\x92\nT\xf0\x87Q\x8d\xdd\xfb\x10s\x0e\x00\xec\xbd\x82\xd1\xc9^\xcb\x82\xac\xbb\xeaw\xc9\xe3\x19(\xfe\xf1\x8b\xb6-w\xa4&\xe8\nSu\xe4\x8d\xe9nL\x18\xe8\x06G\x80\xa2\v\xaf\x94\n\xa9;M\xd4\xd8\xca\xda%\x0e\xf5\xdbR', 0x0) read$FUSE(r0, 0x0, 0x0) 00:06:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0x2, &(0x7f0000000040)) 00:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 00:06:41 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)) 00:06:41 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) memfd_create(&(0x7f0000000180)='\xd4\xb4y\x05F%v\xd5\xb2\xad\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\x00J6h\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x1a\xd6\xb7w]\x9d`\x15\xf3\x90\x8e\xe5x\xfe\x93>\x1c\xb1\xde\xf7\xebY;b\xd0[\xed2\x1b\xd0\x80u\x80\xf1\xbe\xe0V\x1bp\xc1\x03J\xbb\xfd\x18\x03\xa5\x1c\xd1\xbcp:\xb2\xfa\xaf\xd5\xd3\xc1}\xd7\x95\xc0\xca\x00\x00\x00\x00Q\'^\x83\xbcV\xefw|\xceK\x01R\xa1D\xf9v\xab\xe21{\x9c\xd0\xe9\xe4\x92\nT\xf0\x87Q\x8d\xdd\xfb\x10s\x0e\x00\xec\xbd\x82\xd1\xc9^\xcb\x82\xac\xbb\xeaw\xc9\xe3\x19(\xfe\xf1\x8b\xb6-w\xa4&\xe8\nSu\xe4\x8d\xe9nL\x18\xe8\x06G\x80\xa2\v\xaf\x94\n\xa9;M\xd4\xd8\xca\xda%\x0e\xf5\xdbR', 0x0) read$FUSE(r0, 0x0, 0x0) 00:06:41 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 00:06:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 00:06:42 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:06:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) 00:06:42 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:06:43 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0x2, &(0x7f0000000040)) [ 403.458994][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:06:43 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:43 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000002500)='.pending_reads\x00', 0x840, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5451, 0x0) 00:06:43 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0) 00:06:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001f00)={@empty}) 00:06:44 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 00:06:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, 0x0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:44 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 00:06:44 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0) 00:06:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 00:06:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, 0x0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:45 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 00:06:45 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(r1, 0x0, 0x0) 00:06:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) [ 405.988546][ T30] audit: type=1400 audit(405.920:252): avc: denied { write } for pid=7903 comm="syz-executor.1" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 00:06:45 executing program 0: ioctl$UFFDIO_API(0xffffffffffffffff, 0x2, &(0x7f0000000040)) [ 406.132423][ T30] audit: type=1400 audit(406.080:253): avc: denied { set_context_mgr } for pid=7903 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 406.139910][ T7905] binder: BINDER_SET_CONTEXT_MGR already set [ 406.140415][ T7905] binder: 7903:7905 ioctl 40046207 0 returned -16 00:06:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x9aac1, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 00:06:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, 0x0, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:46 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000002500)='.pending_reads\x00', 0x840, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5451, 0x0) 00:06:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) 00:06:46 executing program 0: ioctl$UFFDIO_API(0xffffffffffffffff, 0x2, &(0x7f0000000040)) [ 406.650076][ T7915] binder: BINDER_SET_CONTEXT_MGR already set [ 406.650391][ T7915] binder: 7914:7915 ioctl 40046207 0 returned -16 00:06:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/98, 0x62}], 0x1, &(0x7f0000000740)=""/29, 0x1d}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:06:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0x0, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x24000050) 00:06:47 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) [ 407.299200][ T7925] binder: BINDER_SET_CONTEXT_MGR already set [ 407.299971][ T7925] binder: 7924:7925 ioctl 40046207 0 returned -16 00:06:47 executing program 1: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001fc0)=""/4095, 0xfff}], 0x1) 00:06:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x58, r1, 0x0, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 00:06:47 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 00:06:48 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0) 00:06:48 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$rds(r1, 0x0, 0x0) 00:06:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0x2, &(0x7f0000000040)) 00:06:49 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000002540), &(0x7f0000000300)}, 0x20) 00:06:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x14, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) 00:06:49 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) 00:06:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000300)={0x0, 0x1, [{}]}) 00:06:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000700)="87", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/192, 0x20000180}], 0x1}, 0x2) 00:06:50 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 00:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x14, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) [ 410.554570][ T30] audit: type=1400 audit(410.470:254): avc: denied { write } for pid=7948 comm="syz-executor.1" path="socket:[13613]" dev="sockfs" ino=13613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:06:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 410.643979][ T30] audit: type=1400 audit(410.580:255): avc: denied { read } for pid=7948 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:06:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2000, 0x0) 00:06:50 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0x2, &(0x7f0000000040)) 00:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x14, r1, 0xcf914c0647ee558d, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) 00:06:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) 00:06:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') lseek(r0, 0x80000000, 0x0) [ 411.668832][ T7963] binder: BINDER_SET_CONTEXT_MGR already set [ 411.669598][ T7963] binder: 7961:7963 ioctl 40046207 0 returned -16 00:06:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="9ade1b687700000000000000000007"], 0x0) 00:06:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 00:06:51 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0x2, &(0x7f0000000040)) 00:06:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x0, 0x0, 0x18, {0x18, 0x0, "c56615d828ae9825bdabeb734453fba452f288f66a19"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:06:52 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:06:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) 00:06:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a803546728283d88c045f30e7e9268c67799779bffcd0", 0x22, 0x0, 0x0, 0x0) [ 413.107661][ T92] usb 2-1: new high-speed USB device number 7 using dummy_hcd 00:06:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file2\x00', &(0x7f0000000200)='./file1\x00') [ 413.413928][ T92] usb 2-1: Using ep0 maxpacket: 8 00:06:53 executing program 0: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) [ 413.587928][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.588510][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.588889][ T92] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 413.589235][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.611063][ T92] usb 2-1: config 0 descriptor?? [ 413.634512][ T30] audit: type=1400 audit(413.570:256): avc: denied { remove_name } for pid=2807 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.645525][ T30] audit: type=1400 audit(413.590:257): avc: denied { rename } for pid=2807 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:06:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_clone(0x660694c0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 414.120351][ T92] hid (null): unknown global tag 0xc [ 414.188755][ T92] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 414.189361][ T92] hid-rmi 0003:06CB:81A7.0001: unknown global tag 0xc [ 414.189768][ T92] hid-rmi 0003:06CB:81A7.0001: item 0 1 1 12 parsing failed [ 414.190728][ T92] hid-rmi 0003:06CB:81A7.0001: parse failed [ 414.191132][ T92] hid-rmi 0003:06CB:81A7.0001: probe with driver hid-rmi failed with error -22 [ 414.359956][ T92] usb 2-1: USB disconnect, device number 7 00:06:54 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:06:54 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x200) 00:06:55 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0x2, 0x0) 00:06:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 00:06:55 executing program 0: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) 00:06:55 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x0, 0x0, 0x3ff]}}, {0x0, 0x0, 0x0, 0xa4, @time, {}, {}, @queue={0x0, {0x0, 0x80000001}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x322, @tick=0x7f}) 00:06:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0x2, 0x0) 00:06:56 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:06:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) 00:06:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:06:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 00:06:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) 00:06:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a017661cf8f313d6e221b913f3039684df469cd735ec92a6a70c5b09d2b102352a2c2c547d81d40041999fc72df0248b3ab53f995448bca00bd12da2fd98b6af879cd35ac0bf4498e2eaae1e7f32c7fa14b4e6904a12593f209d13d751553a1e887e564e64c7c6b40974b13f223712f400"/125], 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000eb973e949186c05ab251e2168b2f44c28384ad5eaa0d081de8186981f2c8700b603d803a7c1af4e53523a1de22bd4e2ce51ba4905d1ac5517387e669d6a32fcc8afb4876c6df7dc0fe2b4efb4af12243b1fe691d9d06ed884905b13888c2f3"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r7 = dup3(r4, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r11 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r11, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000d4fc0)={0x1934, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x1f, "49974dd4558831"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f00000d5fc0)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x7f, "5cc0422d66dfdc"}) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000300)={0x200f}) 00:06:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="11", 0x1}], 0x1, 0x0, 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) 00:06:57 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 00:06:57 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 418.298045][ T8051] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.537826][ T8051] usb 1-1: Using ep0 maxpacket: 8 [ 418.657678][ T8051] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 418.658471][ T8051] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 418.658698][ T8051] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.908822][ T8051] usb 1-1: string descriptor 0 read error: -22 [ 418.909363][ T8051] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.909713][ T8051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.962215][ T8051] usb 1-1: 0:2 : does not exist [ 419.154720][ T8051] usb 1-1: USB disconnect, device number 22 [ 419.210209][ T8065] veth0_vlan: left promiscuous mode 00:06:59 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$nci(r0, 0x0, 0x0) 00:06:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESOCT=r3], 0x24) 00:07:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) 00:07:00 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000740)) 00:07:01 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = dup(r2) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) 00:07:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') preadv(r0, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/237, 0xed}], 0x1, 0xf35, 0x0) 00:07:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000011c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a240107", @ANYBLOB], 0x0) [ 425.227783][ T8070] usb 1-1: new high-speed USB device number 23 using dummy_hcd 00:07:05 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) [ 425.628000][ T8070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.628721][ T8070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.707928][ T8070] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 425.708630][ T8070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 425.709229][ T8070] usb 1-1: SerialNumber: syz [ 426.021746][ T8070] usb 1-1: skipping empty audio interface (v1) [ 426.089827][ T8070] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 426.115150][ T8070] usb 1-1: USB disconnect, device number 23 00:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x49010) 00:07:07 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) sendfile(r1, r0, &(0x7f0000000980)=0x6, 0x608) 00:07:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002400030000000000000000000000000000000000000000793dab2745aff5c7000000000004000880080005000000000008000100", @ANYRES32=r3], 0x4c}}, 0x0) 00:07:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046207, 0x0) 00:07:08 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 00:07:09 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:09 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 00:07:09 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 00:07:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f331f7d9"], 0xffdd) 00:07:10 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}}, 0x0) 00:07:10 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 00:07:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaaaa8100000086dd609d37e4001001"], 0x0) 00:07:11 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) [ 431.647427][ T30] audit: type=1400 audit(431.580:258): avc: denied { setopt } for pid=8166 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 431.648494][ T30] audit: type=1400 audit(431.580:259): avc: denied { write } for pid=8166 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 00:07:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000007c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)) 00:07:11 executing program 0: r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000002000000c1ff"], 0x0) 00:07:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 00:07:12 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='auxv\x00') 00:07:12 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:12 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:13 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 00:07:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000010101040000000013000000020000002c00028006000340000000000c000280050300000000000014000180080001"], 0x40}}, 0x0) [ 433.858998][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:13 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) 00:07:14 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 00:07:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004508, 0x0) 00:07:15 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) 00:07:15 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 00:07:15 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:15 executing program 0: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000002440)='./bus\x00', &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f00000024c0)={{}, {0x1, 0x3}, [{0x2, 0x1}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6}, {0x2, 0x5}, {}], {0x4, 0x6}, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x2}}, 0x6c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 00:07:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004508, 0x0) 00:07:15 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 00:07:16 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc014) [ 436.601836][ T30] audit: type=1400 audit(436.550:260): avc: denied { create } for pid=8214 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 00:07:16 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'pimreg\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 436.630782][ T30] audit: type=1400 audit(436.580:261): avc: denied { write } for pid=8214 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 00:07:16 executing program 0: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 00:07:16 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:17 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:17 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:07:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 00:07:17 executing program 1: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 00:07:17 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:07:17 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:18 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 00:07:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2}) 00:07:18 executing program 0: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 00:07:18 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 438.837966][ T8022] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 439.218039][ T8022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.218725][ T8022] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.219412][ T8022] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.219866][ T8022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.224333][ T8022] usb 2-1: config 0 descriptor?? 00:07:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004508, 0x0) 00:07:19 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 439.731114][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.731914][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.732366][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.732804][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.733553][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.734191][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.734586][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.734861][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.735541][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.736224][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.736528][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.747711][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.748370][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.748659][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.748959][ T8022] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 439.751025][ T8022] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving 00:07:19 executing program 0: ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 439.788048][ T8022] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 00:07:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 00:07:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x4020940d, &(0x7f0000000000)=""/201) 00:07:20 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x80004508, 0x0) [ 440.600032][ T8022] usb 2-1: USB disconnect, device number 8 00:07:20 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @local}, 0x4) 00:07:21 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:21 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207a0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) 00:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c56020a7436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) [ 441.924915][ T30] audit: type=1400 audit(441.870:262): avc: denied { nlmsg_read } for pid=8283 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 00:07:21 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 00:07:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:22 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004508, 0x0) 00:07:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) 00:07:22 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x5450) 00:07:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:22 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 00:07:22 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011bfec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0xd, "d61cdb9fdf750b34fc47b3bce7"}, 0x0, 0x0, 0x0, 0x0}) 00:07:23 executing program 1: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x5450) [ 443.627699][ T8022] usb 1-1: new high-speed USB device number 24 using dummy_hcd 00:07:23 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, 0x0, 0x0) 00:07:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) [ 444.078131][ T8022] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.bf [ 444.078719][ T8022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.097973][ T8022] usb 1-1: config 0 descriptor?? [ 444.150271][ T8022] cp210x 1-1:0.0: cp210x converter detected 00:07:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) [ 444.668112][ T8022] usb 1-1: cp210x converter now attached to ttyUSB0 00:07:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0xd1c}]}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{}]}) [ 444.869360][ T7] usb 1-1: USB disconnect, device number 24 [ 444.875700][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.898888][ T7] cp210x 1-1:0.0: device disconnected 00:07:25 executing program 1: r0 = syz_io_uring_setup(0x6ee9, 0x0, &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) [ 445.733755][ T1060] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.818734][ T1060] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.893248][ T1060] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.971053][ T1060] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.363254][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.366261][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.394585][ T1060] bond0 (unregistering): Released all slaves [ 446.533780][ T1060] hsr_slave_0: left promiscuous mode [ 446.540477][ T1060] hsr_slave_1: left promiscuous mode 00:07:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRESDEC=0x0], 0x0) syz_usb_ep_write(r0, 0x81, 0x6b, &(0x7f0000000040)="97c016d72e1a70e9666fa444580d3ce4c7c2d0da738f9e44054442775d8e584d641a106bfb266137d0f780d5110f56d81345d0c840fc7d8468eba6bddb450dddec0f981b4f77cc6033008f01e623f37002ffea8ee342058f3af11bd86923b6bfa12ef75d42f1d2fca29a53") syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000280)={0x0, 0x22, 0x10, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "00ce6a9e"}, @local=@item_4={0x3, 0x2, 0x0, "648eda9a"}, @main=@item_4={0x3, 0x0, 0xb, "26d12a6e"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xd17}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x20, 0x10, 0x73, "f1afcbe583517557c09642523394a4d74aa7e331380214b6be76103f05582e9d1905728c70b56349fe59ae765242e366ba0822e02f20e1cb6a4c9e8d9160b66d6bf344440bbd472ceaa587a3d163970230980c0437ecd2acf81bcee3e74ee658dbb9f3757e9800388984074b4379ace6e99094"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x1, 0xf5, "7f04a97b0260bec4601ce6e374635a0478342cecc838c2f252aa13c0bfe8ca62c7ba2cea47588f087272cbab6df7cb0f6ff107d28572922759bec1d1d768d3228aa176942b08cab89c7ab19b8009e4b88a4e0e618fce3fb3cdbea3d0154391b46345a0e0ff82662b95a49a3a30615bd91d4a75b4f63df11e0c3224334d0a868ee1ed634fff068135657e661428051d104ff5b9dc387b10320d1a87c222272a78b3d7c443bb5ff5f08a68d20db7ee16d8d7840e32f12c76aaf5f9ed2fcb26045eb3d7e5e6d63d8935edec004f555f3cd5a638e857b498561b7b6676f26294fc9320afd5a31d5f69388a148ccf0dd9324ccfe8a00536"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x7}}) [ 446.563335][ T1060] veth1_macvtap: left promiscuous mode [ 446.563827][ T1060] veth0_macvtap: left promiscuous mode [ 446.564232][ T1060] veth1_vlan: left promiscuous mode [ 447.349937][ T47] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 447.797991][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 447.798983][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 447.803254][ T47] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 447.829991][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.851594][ T47] usb 1-1: config 0 descriptor?? [ 449.802384][ T47] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 449.821694][ T47] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input17 [ 449.919809][ T47] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 450.321954][ T8070] usb 1-1: USB disconnect, device number 25 [ 450.481066][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.485273][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.811667][ T8343] hsr_slave_0: entered promiscuous mode [ 451.814940][ T8343] hsr_slave_1: entered promiscuous mode 00:07:31 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@private0}}]}, 0x154}}, 0x0) [ 452.191249][ T30] audit: type=1400 audit(452.130:263): avc: denied { write } for pid=8666 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 452.192908][ T30] audit: type=1400 audit(452.130:264): avc: denied { nlmsg_write } for pid=8666 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 452.587913][ T8343] netdevsim netdevsim1 netdevsim0: renamed from eth0 00:07:32 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), 0x0, &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) [ 452.618721][ T8343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.626551][ T8343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.633568][ T8343] netdevsim netdevsim1 netdevsim3: renamed from eth3 00:07:32 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:07:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) syz_io_uring_setup(0x46bb, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x100f7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0xc, 0x2004, @fd, 0x80000000, 0x4, 0x3}) [ 453.436845][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 00:07:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000680)) 00:07:33 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), 0x0, &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:34 executing program 0: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x4, 0x0, 0x0) 00:07:34 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/loop0', 0x0, 0x10) 00:07:34 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000001240)='./file0/file0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @b}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x18) mknodat(r3, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r3, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) 00:07:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x24, 0x21, 0x4ee4e6a52ff56541}, 0x24}}, 0x0) 00:07:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000400), 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a80)="63f8668c5e7325313a9658d04cecd1f40db89636f0891f909e2410ee2fba446392a3290c932ca4824b2cdc9fa999932aa42a1e1168e8d65ebdce4c809a7e40aba0746a98afa378a1d2d786cf3adee96a4defa6b30c1f4f3784abfebd447010d62817bb6db110152ab9c66cf2e6fc8173d66a9642950d76f7c8d31089e69d49c53ea5c6e035608ad9bf7eb01b3a59e5b02f4f75f4cea798411d62c29b5461a3abcc680fb81a6d7d4b08b466ff74861acd7e75d15987695653cd8417d7acaf47c84cf4912e3977961d047b", 0xca}, {&(0x7f0000001b80)="729b6bcbf02009950df68b4138fa536827660a8a982cae258ab51c570dfd0b", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d00)="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", 0x198}], 0x1}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000030c0)="de", 0x1}], 0x1}}], 0x3, 0x0) 00:07:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a80)='c', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1}}], 0x1, 0x10002, 0x0) 00:07:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x4b47, 0x0) 00:07:35 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:36 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000020c0)={0x18}, 0x18) 00:07:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r3, &(0x7f0000000140)='./file0\x00') fspick(r3, &(0x7f00000000c0)='./file0\x00', 0x0) [ 457.385703][ T30] audit: type=1400 audit(457.330:265): avc: denied { mount } for pid=8823 comm="syz-executor.0" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 00:07:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) [ 458.376025][ T8343] veth0_vlan: entered promiscuous mode [ 458.388559][ T7570] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 458.481653][ T8343] veth1_vlan: entered promiscuous mode [ 458.576619][ T8343] veth0_macvtap: entered promiscuous mode [ 458.623678][ T8343] veth1_macvtap: entered promiscuous mode [ 458.638079][ T7570] usb 1-1: Using ep0 maxpacket: 32 [ 458.768059][ T7570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 458.768744][ T7570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 458.769399][ T7570] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 458.769775][ T7570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.784407][ T7570] usb 1-1: config 0 descriptor?? [ 458.789445][ T8343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.790155][ T8343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.790542][ T8343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.790879][ T8343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.809060][ T8838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 458.840820][ T7570] hub 1-1:0.0: USB hub found 00:07:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x80004508, 0x0) [ 459.079807][ T7570] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) 00:07:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 00:07:39 executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) [ 459.417713][ T7570] usbhid 1-1:0.0: can't add hid device: -71 [ 459.418209][ T7570] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 459.448627][ T7570] usb 1-1: USB disconnect, device number 26 00:07:39 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x80004508, 0x0) 00:07:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}, 0x0) 00:07:40 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:40 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:40 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80) 00:07:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) r3 = dup2(r2, r2) close(r3) 00:07:41 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:41 executing program 0: r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf9, 0x3a, 0xa3, 0x20, 0xb05, 0x17d3, 0x1012, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x5}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) 00:07:41 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000016c0)={r0, 0x0, 0x0}, 0x20) 00:07:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3211e2853579a66e749"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) [ 462.248200][ T7976] usb 1-1: new high-speed USB device number 27 using dummy_hcd 00:07:42 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) [ 462.519958][ T7976] usb 1-1: Using ep0 maxpacket: 32 00:07:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x4004b2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/bus\x00') [ 462.717723][ T7976] usb 1-1: config 0 has no interfaces? [ 462.727907][ T30] audit: type=1400 audit(462.680:266): avc: denied { remount } for pid=8896 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 00:07:42 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4020940d, &(0x7f00000009c0)={0x0, 0x0}) [ 462.919911][ T7976] usb 1-1: New USB device found, idVendor=0b05, idProduct=17d3, bcdDevice=10.12 [ 462.920570][ T7976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.923558][ T7976] usb 1-1: Product: syz [ 462.923795][ T7976] usb 1-1: Manufacturer: syz [ 462.924014][ T7976] usb 1-1: SerialNumber: syz [ 462.930546][ T7976] usb 1-1: config 0 descriptor?? 00:07:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) [ 463.549200][ T7976] usb 1-1: USB disconnect, device number 27 00:07:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 00:07:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 00:07:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026b0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00001808241c010006ff0307240a05040c030905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0xfff}}, &(0x7f0000000480)={0x20, 0x85, 0x4}, 0x0, &(0x7f0000000500)={0x20, 0x87, 0x2}, 0x0}) 00:07:45 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0006000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00', r0}, 0x10) getxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) [ 465.427973][ T92] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 465.799246][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.800381][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 465.800729][ T92] usb 2-1: config 1 has no interface number 0 [ 465.801418][ T92] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.802225][ T92] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping 00:07:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) [ 466.008222][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.009190][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.009816][ T92] usb 2-1: Product: syz [ 466.010067][ T92] usb 2-1: Manufacturer: syz [ 466.010376][ T92] usb 2-1: SerialNumber: syz 00:07:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000180)=0x8) 00:07:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) 00:07:46 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) [ 466.959280][ T92] cdc_ncm 2-1:1.1: SET_CRC_MODE failed [ 466.979777][ T92] cdc_ncm 2-1:1.1: SET_NTB_FORMAT failed [ 467.017998][ T92] cdc_ncm 2-1:1.1: bind() failure [ 467.028998][ T92] usb 2-1: USB disconnect, device number 9 00:07:47 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0xaf01, 0x0) 00:07:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 00:07:47 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, "59fd52a08e30514a7fa0fea74b9145"}}, 0x127) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000005c0), 0x4) [ 468.149715][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x5 [ 468.155662][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 468.167978][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x5 [ 468.174788][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 00:07:48 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 00:07:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0xd1c}]}) 00:07:48 executing program 1: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, 0xc) 00:07:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) 00:07:49 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 00:07:49 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0xffffffffffffffea) 00:07:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 00:07:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:50 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, "59fd52a08e30514a7fa0fea74b9145"}}, 0x127) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000005c0), 0x4) 00:07:51 executing program 1: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640)=ANY=[], 0x1, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=") chdir(&(0x7f0000000a40)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 471.438857][ T8069] hid-generic 0000:0000:0000.0005: unknown main item tag 0x5 [ 471.439921][ T8069] hid-generic 0000:0000:0000.0005: unknown main item tag 0x3 [ 471.440775][ T8069] hid-generic 0000:0000:0000.0005: unknown main item tag 0x5 [ 471.470779][ T8069] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 00:07:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:51 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) [ 471.863857][ T8992] loop1: detected capacity change from 0 to 2048 [ 471.968512][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.210511][ T30] audit: type=1400 audit(472.160:267): avc: denied { read } for pid=8986 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 472.212492][ T30] audit: type=1400 audit(472.160:268): avc: denied { open } for pid=8986 comm="syz-executor.1" path="/syzkaller-testdir3295404521/syzkaller.Z0aNrb/25/bus/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 472.216498][ T8992] fs-verity: sha512 using implementation "sha512-neon" [ 472.227857][ T30] audit: type=1400 audit(472.160:269): avc: denied { ioctl } for pid=8986 comm="syz-executor.1" path="/syzkaller-testdir3295404521/syzkaller.Z0aNrb/25/bus/file0/file0" dev="loop1" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 472.230028][ T30] audit: type=1400 audit(472.160:270): avc: denied { write } for pid=8986 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 00:07:52 executing program 1: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, 0xc) [ 472.319320][ T8343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:07:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x20000000) 00:07:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, &(0x7f0000000180)) [ 472.939010][ T9007] binder: 9006:9007 ioctl c018620c 20000180 returned -1 00:07:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$unix(r1, &(0x7f0000000000), 0x0) 00:07:53 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 00:07:53 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x4020940d, &(0x7f0000000000)) 00:07:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, &(0x7f0000000180)) [ 474.190052][ T9016] binder: 9015:9016 ioctl c018620c 20000180 returned -1 00:07:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0xaf01, 0x0) 00:07:54 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 00:07:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) bind$packet(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, &(0x7f0000000180)) 00:07:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x5, {[0x0, 0x0, 0xfffe]}}]}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 475.712154][ T9028] binder: 9025:9028 ioctl c018620c 20000180 returned -1 00:07:55 executing program 0: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, 0xc) 00:07:55 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 00:07:56 executing program 1: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)) 00:07:56 executing program 1: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) 00:07:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1ec82d4e}) 00:07:56 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:07:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) bind$packet(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:58 executing program 0: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)) 00:07:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0xaf01, 0x0) 00:07:58 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x4020940d, &(0x7f0000000000)) 00:07:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) 00:07:59 executing program 0: syz_usb_connect(0x0, 0x40, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9a, 0x25, 0x51, 0x40, 0x1b3d, 0x9305, 0x1a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x18, 0x0, 0x0, 0xc7, 0x5a, 0xcd, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}]}]}}]}}]}}, 0x0) [ 479.448214][ T92] usb 1-1: new high-speed USB device number 28 using dummy_hcd 00:07:59 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 00:07:59 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)) [ 479.808178][ T92] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 479.809081][ T92] usb 1-1: config 0 has no interface number 0 00:07:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, &(0x7f00000020c0)={0x18}, 0x18) [ 479.968240][ T92] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice= 1.a3 [ 479.969149][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.970054][ T92] usb 1-1: Product: syz [ 479.970754][ T92] usb 1-1: Manufacturer: syz [ 479.971004][ T92] usb 1-1: SerialNumber: syz [ 479.980058][ T92] usb 1-1: config 0 descriptor?? 00:07:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000fc00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000ec0)=0x3) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 480.029882][ T92] ftdi_sio 1-1:0.24: FTDI USB Serial Device converter detected [ 480.031892][ T92] usb 1-1: Detected SIO [ 480.050245][ T92] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 480.246054][ T92] usb 1-1: USB disconnect, device number 28 [ 480.266137][ T92] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 480.272729][ T92] ftdi_sio 1-1:0.24: device disconnected 00:08:01 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 00:08:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, &(0x7f0000000180)) 00:08:02 executing program 0: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:02 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)) 00:08:02 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 00:08:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0xa4, {0xa4, 0x0, "c31b40f7b0ff116619fa2e3eeb668551a4049cb649af2ddd5f578a9aa1bdc578fecf79a62a430485ddc01237ff51cb6fa9d520c175d3775b2694b7317e4c3913a90c8c84986d49dc549d68de47ed787343042292e85ff57cf417414c27f21d7e7ed953633ad1bcb8a48bc44ef361b917c9b634e294ea20b3c8f8538dc26ec6f886668d82cbb3c876c14f8ab2c7d3c2e543d47a9c46fee2776e18de58d953d8cfd851"}}, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) [ 483.197767][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 483.437906][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 483.558264][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.559125][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.559986][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 483.560662][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.565675][ T45] usb 2-1: config 0 descriptor?? [ 484.045345][ T45] wacom 0003:056A:0304.0006: unknown main item tag 0x0 [ 484.046089][ T45] wacom 0003:056A:0304.0006: collection stack underflow [ 484.046976][ T45] wacom 0003:056A:0304.0006: item 0 4 0 12 parsing failed [ 484.055290][ T45] wacom 0003:056A:0304.0006: parse failed [ 484.056112][ T45] wacom 0003:056A:0304.0006: probe with driver wacom failed with error -22 [ 484.241752][ T45] usb 2-1: USB disconnect, device number 10 00:08:04 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000020c0)={0x18}, 0x18) 00:08:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, 0x0) [ 485.953993][ T9135] binder: 9134:9135 ioctl c018620c 0 returned -14 00:08:05 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) read$dsp(r0, 0x0, 0x0) 00:08:06 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) 00:08:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bond\x00'}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) 00:08:06 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, 0x0) [ 486.228996][ T9143] binder: 9142:9143 ioctl c018620c 0 returned -14 00:08:06 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:06 executing program 1: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 00:08:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) 00:08:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc018620c, 0x0) 00:08:07 executing program 1: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x0, 0x0}) [ 487.470990][ T9153] binder: 9152:9153 ioctl c018620c 0 returned -14 00:08:07 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 00:08:07 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:07 executing program 0: r0 = syz_io_uring_setup(0x6ee9, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000da1000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001680), 0x20a3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 00:08:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000001b80)=ANY=[@ANYBLOB="73623d30783030303030304f3030303030303003312c6a6f75726e616c46696f7072696f3d3078303030303030303030423030303030362c6d696e5f62617463685f74696d653d3078303030303030303030303030393435332c6d61785f64105e8769725f73697a655f6b623d301d1950943030303030303d0000000000000000"], 0xfd, 0x46d, &(0x7f0000000700)="$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") [ 487.910315][ T9168] loop0: detected capacity change from 0 to 512 [ 487.914040][ T9168] ext3: Bad value for 'sb' 00:08:07 executing program 0: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x14}, 0x14}}, 0x10) 00:08:08 executing program 0: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$FUSE_WRITE(r0, 0x0, 0x0) 00:08:10 executing program 1: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:10 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 00:08:10 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x40001) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5514, 0x0) 00:08:10 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:10 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 00:08:10 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0xa058) 00:08:10 executing program 1: r0 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:10 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:10 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 00:08:10 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:11 executing program 1: r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:11 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 00:08:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:11 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) read$nci(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:11 executing program 0: setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:11 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0x5452, &(0x7f0000000100)={0x0, 0x0}) 00:08:11 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 00:08:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8200d6000a000200aa"], 0x28}}, 0x0) 00:08:11 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) read$nci(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) [ 491.910043][ T9249] bridge_slave_0: entered promiscuous mode 00:08:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:11 executing program 1: setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r2) 00:08:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000100)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 492.253853][ T30] audit: type=1400 audit(492.200:271): avc: denied { write } for pid=9253 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 00:08:12 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 00:08:12 executing program 1: r0 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0xfffffdef}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0}}, 0x0) [ 492.512733][ T30] audit: type=1400 audit(492.460:272): avc: denied { write } for pid=9258 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 00:08:12 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) 00:08:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r2) 00:08:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x1) 00:08:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 00:08:13 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x15, 0x0, 0x2) 00:08:13 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, 0x0) 00:08:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getuid() 00:08:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) 00:08:14 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x80004518, 0x0) 00:08:15 executing program 0: r0 = socket(0x0, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:16 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0x5452, 0x0) 00:08:16 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 00:08:16 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) 00:08:16 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x15, 0x0, 0x2) 00:08:16 executing program 0: r0 = socket(0x0, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 00:08:16 executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00010000,user_id=', @ANYRESDEC=r3], 0x0, 0x0, 0x0) 00:08:17 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 00:08:18 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000010002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setregid(0x0, 0xffffffffffffffff) 00:08:19 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:19 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 00:08:20 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VT_DISALLOCATE(r0, 0x5450) 00:08:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) 00:08:20 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:20 executing program 0: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:20 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VT_DISALLOCATE(r0, 0x5450) 00:08:21 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:21 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:21 executing program 0: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 00:08:22 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x80004518, 0x0) 00:08:22 executing program 0: socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:22 executing program 0: clock_adjtime(0x0, &(0x7f0000002280)={0xfffffffffffffff9}) 00:08:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:08:22 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x80004518, 0x0) 00:08:23 executing program 0: socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x1, 0x70bd27}, 0x14}}, 0x24000000) 00:08:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:23 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x80004518, 0x0) 00:08:23 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VT_DISALLOCATE(r0, 0x5450) 00:08:24 executing program 1: socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0xc) 00:08:24 executing program 1: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5450, 0x0) 00:08:24 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x80004518, 0x0) 00:08:24 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:25 executing program 1: ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x1, 'team_slave_0\x00', {}, 0x9db}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), 0x0) mq_open(&(0x7f0000000340)='team_slave_0\x00', 0x8c0, 0x3, &(0x7f0000000380)={0x4, 0x7fff, 0x9, 0x4}) 00:08:25 executing program 1: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5450, 0x0) 00:08:25 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:26 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 507.337428][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:08:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = dup3(r1, r0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) 00:08:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0x12) signalfd(r0, &(0x7f00000008c0), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000001}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r2, 0xffffffffffffffff, 0x3, 0x0) 00:08:28 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 508.488473][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:08:28 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:30 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f00001ba000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:08:30 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:30 executing program 1: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x101141) write$evdev(r0, &(0x7f0000000000)=[{}], 0xfffffdef) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000380)=""/41) 00:08:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) write$P9_RXATTRCREATE(r2, 0x0, 0x0) 00:08:31 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) 00:08:31 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) 00:08:31 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5450, 0x0) 00:08:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 00:08:31 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(r0, 0x0) 00:08:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 00:08:31 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) 00:08:32 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:32 executing program 0: r0 = semget$private(0x0, 0x2, 0x812) shmctl$IPC_RMID(r0, 0x0) 00:08:32 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(r0, 0x0) 00:08:32 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) 00:08:33 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, 0x0, 0x0, 0x6e0, 0x0, 0x0) 00:08:33 executing program 0: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='-*\x00', 0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x0, 0x0, 0x3ff]}}, {0x0, 0x0, 0x0, 0xa4, @time, {}, {}, @queue={0x0, {0x0, 0x80000001}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8) 00:08:34 executing program 0: r0 = syz_io_uring_setup(0x3017, 0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:34 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc00455d0, 0x0) 00:08:34 executing program 1: pipe(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 00:08:35 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5450, 0x0) 00:08:35 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(r0, 0x0) 00:08:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x401) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}}, {{0x0, 0xea60}}, {}, {}, {{0x77359400}}, {{0x77359400}}, {{0x0, 0x2710}}, {{0x77359400}}], 0xfffffdef) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/35) 00:08:35 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:08:35 executing program 1: fchmod(0xffffffffffffffff, 0x0) 00:08:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x840) 00:08:36 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:08:36 executing program 1: fchmod(0xffffffffffffffff, 0x0) 00:08:36 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:36 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 00:08:36 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:08:36 executing program 1: fchmod(0xffffffffffffffff, 0x0) 00:08:36 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:36 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:08:37 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) 00:08:37 executing program 1: r0 = syz_io_uring_setup(0x3017, 0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) preadv(r0, &(0x7f0000006580)=[{&(0x7f0000006240)=""/151, 0x97}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008680)={0x2020}, 0x2020) 00:08:37 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(r0, 0x9) 00:08:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:37 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 00:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x1f, {0x1, 0x400, 0x401, 0x9, 0x6, 0x6}}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000200)={0x10}) 00:08:38 executing program 0: socket(0x0, 0x5b38653c6bd450ba, 0x0) 00:08:38 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:39 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) 00:08:39 executing program 1: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) syz_clone(0xf0110f1b000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 520.958572][ T9573] cgroup: fork rejected by pids controller in /syz1 00:08:41 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 00:08:41 executing program 0: r0 = socket(0x18, 0x1, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}, 0x0) [ 521.223763][ T30] audit: type=1400 audit(521.162:273): avc: denied { create } for pid=9575 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 00:08:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x19c) faccessat(r0, &(0x7f00000001c0)='./file0\x00', 0x2) 00:08:41 executing program 0: mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) [ 521.625787][ T6444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.729053][ T6444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.793324][ T6444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.879857][ T6444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:08:41 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 522.433331][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.442354][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.501113][ T6444] bond0 (unregistering): Released all slaves [ 522.615424][ T6444] hsr_slave_0: left promiscuous mode [ 522.621099][ T6444] hsr_slave_1: left promiscuous mode [ 522.625004][ T6444] veth1_macvtap: left promiscuous mode [ 522.625280][ T6444] veth0_macvtap: left promiscuous mode [ 522.625485][ T6444] veth1_vlan: left promiscuous mode [ 522.625801][ T6444] veth0_vlan: left promiscuous mode [ 523.181754][ T30] audit: type=1400 audit(523.122:274): avc: denied { mounton } for pid=9602 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 00:08:44 executing program 0: mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) munlock(&(0x7f0000000000/0x4000)=nil, 0x4000) 00:08:44 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:45 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff39) 00:08:45 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 526.586792][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.606147][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.754822][ T9602] hsr_slave_0: entered promiscuous mode [ 527.762776][ T9602] hsr_slave_1: entered promiscuous mode 00:08:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00') 00:08:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 00:08:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) [ 528.531891][ T9602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.550840][ T9602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.559599][ T9602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.570437][ T9602] netdevsim netdevsim1 netdevsim3: renamed from eth3 00:08:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 00:08:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:08:48 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa076b5043943886dd60458c910010000000000000000000000000ffffac1400aa00bb"], 0x0) 00:08:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:49 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), 0x0, &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) [ 529.846177][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.196897][ T9602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:08:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000400)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:08:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:53 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) [ 536.042228][ T9602] veth0_vlan: entered promiscuous mode [ 536.085615][ T9602] veth1_vlan: entered promiscuous mode 00:08:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x2}) [ 536.262805][ T9602] veth0_macvtap: entered promiscuous mode [ 536.283922][ T9602] veth1_macvtap: entered promiscuous mode [ 536.406009][ T9602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.418819][ T9602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.420444][ T9602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.426758][ T9602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.668605][ T30] audit: type=1400 audit(536.602:275): avc: denied { mount } for pid=9602 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 00:08:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) 00:08:56 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 00:08:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:57 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:57 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 00:08:57 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @loopback, @empty, @local={0xac, 0x14, 0x0}}}}}, 0x0) 00:08:57 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:08:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000880)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:08:57 executing program 1: mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) munlock(&(0x7f0000000000/0x1000)=nil, 0x1000) 00:08:58 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), 0x4) 00:08:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000040)={0x2}) 00:08:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, 0x0) 00:08:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5450, 0x0) 00:08:58 executing program 0: keyctl$set_timeout(0xf, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x6, 0x6, 0x0, 0xffffff00, 'syz0\x00'}, 0x6, 0x0, 0x20, 0x0, 0x0, 0x80000001, 'syz0\x00'}) 00:08:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x0) pwrite64(r0, &(0x7f00000013c0)='<', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) sendfile(r1, r1, &(0x7f0000000080), 0xe0000000) lseek(r0, 0x0, 0x0) 00:08:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, 0x0) [ 539.199896][T10108] snd_dummy snd_dummy.0: control 6:0:-256:syz0:0 is already present 00:08:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, 0x0) 00:08:59 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:08:59 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:08:59 executing program 0: r0 = mq_open(&(0x7f0000000140)='&#^\x00', 0x40, 0x0, &(0x7f0000000180)={0x6, 0x5, 0x80000000}) read$char_usb(r0, &(0x7f0000000280)=""/50, 0x32) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5451, 0x0) 00:08:59 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5450, 0x0) 00:09:00 executing program 0: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, 0x0) 00:09:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:09:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') symlinkat(&(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00') renameat(r0, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000040)='./file1\x00') 00:09:00 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$dsp(r0, 0x0, 0x0) 00:09:00 executing program 0: r0 = socket(0x1, 0x4005, 0x0) recvmmsg(r0, &(0x7f0000001280), 0x10, 0x0, 0x0) 00:09:00 executing program 0: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)) 00:09:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:09:01 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:09:01 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "bb661ae278173cfd55d58b32c1fd64f7c39b0dba2e3b8172c926a831116de73e", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"b329f07d316fb4ee17da5b1dcc4fef5f389589c488e954d930a41ef89495859f", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:01 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$dsp(r0, 0x0, 0x0) 00:09:01 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:01 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x101842, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000740)=0x201, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) sendmsg$unix(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 00:09:02 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:09:02 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$RNDCLEARPOOL(r2, 0x5421, &(0x7f0000000040)) 00:09:02 executing program 1: write$dsp(0xffffffffffffffff, 0x0, 0x0) 00:09:02 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x101842, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000740)=0x201, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) sendmsg$unix(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) 00:09:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$RNDCLEARPOOL(r2, 0x5421, &(0x7f0000000040)) 00:09:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:09:02 executing program 1: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:09:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') openat(r0, &(0x7f0000000200)='./file0/file0\x00', 0x84e0, 0x0) 00:09:02 executing program 1: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:09:02 executing program 1: open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') renameat(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0/file0/../file0\x00') 00:09:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$RNDCLEARPOOL(r2, 0x5421, &(0x7f0000000040)) 00:09:02 executing program 1: write$dsp(0xffffffffffffffff, 0x0, 0x0) 00:09:03 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$nci(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:09:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000e300)=[{{&(0x7f0000000340)=@in6={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)="2149c0d0212d951f09c3a934b0a4b744c054abd07f39f303eabaf6aea5c579be09bf22d242f1305a4ff53a2406d98223b967cf859003920cc56e33bb45544dd29501fa439d06f6cbbd9c627b1ce4f26582", 0x51}, {&(0x7f0000000600)="1663dd7409065603639898e8b015d4fe251c2a517f256745a37c6c96c08119c832a1f72070745b58c8c031b03051288ad5d12e6f8f28c3f24a895066ace96abe99c7dfaa6c41bd057dd18625c8370855041ea9d1dc099db7cea3772e0c63dba7d6a0a9c9d21fab9fd6df1bb9efd05943bd818aa9317616832d4175337daa248633e96aff64a3b626487d0c80e5cbcb4b438fe00a6db60bb9a12eb6deae7226646d6bcd49da8307e052ecfb7de760d5b02e7a3fec6cdbfed355a9b25a48555db6045b4c6e6441bbffbe5b6170ea41eb4c738df5619dd0d2fc84b8c715dc718199d374e7848867c985085de1c8149fcb1e683329e2fe2f0fd9af", 0xf9}, {&(0x7f00000004c0)="21533aab68b7480b5d8615c48a251906515eb234ab7762416e8eb3e6f3edcb1ce3308a00a66529f28ff37421a4014a1d592c9b31c1b04aa310a2dceb829a446fe5c6213b18d2f955b3ac108ca85e31534b82cb0be8ebbd8f542164d02132c2062de0096a872a0d82e4ce7c41f6cdd7040b4c", 0x72}, {&(0x7f0000000700)="5bf76b8492608be9cd085f16c6d129ed625edcb9193ccafa3da71f8aae8f2f5c57d3dc8d82c876e1085b940d3ca8fa049366874d24db10cd73c88029c657f7b3f7ce20dd6fdeb30ea9074917c3629009416cf8201a9de47dc3e19edc87ed96893843370cd913816f3374a75aac3bd0f47b30ad1807ccecfdb580c8e452e0993935e0e3bb4bc0ab44584dcc7cd8c7c12655e14e4f", 0x94}, {&(0x7f00000007c0)="3d087ca8bce2245bd8fed751cf06bbc5694169da5bfd2f316d9f7a4cfc653d59ac6cabd4dc0602ccf2d6bf79e7c9187afb2624048428b22c3554bc1011445d213fd06dda70e009be420e9eb7f215282c719bc4b47a4b7be16ec660c795aa25c868b91b721b01de2e86b17b8ca74b131fbd6264988625155c578c7c68e0e0eb284b1a7d39b03f51a7fb1cd2ed057c0c87544aa35309f46d28f73b02401d4b884648682d24cc1692ac19ad644290", 0xad}, {&(0x7f0000004280)="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", 0xd7c}], 0x6}}], 0x1, 0x4800) 00:09:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000180)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@nolazytime}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@usrquota}]}, 0x12, 0x4bd, &(0x7f0000000540)="$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") 00:09:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) [ 543.609415][T10194] loop0: detected capacity change from 0 to 512 [ 543.624803][T10196] serio: Serial port pts0 [ 543.642594][T10194] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent 00:09:03 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:09:03 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$dsp(r0, 0x0, 0x0) 00:09:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:09:04 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 00:09:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:04 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$dsp(r0, 0x0, 0x0) 00:09:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:04 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 00:09:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) readv(r0, &(0x7f0000003980)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1) r1 = getuid() lchown(&(0x7f0000000280)='./file0\x00', r1, 0x0) 00:09:04 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 00:09:05 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:09:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect(r0, &(0x7f0000000200)=@in6={0x18, 0x3}, 0xc) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0xa) 00:09:05 executing program 1: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 00:09:05 executing program 0: r0 = syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x2) 00:09:05 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:09:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:05 executing program 1: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 00:09:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 00:09:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:05 executing program 1: syz_io_uring_setup(0x3017, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$nci(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x15, 0x0, 0x2) 00:09:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 00:09:06 executing program 0: r0 = socket(0x0, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 00:09:06 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:07 executing program 0: r0 = socket(0x1d, 0x0, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) 00:09:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x14) 00:09:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, 0x0) [ 549.032801][T10299] serio: Serial port pts0 00:09:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) pipe2(&(0x7f00000000c0), 0x0) 00:09:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:09 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000000000008d11828500000000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) [ 550.107937][ T6869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 550.347766][ T6869] usb 2-1: Using ep0 maxpacket: 8 [ 550.468129][ T6869] usb 2-1: config 0 has no interfaces? [ 550.468583][ T6869] usb 2-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 550.478547][ T6869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.485561][ T6869] usb 2-1: config 0 descriptor?? 00:09:14 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x3}, 0xc) 00:09:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, 0x0) 00:09:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454da, 0x0) 00:09:15 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:15 executing program 0: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:09:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:17 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:17 executing program 0: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:19 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:19 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0x18, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000001500)=[{0x10}, {0x10}], 0x20}, 0x0) 00:09:20 executing program 0: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:20 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:21 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1962010a2d11afd1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="b4", 0x1}], 0x1, 0x0, 0x0) r1 = dup(r0) pwritev(r1, &(0x7f0000001480)=[{&(0x7f0000000180)="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", 0x7f8}], 0x1, 0x9, 0x0) ftruncate(r0, 0x10000) 00:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:22 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 562.720726][ T6869] usb 2-1: USB disconnect, device number 11 00:09:22 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') fchownat(r0, &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0x0, 0x0) renameat(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0/file0/../file0\x00') 00:09:22 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 00:09:23 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:23 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40c001, 0x0) 00:09:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)) 00:09:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:23 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:23 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$setownex(r0, 0x7, &(0x7f0000000080)) 00:09:23 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) 00:09:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:23 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:23 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 00:09:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:23 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454da, 0x0) 00:09:24 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:24 executing program 0: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454da, 0x0) 00:09:24 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 00:09:24 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, 0x0) 00:09:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) fcntl$setown(r1, 0x6, r2) fcntl$setown(r0, 0x6, r2) fcntl$setown(r0, 0x6, 0x0) 00:09:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454da, 0x0) 00:09:24 executing program 0: r0 = socket(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/103, 0x5b}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000012c0)=""/94, 0x8000000000000001}, {&(0x7f0000001240)=""/34, 0x22}], 0x4, &(0x7f00000013c0)=""/255, 0xfb}, 0x0) 00:09:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES32], 0x2, 0x42e, &(0x7f0000000d80)="$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") [ 565.195233][T10445] loop1: detected capacity change from 0 to 512 [ 565.206727][T10445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 565.240844][T10445] EXT4-fs (loop1): 1 truncate cleaned up [ 565.242182][T10445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 00:09:25 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 565.311995][ T9602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:09:25 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:25 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setuid(0x0) 00:09:25 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:25 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000) 00:09:26 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:27 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:27 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00') renameat(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0/file0/../file0\x00') 00:09:28 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:28 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x4, 0x0, "1388f1abb0b27e6fbe678cfb368fbe4567cfdf1d65f42aa1b2f515d9c9e8ea59ce73ff7b7133c281b519ac7fa539ccc45edca903cd74fc007417762fcb052eabbabd1e873de30ab0f530788f9d4e5c00"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3}}}}}}}, 0x0) 00:09:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 568.852298][T10487] MD5 Hash not found for [fe80::aa].0->[fe80::aa].20002 [FS]L3 index 0 00:09:28 executing program 0: open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10212, 0x0) 00:09:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:29 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 00:09:29 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000000c0)=@in6={0x18, 0x3}, 0xc, 0x0, 0x18}, 0x0) 00:09:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:29 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 00:09:30 executing program 1: shmget(0x1, 0x3000, 0x50, &(0x7f0000000000/0x3000)=nil) 00:09:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 00:09:30 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:30 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:30 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa076b5043943886dd60458c9100100000000000000000000000000000000900aafe80"], 0x0) 00:09:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 00:09:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 00:09:31 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:31 executing program 1: accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0xffffffffffffffff) 00:09:31 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 00:09:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 00:09:32 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:32 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:32 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pci_hotplug', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) 00:09:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xfef4}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)=0xd8) 00:09:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:34 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:34 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000), 0xc) 00:09:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:09:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:35 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 00:09:36 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:36 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:37 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:37 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:37 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:38 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:39 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:39 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:39 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0xb, 0x0) 00:09:39 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:40 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:40 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:40 executing program 0: socketpair(0x1, 0x2, 0x1, &(0x7f00000004c0)) 00:09:40 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:40 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:40 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:40 executing program 0: getgroups(0xb9ad317bb2c28109, &(0x7f0000000180)=[0x0, 0x0]) 00:09:40 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:41 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:41 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:41 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa076b5043943886dd60458c91001000000000000000b0286ed800ffdcac1400aafe"], 0x0) 00:09:41 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:41 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:41 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:41 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 00:09:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:42 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:42 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x0) 00:09:43 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:45 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:45 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:45 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:45 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:46 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:46 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:46 executing program 0: mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) 00:09:47 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:47 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:47 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303080026006000000002000020d3"]) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0xa000200e}) 00:09:47 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:48 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:48 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) 00:09:49 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, 0x0) 00:09:49 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:49 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @broadcast, @val, {@ipv6}}, 0x0) 00:09:50 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, 0x0) 00:09:50 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:50 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:50 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, 0x0) 00:09:50 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:51 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:52 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:52 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:52 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:52 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:52 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:53 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1205531, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:09:53 executing program 1: ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:53 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:53 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:09:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:54 executing program 1: ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:54 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:54 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:54 executing program 1: ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:54 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, [{0x1000000}, {0x0, 0x600000000000000}]}, 0x48) 00:09:54 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:54 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x0) 00:09:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 00:09:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:55 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x0) 00:09:55 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:55 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:55 executing program 0: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:55 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40044102, 0x0) 00:09:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x0) 00:09:55 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:56 executing program 0: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:56 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:56 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) 00:09:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) 00:09:56 executing program 0: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:56 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:56 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 00:09:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, 0x0, 0x0) 00:09:56 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:56 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40044102, 0x0) 00:09:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x14}, 0x14}}, 0x4004) 00:09:57 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, 0x0, 0x0) 00:09:57 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:57 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @val, {@ipv6}}, 0x0) 00:09:57 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x0) 00:09:57 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, 0x0, 0x0) 00:09:57 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044145, 0x0) 00:09:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5451, 0x0) 00:09:57 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @broadcast, @val, {@ipv4}}, 0x0) 00:09:57 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000040)={@random="517c88c4b5c5", @remote, @val, {@generic={0x8848}}}, 0x0) 00:09:57 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:09:57 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5451, 0x0) 00:09:58 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:09:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) lchown(0x0, 0x0, 0x0) 00:09:58 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5451, 0x0) 00:09:58 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:09:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd3, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 00:09:59 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044145, 0x0) 00:09:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5451, 0x0) 00:09:59 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:09:59 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040), 0x4) 00:09:59 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xc2) 00:10:00 executing program 1: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5451, 0x0) 00:10:00 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:10:00 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:00 executing program 1: r0 = socket(0x2, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/40, 0x28, 0x0, 0x0, 0x0) 00:10:02 executing program 0: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5451, 0x0) 00:10:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x4000004) 00:10:03 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80111500, &(0x7f0000000d80)) 00:10:03 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:03 executing program 1: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5451, 0x0) 00:10:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:10:04 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) [ 605.173820][ T2847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.255804][ T2847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.320549][ T2847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.383908][ T2847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.748247][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.765098][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.782316][ T2847] bond0 (unregistering): Released all slaves 00:10:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x5451, 0x0) [ 605.960080][ T2847] hsr_slave_0: left promiscuous mode 00:10:05 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r3, 0x1}, 0x14}}, 0x0) [ 605.982227][ T2847] hsr_slave_1: left promiscuous mode [ 605.998333][ T2847] veth1_macvtap: left promiscuous mode [ 605.998735][ T2847] veth0_macvtap: left promiscuous mode [ 605.999141][ T2847] veth1_vlan: left promiscuous mode [ 605.999475][ T2847] veth0_vlan: left promiscuous mode [ 607.452768][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.460464][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.245006][T10859] hsr_slave_0: entered promiscuous mode [ 608.250062][T10859] hsr_slave_1: entered promiscuous mode 00:10:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 00:10:08 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 608.862752][T10859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 608.882144][T10859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 608.893752][T10859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 608.910490][T10859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 609.618569][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 00:10:10 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:10:11 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, 0x0) 00:10:11 executing program 0: sigaltstack(&(0x7f0000ffc000), 0x0) madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x5) 00:10:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x3}) 00:10:11 executing program 0: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x100}, {0x0, 0x20}, {}], 0x3) [ 612.424467][T10859] veth0_vlan: entered promiscuous mode [ 612.456724][T10859] veth1_vlan: entered promiscuous mode [ 612.532538][T10859] veth0_macvtap: entered promiscuous mode [ 612.543302][T10859] veth1_macvtap: entered promiscuous mode [ 612.596031][T10859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.596694][T10859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.597041][T10859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.599884][T10859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:10:12 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80111500, &(0x7f0000000d80)) 00:10:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0}}, 0x0) [ 612.863857][ T30] audit: type=1400 audit(612.802:276): avc: denied { write } for pid=11284 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 00:10:12 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5451, 0x0) 00:10:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:10:12 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80111500, &(0x7f0000000d80)) 00:10:13 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:10:13 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x5451, 0x0) 00:10:13 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000000)) 00:10:13 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:10:13 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:10:13 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 00:10:13 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000000)) 00:10:13 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, &(0x7f0000000d80)) 00:10:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 00:10:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) 00:10:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000000)) 00:10:14 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 00:10:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x10) 00:10:14 executing program 1: execve(0x0, &(0x7f0000000140), &(0x7f0000000280)=[&(0x7f0000000180)='\x00']) 00:10:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000000)) 00:10:14 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000740)) 00:10:14 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x40, &(0x7f0000001480)=""/206, &(0x7f0000000080)=0xce) 00:10:14 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x24a81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='7', 0x1}], 0x1) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 00:10:15 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:10:15 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80111500, &(0x7f0000000d80)) 00:10:15 executing program 1: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 00:10:15 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) 00:10:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x102, &(0x7f0000000100), &(0x7f0000000200)=0x8) 00:10:15 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80111500, &(0x7f0000000d80)) 00:10:15 executing program 1: ioctl$sock_netdev_private(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 00:10:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x65, 0x2}, 0x10) 00:10:15 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40049409, 0x0) 00:10:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x88) 00:10:15 executing program 1: ioctl$sock_netdev_private(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 00:10:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r2, 0x0) 00:10:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40049409, 0x0) 00:10:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:10:16 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) 00:10:16 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x300000000000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "5ab9fa4be2d5891a05b3a7154bc42b6b8138ee2640c48584da8b8b7a5795cb3b"}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0189436, 0x0) 00:10:16 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40049409, 0x0) 00:10:16 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000f00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 00:10:17 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 00:10:17 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, 0x0) 00:10:17 executing program 0: socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(0xffffffffffffffff, 0x2, &(0x7f0000000000)) 00:10:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x100}, 0x98) 00:10:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:10:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r2, 0x0) 00:10:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 00:10:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x40049409, 0x0) 00:10:19 executing program 1: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:19 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/67, 0x43}, 0x0) 00:10:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) 00:10:19 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80111500, 0x0) 00:10:19 executing program 1: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:19 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 00:10:19 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000000)="9a", 0x1, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 00:10:19 executing program 1: mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/4096) 00:10:20 executing program 1: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:20 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x80, &(0x7f0000000000), 0x4) 00:10:20 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 00:10:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setns(0xffffffffffffffff, 0x0) 00:10:21 executing program 0: request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) 00:10:21 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40049409, 0x0) 00:10:21 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000000)) 00:10:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f00000000c0)) 00:10:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setns(0xffffffffffffffff, 0x0) 00:10:21 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40049409, 0x0) 00:10:22 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 00:10:22 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000000)) 00:10:22 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:10:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, &(0x7f00000000c0)) 00:10:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setns(0xffffffffffffffff, 0x0) 00:10:22 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:10:22 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, 0x0) 00:10:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, 0x0) 00:10:22 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, &(0x7f00000000c0)) 00:10:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_RESETEP(r1, 0x5521, 0x0) 00:10:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 00:10:23 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, 0x0) 00:10:23 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:10:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, 0x0) 00:10:23 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, &(0x7f00000000c0)) 00:10:23 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x2, 0x0) 00:10:23 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:23 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 00:10:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, 0x0) 00:10:24 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, &(0x7f00000000c0)) 00:10:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x15) 00:10:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 00:10:24 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1262, 0x0) 00:10:24 executing program 0: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)) 00:10:25 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x40049409, 0x0) 00:10:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:25 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:25 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1262, 0x0) 00:10:25 executing program 0: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)) 00:10:25 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x40044102, 0x0) 00:10:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:26 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:27 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, &(0x7f00000000c0)) 00:10:27 executing program 0: r0 = io_uring_setup(0x11ff, &(0x7f0000002380)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000002300), 0x2) 00:10:27 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x40044102, 0x0) 00:10:27 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:28 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, 0x0) 00:10:28 executing program 0: ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x40044102, 0x0) 00:10:28 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:10:29 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:30 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:10:30 executing program 1: cachestat(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:30 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)) 00:10:30 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:30 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x0) 00:10:30 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1262, 0x0) 00:10:31 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@dstaddrv4={0x10}, @sndinfo={0x1c}], 0x2c}, 0x0) 00:10:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect(r2, &(0x7f0000000040)=@un=@abs={0x8}, 0x8) 00:10:31 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)) 00:10:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x0) 00:10:31 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x40044102, 0x0) 00:10:32 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, 0x0) 00:10:32 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 00:10:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000), 0x4) 00:10:32 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x0) 00:10:32 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x40044102, 0x0) 00:10:32 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, 0x0) 00:10:32 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) cachestat(r0, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:32 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:33 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:33 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x5421, 0x0) 00:10:33 executing program 0: syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), 0x0) 00:10:33 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:10:34 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x40049409, 0x0) 00:10:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, 0x0, &(0x7f0000000680), 0x0) 00:10:35 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x40044102, 0x0) 00:10:35 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, 0x0, &(0x7f0000000680), 0x0) 00:10:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:36 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = dup(r0) write$binfmt_aout(r1, 0x0, 0x0) 00:10:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:10:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, 0x0, &(0x7f0000000680), 0x0) 00:10:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:10:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), 0x0, 0x0) 00:10:37 executing program 0: setgroups(0x0, 0x0) setgid(0x0) 00:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:10:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), 0x0, 0x0) 00:10:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x40084503, 0x0) 00:10:37 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0), 0x0, 0x0) cachestat(r0, &(0x7f0000000640), 0x0, 0x0) 00:10:38 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:38 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 00:10:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:38 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x20000081) 00:10:38 executing program 0: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:38 executing program 1: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) 00:10:38 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:38 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 00:10:38 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:38 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r1, 0x0) 00:10:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x12}, 0x98) 00:10:39 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x0) 00:10:39 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$llc(r0, 0x0, 0x0) 00:10:39 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:39 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$dsp(r0, 0x0, 0x0) 00:10:39 executing program 1: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) 00:10:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x0) 00:10:39 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0x40049409, 0x0) 00:10:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:39 executing program 1: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) 00:10:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x0) 00:10:39 executing program 1: syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 00:10:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) [ 640.263110][ T30] audit: type=1400 audit(640.202:277): avc: denied { mount } for pid=11728 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 00:10:40 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) [ 640.308343][ T30] audit: type=1400 audit(640.242:278): avc: denied { unmount } for pid=10859 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 00:10:40 executing program 1: syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x71d621ae}) 00:10:40 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="99dc4447308a", @random="9fd4540ae0a5", @val, {@ipv6}}, 0x0) 00:10:40 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:41 executing program 1: syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0x40049409, 0x0) 00:10:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0xd13d8647dbfe4732}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(0xffffffffffffffff, 0x0) 00:10:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:41 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 00:10:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000100)={@multicast1}, 0xc) 00:10:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:41 executing program 0: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 00:10:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 00:10:41 executing program 0: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) 00:10:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="a4", 0x1}], 0x1, &(0x7f0000000c40)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}, @authinfo={0x10}, @prinfo={0x14}, @prinfo={0x14}, @sndrcv={0x2c}, @authinfo={0x10}], 0xbc}, 0x0) 00:10:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:42 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x80, 0x0, &(0x7f0000000180)) 00:10:42 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:42 executing program 0: statfs(&(0x7f0000000b40)='.\x00', 0x0) 00:10:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:42 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}, 0xc2) 00:10:43 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:43 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="99dc4447308a", @random="9fd4540ae0a5", @val, {@ipv6}}, 0x0) 00:10:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:43 executing program 0: sigaltstack(&(0x7f0000c77000), 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x5) 00:10:43 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4008af24, &(0x7f0000104c80)={0x0, 0x0, "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", "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"}) 00:10:43 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:43 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 00:10:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:44 executing program 0: open$dir(&(0x7f0000001a00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 00:10:44 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) 00:10:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)) 00:10:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)=0x10) 00:10:44 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) 00:10:44 executing program 0: open$dir(0x0, 0xae5646259aea056a, 0x0) 00:10:45 executing program 0: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x5514, 0x0) 00:10:45 executing program 0: sigaltstack(&(0x7f0000ffc000), 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) 00:10:45 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) 00:10:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x4) 00:10:45 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0xffffffff}}) 00:10:45 executing program 0: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:10:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:45 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 00:10:45 executing program 0: r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000000)) 00:10:45 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 00:10:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:46 executing program 1: setrlimit(0x8, &(0x7f0000000040)) 00:10:46 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x1fa, 0x0}, 0x0) 00:10:46 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)) 00:10:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:46 executing program 0: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x5514, 0x0) 00:10:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000080)) 00:10:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:47 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:10:47 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:47 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:10:47 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:47 executing program 0: setrlimit(0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) 00:10:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:48 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) 00:10:48 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x40, 0x0, &(0x7f0000000040)) 00:10:48 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:49 executing program 0: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)) 00:10:49 executing program 0: ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x4147, 0x0) 00:10:49 executing program 0: chown(&(0x7f00000001c0)='.\x00', 0x0, 0x0) 00:10:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:49 executing program 0: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)) 00:10:49 executing program 0: ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x4147, 0x0) 00:10:49 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="50c8357bbebdeefd7180432790a65d1d15e9826d87c21a1bcba326e5c478ce9e2f669cbb0588182163954342244d6eda8ce9a9d491cf4b8d71d89250161e6afa55f9fcbbad0650030e121faec9fb03e90b3e3b6272", 0x55, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:10:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:49 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:50 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:50 executing program 0: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 00:10:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x0, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 00:10:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x8000451b, 0x0) 00:10:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x0, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 00:10:50 executing program 0: open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x200, 0x0) 00:10:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 00:10:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) dup3(r1, r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 00:10:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x0, 0x101005) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:50 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:50 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80044d76, 0x0) 00:10:51 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x80002, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 00:10:51 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:51 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:51 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4147, 0x0) 00:10:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 00:10:51 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:52 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x24004800) 00:10:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:10:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x80002, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x5514, 0x0) 00:10:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:52 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:52 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x4147, 0x0) 00:10:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:53 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8ad, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)='r', 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1c0000008400000004"], 0x2c}, 0x0) 00:10:53 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)=@in, 0xfffffffffffffd24, &(0x7f0000001300)=[{&(0x7f0000000140)=""/4090, 0x1000}, {&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f0000001140)=""/117, 0x75}, {&(0x7f00000000c0)}, {&(0x7f00000011c0)=""/136, 0x88}, {&(0x7f0000001280)=""/72, 0x48}], 0x1000000000000355, &(0x7f0000001380)=""/96, 0x60}, 0x0) 00:10:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x5514, 0x0) 00:10:53 executing program 1: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x5514, 0x0) 00:10:53 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:53 executing program 1: syz_open_dev$usbfs(&(0x7f0000000b00), 0x1ff, 0x101005) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x5514, 0x0) 00:10:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)='Q', 0x1}], 0x1, &(0x7f0000000380)=[@sndinfo={0x1c}], 0x1c}, 0x0) 00:10:53 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8ad, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:54 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 00:10:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 00:10:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 00:10:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x55, 0x0, 0x0) 00:10:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000014c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 00:10:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:54 executing program 1: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:54 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, 0x0) 00:10:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r1, 0x3}}, 0x18) 00:10:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:54 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:54 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:54 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, 0x0) 00:10:54 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 00:10:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:55 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)) 00:10:55 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, 0x0) 00:10:55 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) 00:10:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:55 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, 0x0) 00:10:55 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:10:55 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, 0x0) 00:10:56 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:56 executing program 0: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x5450, 0x0) 00:10:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) 00:10:56 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7}, 0x20001507) 00:10:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:10:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000100)={@multicast1}, 0xffa6) 00:10:56 executing program 0: close(0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 00:10:57 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5450, 0x0) 00:10:57 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x22402) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, 0x0) 00:10:57 executing program 0: close(0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 00:10:57 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:57 executing program 0: syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) 00:10:57 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:57 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 00:10:57 executing program 1: ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 00:10:57 executing program 0: r0 = syz_open_dev$audion(0x0, 0x8ad, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:57 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x5450, 0x0) 00:10:57 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:10:58 executing program 1: r0 = socket(0x1, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 00:10:58 executing program 1: ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 00:10:58 executing program 1: r0 = syz_open_dev$audion(0x0, 0x8ad, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:58 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x80002, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 00:10:58 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:10:58 executing program 1: r0 = syz_open_dev$audion(0x0, 0x8ad, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:58 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 00:10:58 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:58 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000002540)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 00:10:58 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x80002, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 00:10:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:59 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003f00), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000380)) 00:10:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 00:10:59 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x1) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:10:59 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) 00:10:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x48, 0x0, 0x0) 00:10:59 executing program 1: mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/193) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 00:10:59 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:10:59 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)) 00:10:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 00:11:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000840), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40086602, &(0x7f0000000000)=0x5a) 00:11:00 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8ad, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x4b) 00:11:00 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 00:11:00 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x8941, 0x0) 00:11:00 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:00 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:00 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 00:11:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 00:11:00 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:00 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 00:11:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 00:11:00 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 00:11:00 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:11:00 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:01 executing program 1: getresgid(0x0, &(0x7f0000000440), &(0x7f0000000480)) 00:11:01 executing program 0: r0 = syz_io_uring_setup(0x4bd0, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000001c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) 00:11:01 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) 00:11:01 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:01 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xfd4, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xfc0, 0x7, 0x1, 0x0, "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"}]}, 0xfd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:11:01 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xfd4, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xfc0, 0x7, 0x1, 0x0, "92cd0662aaceacbadbdd6e22bd8995e06b225827a34222495239747176c37030a5bec6f3c4c3968ea71e88edd2d0633e28bfe7b70b1bbe0ef633cb137927646aa5b47b9a16bfe52f573ee986b30f0097bc3ec37d7952047193d4ed1d1d236a9c2b4a4cdc12297b2d00791ea3dae57437c9e80c9ab516b712e4316ce13cd0ff3b60a5bfd3f5589601fde1774096589cc111ea748addc31902551d866041c33dd0d233baac8e266cb2b36efb24b844f220e6f857ca044ae0ef070c84b84138fa41613a54537014fbd6e71a7fa7d73f67d83587b7bb06be391913bbed487cbed3dbda1f432178af0d95c4268636a67d579d1bfa667141b80ec516b2d40dc41b64d445c40df4cb1bc55fcc436b6b948a0846b553f20c9c7a1825c8079ea13d724ea73f445eab5838f5e897c48a61fcb4d10051a4fd809407b451a0abe4dcbcceb279e42d53ed97dcac683089e1a6781a8980ed63c0252099cc5688c8c27b7caad3f78f43f3cc2717f68c987332fcd0491e4fa6310291cdf7c954dcafa8095afd32b5fae9e7b7fba82c9347533d5c289b25712cbaa7cbb116244751fe771f8a61123ba283a1035a1e8eea889586795d47733147ac0371aa2b6eef066ed656d761ce5fdf82c1ffd964974a11099c450da91cfe58500f8bf3909d3c9429a6514825cfccb03091cd47d52520499be65ed59bde129279bf78f14f5fd984cf71e788234cffbbeb5236d7365c5ce1a9d1f982a30abaf49e8195dafd87710d27243691de51e5af0018e337bf2dbd1ae674b55564942ee8f1b283ae6aa6683342ffd828332e478661ec332b2b6c7b205ea9b62eedb3cc629b34147b96984aed60a34e376dbc1b4df4c66af4cc53a833f7ea8005128b3e19e76b970f496149c50ce5a9bf4179c40d6c25c65463867073659c7bd9be3b5b74e1a1f3d2b9b622c61367b7848d06cb26a755be8a97457b853a852a2e8af9ce7a66001a565f8f22bf75b2a49cc8e39e7c9489169a26586e692411b03b4c999848ec1c761691777c7b7dead9160de47ca4182405e38a919a1d0c693da9e4e6e0b624ba6f9061d87a3ecffb2822136cb1464c254e9e5e0112477ff4292b7a4432f812b55681b8256469666213317ce56bf549f1f1aad6d36e8c8dcffc76f9b7866c67bb1fa270d84178072ef17429406f4d2c122a33bb006a8fb978a6557fd04a42ecd22eeb3af0832ef56b6ed192c2f8906f90ff3041f5658e58cb38d840b3726f400062e50cf21cb0d19828f253b9ca837792c3d00432f80e4f6ee15d9041cb690bedb9cd08b4261b574159498b382089c7cf38d07f22e6aba7b9dfd20d0df42fe6cd755857edce4448b602d5028189126e3328324deb2795f17183edbb188ad07e26560d647b351e112d6cae6e01948130a3171f4224bfcfb9da13753b7e10374ce3d61b08d1e299952bf39fbc2088645728158d1f4c600fc549596f9545b35d49bdd0790d4d08801ed6cb8bfada24b4b9128ebb1902376d06ab6fbd4e7b3ebc05d4e4824712689832de172145c567b6fe3403f5c79122dc5f66048d523bd2e90da5047a9295843900a001caa17f8b359423aa644896d22d00eeee11db4db79711046bfcb8b2038db38f5d162a2562728723382113c90d022587ee8d8781a2bb35fb412e766d653b0e2797148bd8c72c563e18e53a84d584c50e6f47fd589abcbddc4ace69ca0f474ff6f04d8f285be8f551c142acff21c62fc8bb1460419b707d0642729397b0347b9a31c4677f25f6f5447ab993d4ee9aba8c072beac97576222376d1d565ebd237715ea07b06a5b88c0b6e6e6184571d1fc05a7e988b9bef65727f741c420bd5c269e5225333c248e65f58f7d27bb72d92cf121724922210d12f282032957eb557e0c27ca1cb2056e10ab86f13e23074016f88fc08267c8c716dc564cd42cff1d8878918f904811f0f5b44627ca5dc042d2acc7b0ed4779eebeba4628aad00388f13206bf64742018803ae41d0263f905cb00557ceb191c92ea6c6a9fa5442153116fb18cdf7cfcfce602ffd2ee0fc1fb3b47d17e5d51ab4fe842a52d6beb2caef33df0209f6e80a4cbc0d8bc4ce59681387cf300001979be95736ce35c8aff35f57bb0fce2ac4120341d647a48ca600a25cf8c20532e930e4ae12836ebaef46dc13d693630a523d455bf4f6f3bc11928b17446cad70358c860263c55c30c8a0d421955cff219e0a228da5cd6044d7fd474557a13add04406e3c6dbc720799c85bfe7d8019b81352b4e84e6b44f265388f6a55fdfbb2026c3ab726c041f67cc5a0f40e451c918ad4b486fae5b12d52953a31f71e5ead62cbdce0d551b08426fadaf9b5c755338931b17aa6be64c11a06e4ffd16ee6340348d56d85f55438be726f73d24b1c35688ffe319b8d3a1d31a27b35a34e539fe0dc74d3dac292b21afdbfb57e1f96700baed7a9e973e9a8ebb3b8dd44bb50c18dfa0eb7b9c53ec75b0cf7709ef95563741ebe2179499842cad47a4de4429170e6fa0e446f4db409c7b4283a71839acd5e3f6ffc934c08433eb5544b5ad4ebfec60f1a90295dc0030460887b64d39408582bdd48440fc47df6f7688f36f69d9a921c1064ff386410785398780abf205fd4f985e9f6019061a254556229674a8f2e36762bb924d02fc49da9ee0ad104a06b8e77a825884498149b86fb73a7d0b780ef4634fb1627bc0315fe20534a5220f5492a35d7a8cd67b1b8c9ed10da5978435a61d99ad953e37671e6a67b7239068be4528edc99d884adc0e2f76fdb7199c1d9fcc39668d00a0e0929044e9c52d5bef038b93556676eb648278c308df40e0ff6997c0b7320e9e17bc7d8493b0293c216fdbdf989ec7e58b7bdfdc76cabe72da2c585ca749eda57fbeb7565b2396040b55a3e419e2eb0287a68a5515659b5815dc4994f6a0bbb0d2ee8334e64cad30813cc271cee2b196b17e857ac65d52ca3428214167ad87470554f239f042162ad955ee6aba3c40a111baf903a0ff20a90b8a8976d65bb80a77e682cf58c729ccc74916a21ade1e2c24fb4ee5ab7413a2cf290db6d81b80d38e8bd1b5872c96fc1a27deb015b5affba4a5b56c18d285661648598f24ab067300cb6476d29926dcaf843b045dfcbb91b06dc3ca477253b73c69c784e1d8f544a4eb5f13c8c6cfc6d7660f7a94896239f493a2123ad4ab5a09bd00e0ae6db8d699141dc5486c07d40c071403a70353af0c57a98472f7006db988383b34ec2abf0c82b8f48e4a213772bd461130591cf7dd3318ec4b9521a3db5883500d45048aee82fe7c5e8c765645806ad0d3812f66ec60c2dee9e2658cd17cb86ed5bb587266288875102c8494b6263fc5eaebda248eba333663075085dbcdacd3360ad8cbe39552114d5dd5049ffb53ce475a9fa35fccac300e08b39ace704bbc7e1b0e5434bcb19c1efc09a650a3ad5eb32ffae04a177f412f60d5b8bd2077c24656cd35252c26515e2ecfd50e64d7c9983ab52bb856fdfaeb7b8c1a44023fcd5160e8f56c4f4e60ea81791caeb6ec20093b6a3efd04928980d44edebb4aa5b0ed00499399e698d6c76cd3ffecbd1a8b7d84d8d46337e52b6adff04d8a19a0b1a8e54abacd76bf60b8036fceb2d26601c8bd36f6bd2c09b6ab97e63ed74ef6bcae30fa0d9a6d87f2b168f100a766ebe8c67430791d5756074b9f7d75cfdd412202d22f472359f5569f132e86ecbd5c510d9d90e3fe3604ff4fdeaf6ec11e72e70fc89149d346008e6a091b6bdb7fa1c6c6111d50627dfa6786e8a5eae0d9905a6ef30b6281e2f1927cab4944c790f21a9f3fb1bfd2ba2777e971b63dce81e514fc3a66f0453c517f83359bbf0e9b8b320e9707dee02e2fd7507ec7db6f87dbae2550353d124b1646c2154853636ab44a9b6f8d1df0bb34f9e4fe344835ac6dc43b9a0ef8badeca29a617c0590699facb769d0bee394f42b1b95cc2ea48463c3f2673f7d9afd7aec7c491bc9fc1b51e0ebe6476fb288140f6d30bcaac287a6757eacdf1dbd20c3fd27d7b6ebda4e6b98b36007afea13c8fb2c75cc30acda8579a467f5ac99d2b2c9e735363798cd3e0f83556713b9eccde685d9f70d81f24e8813d284c9d66a73a83496106121c172fa3302cc07e8cfc224c238bace6b46edfaf0bcaabfbe360fa48f40d3eeb7b5baa63db9e69e7d354b1eb84d2382ab18fffc7c5f7b217e85b3f47a47e167c540e47c000c65ef5aa7872c476e3bb678cbb7ec13ce752fb64323f7d25358367c6c3462308b4f394f9be7b145f85a006d3bf173265a9c3b1caa24753e5eea484ebe30b20f4267a59003a1fe99a8bc08d797e6c412233c2211a6fa0a0d08921d15f100fd469ebafb0309dc29a4350bc00a1f1826f6f9769e34a76f22b885c287953149a6083450cfee07485c0a6cc4a19f85aa7a69b8fa404e53a13471fab5cafb7d823c52f1f53be018256877e6390ed832d9599dd70114eb25e2d867bbd6e33ba7536b14e641ef9c9706de62b2fafed5112d3cde43a3a5adc04fee3b5149c445da04796233c43b943397845d861730ec8cc7dbd360ad58d41c8ab410ea36914d80dd0fd5556eba05dfd5a8f1643dcd78ad6f55798a210323bbb06eccd924f86e72e7234e24a47c5795ea9c655cb206431671db52604277577fb40f7cfa8ca77a7c5c9b6722769a67bf22a30c5ac2c7316c0f8075b5b26cf9561b9931f264adf2904b07ae82a02b25f4a36f12fa85491593ace2524af18b1fb56e494af9bb41f6b664c2ddefcb55aae7f60e729bc945e15c0d8d5fa923dc7cdbaae3bd8771540b3f3161e33a77ded5427fbdc93e29594e5f4175a3916f8f385b05a1b293b0362a2a13c43fe546b39cff3550092465986be11dd118f304ff0f5f942eb5189ed44c41aae09de5f38db976bc7b630781f59fca54a8e157e05e0e46fc7fb994bdaffe2b9b4b303b746745a1030f8e08f7b7849c09f0e1591f45257887093e02c55f8feaa7a358469109d3e6e072a686a7903f5b6dd8e0f9e362b3663a7adc394b69bbfebdaf9438ffbfaca39e6d5da07d37bf7979d8fbe243f51f1bb39ceaedc1880716e90f8ddba50d13818263086da8dc79aa7d5ed523b1576e49eb76c26a3002b54af5dc6ea18341270767b441a5fa287de8298b1c7a2be700ce5c346c5ce41704120e1cd0c74fb4e01dda438c7a9049ecf1044384205d8884cf4d8dc55c5b3e4b4f5c87135d8d73981585aad6bd53bb5542500abeb5847b5a0c22edd5cbabfbc9b488250668c3f20758bc9f9a79ba3d59f7bb1399972641e15baa2e7619d27d732106a69ad693c17633af7466f3a296e2d7843923324f608c277a6acb64eb335fd7081dd62349bbdc2b56eabc39009b70bc2786e6fbeb3fca22d41cc4ef4aed6b43d4cf0ba53578964bea9700f36a37f683da91104291d3dc3758ae579332cab89c884e2d699c48d4f4c3a50028bb3935776c639aafdec9c9c3ef4e3c2d65164e60cdcc8379a009ed59e551d3757174182726473db019dbc0dc16e4aece4c74a5d98490ad921493a62372698f2e231684139284d28334480afbb70b35f02882da37f8b2c5244b827c283f5f874aa571d1f732aed205e9ad28065fd0a391ff4a71ba042ef9890a2e62511a94899f118d58d742e8cf2a453fceb23b79260ccec57c8a589f4e1076fb846018736c9f7220dcb597aa380a65cc1c7cd46107"}]}, 0xfd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:11:03 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xfd4, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xfc0, 0x7, 0x1, 0x0, "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"}]}, 0xfd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:11:03 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x20000, 0x20) 00:11:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:03 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8ad, 0x1) write$cgroup_subtree(r0, 0x0, 0x4b) 00:11:03 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:04 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x3, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:11:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, 0x0, 0x0) 00:11:04 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8ad, 0x1) write$cgroup_subtree(r0, 0x0, 0x4b) 00:11:04 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x4161, 0x0) 00:11:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd5b7, 0x20881) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) 00:11:05 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, 0x0, 0x0) 00:11:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), 0x98) 00:11:05 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 00:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x80) 00:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x8880) 00:11:07 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xfd4, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xfc0, 0x7, 0x1, 0x0, "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"}]}, 0xfd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:11:07 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 668.116588][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:08 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:11:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 00:11:08 executing program 1: sigaltstack(&(0x7f0000ffc000), 0x0) sigaltstack(&(0x7f0000ff8000), 0x0) sigaltstack(&(0x7f0000ffa000), 0x0) 00:11:08 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 668.424788][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:08 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004180), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 00:11:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c82, 0xa) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 00:11:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@authinfo={0x10}], 0x10}, 0x0) 00:11:08 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 668.896679][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:08 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 00:11:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000000)="c8d9dc0060fe48ac7bf44d3ab5eac068", 0x10) 00:11:09 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "d2c4924d5e89213dc6e4453739f82a75eb318fca428cc2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r3, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) dup2(r0, r2) 00:11:09 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 669.220593][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 00:11:09 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5450, 0x0) 00:11:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@init={0x14}], 0x14}, 0x0) 00:11:09 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 669.670034][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 00:11:09 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5450, 0x0) [ 669.782858][T12305] sctp: [Deprecated]: syz-executor.1 (pid 12305) Use of int in maxseg socket option. [ 669.782858][T12305] Use struct sctp_assoc_value instead 00:11:09 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0c02, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) 00:11:09 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:09 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) [ 669.994763][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000080)) 00:11:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5450, 0x0) 00:11:10 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0c02, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) 00:11:10 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 670.340796][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:10 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 00:11:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5450, 0x0) 00:11:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd5b7, 0x20881) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) 00:11:10 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:13 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 00:11:13 executing program 1: syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 00:11:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:11:13 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) 00:11:13 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 00:11:13 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000012c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:11:14 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0x5450, 0x0) 00:11:14 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x5451) 00:11:14 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:11:15 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0x5450, 0x0) 00:11:15 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x5451) 00:11:15 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 00:11:15 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:11:15 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0xfff6, 0x0) 00:11:15 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000001080)='.pending_reads\x00', 0x62cc2, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:16 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x5451) 00:11:16 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:11:16 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) [ 677.229975][ T2847] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.300862][ T2847] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.354276][ T2847] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.426681][ T2847] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:11:17 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc01064ce, &(0x7f0000000080)) 00:11:17 executing program 1: ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004550c, 0x0) [ 677.809685][ T2847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.823780][ T2847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.831701][ T2847] bond0 (unregistering): Released all slaves 00:11:17 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) [ 677.955822][ T2847] hsr_slave_0: left promiscuous mode [ 677.971818][ T2847] hsr_slave_1: left promiscuous mode [ 677.991056][ T2847] veth1_macvtap: left promiscuous mode [ 677.991850][ T2847] veth0_macvtap: left promiscuous mode [ 677.992204][ T2847] veth1_vlan: left promiscuous mode [ 677.992468][ T2847] veth0_vlan: left promiscuous mode 00:11:17 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 679.742122][T12377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.753712][T12377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:11:20 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:11:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:11:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5451, 0x0) 00:11:20 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) 00:11:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000700)=[{&(0x7f0000000780)=""/204, 0xcc}], 0x1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 680.906284][T12377] hsr_slave_0: entered promiscuous mode [ 680.912746][T12377] hsr_slave_1: entered promiscuous mode 00:11:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x20881) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) [ 680.936364][T12377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.936892][T12377] Cannot create hsr debugfs directory 00:11:21 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 681.229442][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:21 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:11:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000004c0)={0x0, 0x7f}, 0x8) 00:11:21 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0x5451, 0x0) 00:11:21 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) [ 681.656279][T12377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.664232][T12377] netdevsim netdevsim0 netdevsim1: renamed from eth1 00:11:21 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) [ 681.673229][T12377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.700842][T12377] netdevsim netdevsim0 netdevsim3: renamed from eth3 00:11:21 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc01064ce, &(0x7f0000000080)) 00:11:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x20881) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) 00:11:21 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) 00:11:22 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:11:22 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc01064ce, &(0x7f0000000080)) 00:11:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd5b7, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) 00:11:22 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x79) 00:11:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x24) 00:11:22 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc01064ce, &(0x7f0000000080)) [ 682.608203][T12377] 8021q: adding VLAN 0 to HW filter on device bond0 00:11:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd5b7, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004550c, 0x0) 00:11:22 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003040)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:11:24 executing program 1: msgsnd(0x0, &(0x7f0000001300), 0x8, 0x0) 00:11:24 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5451, 0x0) [ 685.131277][T12377] veth0_vlan: entered promiscuous mode [ 685.135382][T12377] veth1_vlan: entered promiscuous mode 00:11:25 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fcntl$getownex(r0, 0x10, 0x0) [ 685.209710][T12377] veth0_macvtap: entered promiscuous mode [ 685.214968][T12377] veth1_macvtap: entered promiscuous mode [ 685.256110][T12377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.256487][T12377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.256771][T12377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.256984][T12377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:11:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 00:11:25 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:25 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 00:11:25 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, &(0x7f00000000c0)="73b325cb9d5d377777c93837f50e96ae3f6cada20595ed98b785625f9a29a4b278f7d646adc5ab0d6509864ac84eb2add3293fb587975b6a5b", 0x39, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:11:25 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRESDEC]) 00:11:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 00:11:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:11:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 00:11:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000002240)={0xf, 0x8}, 0x10) 00:11:26 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 00:11:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:11:26 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 00:11:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0x5451, 0x0) 00:11:26 executing program 1: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) 00:11:26 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:11:26 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000007240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0x5451, 0x0) 00:11:26 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 00:11:26 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x20) 00:11:26 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) 00:11:26 executing program 0: socketpair(0x2, 0x3, 0x7, 0x0) 00:11:27 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000007240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0x5451, 0x0) 00:11:27 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 00:11:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000080)={@multicast1, @loopback}, 0xc) 00:11:27 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:27 executing program 1: r0 = socket(0x0, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:27 executing program 1: r0 = socket(0xa, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:27 executing program 1: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:11:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x40084503, 0x0) 00:11:27 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 00:11:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x169142) ftruncate(r0, 0x0) 00:11:27 executing program 1: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:11:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f00000004c0)='/', 0x1, 0x105, &(0x7f0000000700)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:11:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) 00:11:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x30, &(0x7f0000004f80)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, {{@in=@empty}, 0x0, @in=@dev}}, 0xe4) 00:11:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x88902) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x169142) ftruncate(r0, 0x0) 00:11:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 00:11:28 executing program 1: r0 = socket(0x1d, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) 00:11:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x200}, 0x98) sendto$inet(r0, &(0x7f0000000000)='v', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 00:11:29 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:11:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x88902) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:29 executing program 1: ftruncate(0xffffffffffffffff, 0x0) 00:11:29 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) 00:11:29 executing program 1: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x2000000) 00:11:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 00:11:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 689.758720][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 00:11:29 executing program 1: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x2000000) 00:11:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x10) 00:11:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50}, 0xfffffdef) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) recvmsg(r2, &(0x7f0000003640)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1}, 0x0) 00:11:30 executing program 1: ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) [ 690.121642][ T30] audit: type=1400 audit(690.062:279): avc: denied { setopt } for pid=13007 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 690.122413][ T30] audit: type=1400 audit(690.062:280): avc: denied { read } for pid=13007 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 00:11:30 executing program 1: r0 = socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) [ 690.265536][T13012] can: request_module (can-proto-0) failed. 00:11:30 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 690.383016][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:30 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x9, 0x169142) ftruncate(r0, 0x0) 00:11:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:11:30 executing program 1: r0 = socket(0x0, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20004, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 00:11:30 executing program 1: ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:11:30 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 00:11:30 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 00:11:30 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:30 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x9, 0x169142) ftruncate(r0, 0x0) 00:11:31 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:31 executing program 1: r0 = socket(0xa, 0x0, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:31 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:31 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x19, r0, 0xfffffffffffffeb1, 0x0) 00:11:31 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="99dc4447308a", @random="9fd4540ae0a5", @val, {@ipv6}}, 0x0) 00:11:31 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x88902) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x169142) ftruncate(r0, 0x0) 00:11:31 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r0, &(0x7f0000003b40)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0) 00:11:31 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x3becbe911acc92cc, 0x0) 00:11:31 executing program 1: r0 = socket(0xa, 0x0, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:32 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:32 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 692.304010][T13068] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 00:11:32 executing program 1: r0 = socket(0xa, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) ftruncate(r0, 0x0) 00:11:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 00:11:32 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:32 executing program 1: r0 = socket(0xa, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x30, 0x0, 0x2000000) 00:11:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) ftruncate(r0, 0x0) 00:11:32 executing program 0: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:32 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:33 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syncfs(r0) 00:11:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:33 executing program 0: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x88902) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:33 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f0000000000)=""/198, 0xc6}, 0x0) 00:11:33 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:33 executing program 0: semget(0x3, 0x0, 0x4df) 00:11:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:33 executing program 0: socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:33 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:33 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f000001d280)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)="95", 0x1}], 0x1, &(0x7f00000051c0)=ANY=[@ANYBLOB="1c"], 0x20}}], 0x1, 0x0) 00:11:33 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) fgetxattr(r0, &(0x7f0000000200)=@known='system.sockprotoname\x00', &(0x7f0000000240)=""/125, 0x7d) 00:11:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:33 executing program 0: socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:33 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:11:33 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:11:33 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x169142) ftruncate(0xffffffffffffffff, 0x0) 00:11:33 executing program 0: socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00'}) 00:11:33 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:34 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt(r0, 0x84, 0x7, &(0x7f0000000480)="a9", 0x1) 00:11:34 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x169142) ftruncate(0xffffffffffffffff, 0x0) 00:11:34 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 00:11:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 00:11:34 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:34 executing program 0: socket(0xa, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x2000000) 00:11:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:34 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0) 00:11:34 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:34 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:34 executing program 0: socket(0xa, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x2000000) 00:11:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xa870, 0x1, [{}]}) 00:11:34 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x4, &(0x7f0000000040)={0x0, "fa564df18dfab01ca71d9afc0308c71f2baa4bda7afe34bdca8e6504000082bebe"}}) 00:11:34 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 00:11:34 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:11:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:34 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:34 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0x5451, 0x0) 00:11:35 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 695.447954][ T92] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 695.687969][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 695.808805][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.811054][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.811844][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.812760][ T92] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 695.813220][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.813607][ T92] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 695.968540][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.969218][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.970030][ T92] usb 2-1: Product: syz [ 695.970227][ T92] usb 2-1: Manufacturer: syz [ 695.970682][ T92] usb 2-1: SerialNumber: syz [ 696.288655][ T92] cdc_ncm 2-1:1.0: bind() failure [ 696.294222][ T92] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 696.295019][ T92] cdc_ncm 2-1:1.1: bind() failure [ 696.309052][ T92] usb 2-1: USB disconnect, device number 12 00:11:37 executing program 0: execve(0x0, &(0x7f0000000540)=[&(0x7f00000001c0)='],._\r-/M+$\x00', &(0x7f0000000380)=']\x00', &(0x7f00000003c0)='+^\x00', &(0x7f0000000400)='%+@)\'\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='*\xd1}!*@:\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='!$/&}\'\t*}:,=):\x00'], &(0x7f0000000740)=[&(0x7f0000000580)='{*{@+{.+{,\x00']) 00:11:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000000200), 0xc) 00:11:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, &(0x7f00000001c0)) 00:11:37 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0x5451, 0x0) 00:11:37 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x0) 00:11:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7db, 0x60301) ioctl$USBDEVFS_RESETEP(r0, 0x4008550c, 0x0) 00:11:37 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0x5451, 0x0) 00:11:37 executing program 1: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:11:38 executing program 1: syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 00:11:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0xb}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 00:11:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x88902) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x0, 0x1, [{}]}) 00:11:38 executing program 1: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:11:38 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0x5451, 0x0) 00:11:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) 00:11:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 00:11:39 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:11:39 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0x5451, 0x0) 00:11:39 executing program 1: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:11:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[], 0x270}}, 0x4004800) 00:11:39 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv4}}, 0x0) 00:11:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x8000) 00:11:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001200)) 00:11:40 executing program 1: socket$netlink(0x10, 0x3, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:11:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:11:40 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 00:11:40 executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001483000000bf090000000000005c090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:11:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:41 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 00:11:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)) 00:11:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt(r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)) 00:11:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:11:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)) 00:11:41 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 00:11:41 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f00000021c0)={&(0x7f0000000b80)=ANY=[], 0xa, 0x0, 0x0, 0x0, 0x1b0}, 0x0) 00:11:41 executing program 1: sigaltstack(&(0x7f0000ffc000), 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 00:11:41 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:11:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, 0x0) 00:11:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), &(0x7f00000015c0)=0x90) 00:11:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5450, 0x0) 00:11:42 executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:11:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, 0x0) 00:11:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x4020940d, &(0x7f0000000940)={0xff, 0x0, 0x0, 'queue1\x00'}) 00:11:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 00:11:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5450, 0x0) 00:11:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af21, 0x0) [ 702.432696][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:11:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) 00:11:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5450, 0x0) 00:11:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:42 executing program 1: open(0x0, 0x1451c2, 0x0) 00:11:42 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003fc0)={&(0x7f0000002640)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000003f40)=[@init={0x14}], 0x14}, 0x0) 00:11:42 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5450, 0x0) 00:11:42 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(r0, 0x0, 0x0) 00:11:42 executing program 1: sigaltstack(&(0x7f0000ffc000), 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:11:43 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, 0x0) 00:11:43 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5450, 0x0) 00:11:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(r0, 0x0, 0x0) 00:11:43 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 00:11:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40180) 00:11:43 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5450, 0x0) 00:11:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="89", 0x1}], 0x1}, 0x4000080) 00:11:43 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 00:11:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x2802) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)) 00:11:43 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5450, 0x0) 00:11:43 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 704.208070][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 704.448658][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 704.568267][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.569059][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.570856][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 704.571508][ T92] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 704.572938][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 704.573476][ T92] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 704.738174][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.739411][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.739653][ T92] usb 2-1: Product: syz [ 704.740206][ T92] usb 2-1: Manufacturer: syz [ 704.740424][ T92] usb 2-1: SerialNumber: syz [ 705.008034][ T92] cdc_ncm 2-1:1.0: bind() failure [ 705.015668][ T92] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 705.016034][ T92] cdc_ncm 2-1:1.1: bind() failure [ 705.027002][ T92] usb 2-1: USB disconnect, device number 13 00:11:45 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:45 executing program 0: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x108}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) ptrace(0x10, r1) 00:11:45 executing program 0: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 00:11:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:46 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5450, 0x0) 00:11:46 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 00:11:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 707.067747][ T3682] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 707.317623][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 707.438108][ T3682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.438966][ T3682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.439956][ T3682] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 707.441049][ T3682] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 707.441837][ T3682] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 707.442422][ T3682] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 707.598219][ T3682] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.598790][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.600024][ T3682] usb 2-1: Product: syz [ 707.600711][ T3682] usb 2-1: Manufacturer: syz [ 707.601150][ T3682] usb 2-1: SerialNumber: syz [ 707.878747][ T3682] cdc_ncm 2-1:1.0: bind() failure [ 707.884967][ T3682] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 707.885229][ T3682] cdc_ncm 2-1:1.1: bind() failure [ 707.892064][ T3682] usb 2-1: USB disconnect, device number 14 00:11:47 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:47 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c, 0x3}, 0x1c) 00:11:48 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 00:11:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:49 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:49 executing program 1: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x20, 0x1800}, {0x0, 0x101, 0x1000}], 0x2) 00:11:49 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:11:49 executing program 1: setgroups(0x1, &(0x7f0000000180)=[0x0]) 00:11:49 executing program 1: fcntl$notify(0xffffffffffffffff, 0x6, 0x20000033) 00:11:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r0) 00:11:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000004100), &(0x7f0000004140)=0x18) 00:11:49 executing program 1: fcntl$notify(0xffffffffffffffff, 0x6, 0x20000033) 00:11:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x40040) 00:11:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000000000)='v', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 00:11:50 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(r0, 0x0, 0x0) 00:11:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x20089, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) 00:11:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:50 executing program 1: semget(0x2, 0x0, 0x180) 00:11:50 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(r0, 0x0, 0x0) 00:11:50 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:50 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000001100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:11:50 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 00:11:50 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:50 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 00:11:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000b80)="32a936d32c40d576a28f9a6e172f5bc222ec679162f24138ac9ae29df2e0ce93dcfb91f63fad37767ef13299b3ae87c018efe3d082d7bce3087f6b88f7ab92957e586e7e2bac542400cdee0718bb2e5df2abbf3589", 0x55, 0x0, 0x0, 0x0) 00:11:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x5450, 0x0) 00:11:51 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:51 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 00:11:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x40000) 00:11:51 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) 00:11:51 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 00:11:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) 00:11:51 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 00:11:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) 00:11:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 00:11:52 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 00:11:52 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000040)="c5b2b8e8159d5e8c04ea7c1712380e2e423ccb32be6b7eae7889b6ea268162e2c672209c553c0d9937405d479add1b88b7820781b71dd94f021f8b909894f8f4294b43416525c9516d547c17b51d5fae3715aca7da62ad0979f645d26bfb381615a08d43991c53b6b206da11814253f66106dcc75656bd4f1ff0a4f1b457660264a11dfe8e953d2c0d0216348a1dc9619b595df454ee412781975035abf21cf08c", 0xa1, 0x105, &(0x7f0000000100)=@un=@abs={0x8}, 0x8) 00:11:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001180)={0x0, 0x0, 0x0}) 00:11:52 executing program 0: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 00:11:52 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 00:11:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x6, 0x20000033) 00:11:52 executing program 0: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 00:11:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:53 executing program 0: r0 = syz_io_uring_setup(0x7677, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) r1 = dup(r0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:11:53 executing program 0: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:53 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$SIOCGETSGCNT(r0, 0xb701, 0x0) [ 713.299099][ T30] audit: type=1400 audit(713.232:281): avc: denied { ioctl } for pid=13534 comm="syz-executor.0" path="pid:[4026532654]" dev="nsfs" ino=4026532654 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 00:11:53 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0xaf01, 0x0) 00:11:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:53 executing program 0: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) 00:11:53 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 00:11:53 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x6, 0x20000033) [ 713.669414][ T30] audit: type=1400 audit(713.602:282): avc: denied { getopt } for pid=13541 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 00:11:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:11:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:53 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/mem_sleep', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/138, 0x8a) 00:11:53 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x6, 0x20000033) 00:11:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:54 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$SIOCGETSGCNT(r0, 0xb701, 0x0) 00:11:54 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) sendto(r0, &(0x7f0000000cc0)="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", 0xfb5, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 00:11:54 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x6, 0x20000033) 00:11:54 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0xaf01, 0x0) 00:11:54 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$SIOCGETSGCNT(r0, 0xb701, 0x0) 00:11:54 executing program 1: symlink(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00') open(&(0x7f0000000380)='./file2\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0x0) open$dir(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 00:11:54 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x0) 00:11:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:54 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 00:11:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040)={r1}, 0x8) 00:11:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:11:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:54 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) 00:11:54 executing program 1: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x5523, 0x0) 00:11:55 executing program 1: ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0xb701, 0x0) 00:11:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xaf01, 0x0) 00:11:55 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x40c2) 00:11:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/devicetree', 0x0, 0x0) fcntl$notify(r0, 0x6, 0x0) 00:11:55 executing program 1: ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0xb701, 0x0) 00:11:55 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0xaf01, 0x0) 00:11:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) 00:11:55 executing program 1: setrlimit(0x7, &(0x7f0000000140)) 00:11:55 executing program 1: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0xb701, 0x0) 00:11:55 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0xaf01, 0x0) 00:11:55 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) 00:11:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000140), &(0x7f0000000180)=0x8) 00:11:56 executing program 0: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x5523, 0x0) 00:11:56 executing program 0: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0xb701, 0x0) 00:11:56 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) 00:11:56 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:11:56 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0xb701, 0x0) 00:11:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x52, 0x0, 0x0) 00:11:56 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:11:56 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0xb701, 0x0) 00:11:57 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 00:11:57 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x20801) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:11:57 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f0000001580)=@in={0x10, 0x2}, 0x10, &(0x7f0000001780)=[{&(0x7f00000015c0)="a9", 0x1}], 0x1}, 0x0) 00:11:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x19) ioctl$TCFLSH(r0, 0x40204706, 0x0) 00:11:57 executing program 0: sigaltstack(&(0x7f0000ffc000), 0x0) sigaltstack(&(0x7f0000ffb000), 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 00:11:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:57 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) 00:11:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000180)={@loopback}, 0xc) 00:11:57 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) 00:11:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:57 executing program 0: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 00:11:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:11:57 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:11:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:57 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @empty, "4afebcb9c324a70cc15702b56b96214c"}}}}, 0x0) 00:11:58 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000440)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:11:58 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0xf1, 0xda, 0xb7, 0x0, 0xd8e, 0x7812, 0x736a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0xa4, 0x75}}]}}]}}, 0x0) [ 718.517647][ T8070] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 718.887917][ T8070] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 719.047884][ T8070] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 719.048799][ T8070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.049451][ T8070] usb 1-1: Product: syz [ 719.049861][ T8070] usb 1-1: Manufacturer: syz [ 719.050461][ T8070] usb 1-1: SerialNumber: syz 00:11:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:11:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0xffffffffffffff5a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 719.293225][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.294213][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.296855][ T8070] usb 1-1: USB disconnect, device number 29 [ 719.487844][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 719.728146][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 719.848173][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.849257][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.849896][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 719.850619][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.855277][ T45] usb 2-1: config 0 descriptor?? [ 719.889965][ T45] hub 2-1:0.0: USB hub found [ 720.108550][ T45] hub 2-1:0.0: 1 port detected [ 720.538240][ T45] hub 2-1:0.0: set hub depth failed [ 720.563307][ T45] usb 2-1: USB disconnect, device number 15 00:12:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1c, 0x1c, 0x1}, 0x1c) 00:12:00 executing program 0: syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) 00:12:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5523, 0x0) 00:12:02 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cubic\x00', 0x6) 00:12:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:02 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:02 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:02 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x5523, 0x0) 00:12:02 executing program 0: accept$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000cc0)) 00:12:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:02 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:02 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:12:03 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000440)=@in={0x10, 0x2}, 0x10) 00:12:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:03 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:03 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="55622018d6a1", @local, @val, {@ipv6}}, 0x0) 00:12:03 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:12:03 executing program 0: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:03 executing program 0: close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:03 executing program 0: pipe(&(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:03 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x100, &(0x7f0000000080), 0x4) 00:12:03 executing program 0: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:04 executing program 0: close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000200)) 00:12:04 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) r1 = request_key(&(0x7f0000001780)='keyring\x00', &(0x7f00000017c0)={'syz', 0x2}, &(0x7f0000001800)='%+9llu \x00', 0xfffffffffffffffe) request_key(&(0x7f0000001a80)='user\x00', &(0x7f0000001ac0)={'syz', 0x2}, &(0x7f0000001b00)='\x00', r1) 00:12:04 executing program 0: fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:04 executing program 0: close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 0: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='-)&\x00', &(0x7f00000000c0)='O,\x00'], &(0x7f0000000280)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\'W,){\x00', &(0x7f00000002c0)='#+\x00\x13\xc3k#\x18\xb7c#\xa4\xc8\x1f\x9dv\xe9\x18=\x8dg8\x12\xe9D\xde\xeaD\xdf\xad\xeb\xa4\xf6\xbaO\xa3\xfb\xd3\x82\x95t\xbbZ!\x12}0\x8cS\xad\xc3\xfd\x98\xb8']) 00:12:04 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, &(0x7f0000000ac0)="090c6e7e2304e023c2af73275344f85a082798f99f1cffe87ef26c4169714404296e225818ca29f7fb1844fddb6f6c96b26cb21da382014f1c1f2012bf6a29ccf5dade6906b3adcce8d323bde87da1410927edb26149ddf61d9f851a96cc9cb1870962", 0x63, 0x100, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x31) 00:12:04 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:04 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000025c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000002640)="b1", 0x1, 0x101, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002700)='m', 0x1}], 0x1}, 0x20286) 00:12:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0x1dc}}, 0x20000084) 00:12:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:12:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:12:05 executing program 1: syz_emit_ethernet(0x1fbf, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 00:12:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000300)=ANY=[], 0xa) 00:12:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, 0x0, 0x0, 0x0) 00:12:05 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) 00:12:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='vegas\x00', 0x6) 00:12:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, 0x0, 0x0, 0x0) 00:12:06 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000680)={@remote, @empty, @val, {@ipv4}}, 0x0) 00:12:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000000)=@in, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/164, 0xb1}, {&(0x7f0000001300)=""/227, 0xfffffffffffffeb1}], 0x3, &(0x7f00000002c0)=""/4092, 0xffc}, 0x0) 00:12:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, 0x0, 0x0, 0x0) 00:12:06 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x298) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:12:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:06 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) 00:12:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@un=@abs={0x8}, 0x8) 00:12:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000020000100000000000000000002002003000000000000000008000200ffffffff0c000c400000000000000000140011"], 0x44}}, 0x0) 00:12:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:07 executing program 1: chown(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 00:12:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001740), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1264) 00:12:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x51, 0x0, 0x0) 00:12:07 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x1000}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x14d, 0x0, 0x0) 00:12:07 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000006c0)=""/238) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4018800}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) r3 = syz_clone(0x43000400, 0x0, 0x8, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x48, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}}, 0x40000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x8000}, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_pidfd_open(r3, 0x0) socketpair(0x0, 0x8000f, 0x0, &(0x7f0000000480)) 00:12:07 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) connect$l2tp6(r0, 0x0, 0x0) 00:12:07 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:07 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 00:12:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:07 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000037c0)={&(0x7f0000002300)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000003740)=[@rights, @cred], 0x30}, 0x0) 00:12:07 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) 00:12:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={0x0}) 00:12:08 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x0) 00:12:08 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x41, 0x0, &(0x7f0000000280)) 00:12:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000040), 0xfffffeb7, 0x0) sendto$unix(r1, &(0x7f00000000c0)='S', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x0) 00:12:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="140000008400000007"], 0x9c}, 0x0) 00:12:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, 0x0) 00:12:08 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x0) 00:12:08 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x400, 0x0, &(0x7f0000000080)) 00:12:08 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:08 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 00:12:08 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x0) 00:12:08 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 00:12:08 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:08 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1c, 0x1c, 0x1}, 0x1c) 00:12:09 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 00:12:09 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:12:09 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0xc020660b, 0x0) 00:12:09 executing program 0: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) 00:12:09 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 00:12:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x88) 00:12:09 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0xc020660b, 0x0) 00:12:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 00:12:09 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 00:12:09 executing program 0: accept$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0) 00:12:09 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0xc020660b, 0x0) 00:12:09 executing program 0: sigaltstack(&(0x7f0000ffc000), 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000900)=""/61) sigaltstack(&(0x7f00007ff000), 0x0) 00:12:10 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:10 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @random="3891a18da5e1", "", @empty, "29406a41e8733c4814fe5551df738b8f"}}}}, 0x0) 00:12:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:10 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, &(0x7f0000000040)="142801611c4131eb54cdf6f77e7b1bc81a0c6b7ded3a80a1baf1cc1fe6584790215b6ec6738a184b07cb97b50165aa8ec84c3bcd27149fde07904a1a59caf094769cdc61a8e9ec0c22457e973d3cc74ca6232607ea9abbf899a8024f", 0x5c, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:12:10 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:10 executing program 0: pipe(&(0x7f0000000cc0)) 00:12:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:12:10 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:10 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 00:12:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0xc020660b, 0x0) 00:12:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000040), 0xfffffeb7, 0x0) sendto$unix(r1, &(0x7f00000000c0)='S', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x0) 00:12:10 executing program 1: semget(0x2, 0x1, 0x502) 00:12:11 executing program 1: mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 731.154869][ T30] audit: type=1400 audit(731.092:283): avc: denied { create } for pid=13977 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 731.163376][ T30] audit: type=1400 audit(731.102:284): avc: denied { link } for pid=13977 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="vda" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 731.174301][ T30] audit: type=1400 audit(731.112:285): avc: denied { rename } for pid=13977 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="vda" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 00:12:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 731.199756][ T30] audit: type=1400 audit(731.132:286): avc: denied { unlink } for pid=10859 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="vda" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 00:12:11 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0xc020660b, 0x0) 00:12:11 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x180, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:12:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x4008af04, &(0x7f0000000080)) 00:12:11 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:11 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0xc020660b, 0x0) 00:12:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/3, 0x3}, 0x0) 00:12:13 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)='m', 0x1}], 0x1}, 0x44055) 00:12:13 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:12:13 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF, 0x5) 00:12:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000040), 0xfffffeb7, 0x0) sendto$unix(r1, &(0x7f00000000c0)='S', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x0) 00:12:16 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)='m', 0x1}], 0x1}, 0x44055) 00:12:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:12:16 executing program 0: semget(0x3, 0x4, 0x222) 00:12:16 executing program 0: setrlimit(0x5, &(0x7f0000000040)) setrlimit(0x5, &(0x7f0000000080)={0x9}) 00:12:16 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)='m', 0x1}], 0x1}, 0x44055) 00:12:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:12:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f0000000040)=0x90) 00:12:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 00:12:16 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x5) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)='m', 0x1}], 0x1}, 0x44055) 00:12:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:12:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') write$P9_RSYMLINK(r0, 0x0, 0x0) 00:12:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000040), 0xfffffeb7, 0x0) sendto$unix(r1, &(0x7f00000000c0)='S', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x0) 00:12:16 executing program 0: setrlimit(0x5, &(0x7f0000000040)={0x9}) 00:12:17 executing program 0: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 00:12:17 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x5) 00:12:17 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, &(0x7f0000000080)="f3f285303911f11955ab6be77a20f0dc4dbf161c5642791ff57aa5d657e3f2dc25fd2a84783e5bfa4aab8a7638d41c8c46688afb6d18613b4384edd098b1dd3ea3ea1ba682fa77ec7698c8f2b68df23e3b071ffa81", 0x55, 0x14, &(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c) 00:12:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x40005504, 0x0) 00:12:17 executing program 0: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 00:12:17 executing program 0: listen(0xffffffffffffffff, 0x5) 00:12:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r1, 0x24, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 00:12:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000026c0)=ANY=[], &(0x7f0000003b80)=0x28) 00:12:17 executing program 0: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 00:12:18 executing program 0: listen(0xffffffffffffffff, 0x5) 00:12:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x47, 0x0, 0x0) 00:12:19 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = eventfd(0x800a6) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r1 = dup(r0) read$eventfd(r1, &(0x7f0000000040), 0x8) 00:12:21 executing program 0: socket$rds(0x1d, 0x5, 0x0) 00:12:21 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:12:21 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'j'}}, 0x119) dup3(r0, r1, 0x0) [ 741.608397][T14073] can: request_module (can-proto-0) failed. [ 741.626786][ T7976] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 741.637981][ T7976] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 00:12:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:21 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x8}, 0x8) 00:12:21 executing program 1: r0 = socket$kcm(0xa, 0x0, 0x0) listen(r0, 0x5) 00:12:22 executing program 1: socket$rds(0x1d, 0x5, 0x0) [ 743.386540][T14092] can: request_module (can-proto-0) failed. 00:12:23 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) 00:12:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 00:12:24 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000280), 0x4) 00:12:24 executing program 0: socket$kcm(0xa, 0x5, 0x0) listen(0xffffffffffffffff, 0x5) 00:12:24 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) 00:12:24 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 00:12:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:24 executing program 1: socket$kcm(0xa, 0x5, 0x0) listen(0xffffffffffffffff, 0x5) 00:12:25 executing program 1: semget(0x2, 0x2, 0x299) 00:12:25 executing program 1: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x5450, 0x0) 00:12:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)) [ 745.701776][T14116] usb usb1: usbfs: process 14116 (syz-executor.1) did not claim interface 0 before use 00:12:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="67727069642c696e69745f697461626c653d3078303030303030303030303030303030392c64696f726561645f6e6f6c6f636b2c696e69745f697461626c653d3078303030303030303030303030303030332c6772706a71756f74613d2c6e6f71756f74612c6e6f6d626c6b5f696f5f7375626d69742c6c617a7974696d652c6e6f64656c616c6c6f632c00fc7449e2e496db3caf1f51b6263a04ee9b16516ca5a1033e0808250944d966609a81d299c3fcc295ccbcbee0f544f0cf27fcf4728669b5bfe05d227560f445912de50187e9715315ce2930de43f90d3d4c4481703c683f844bfaa44af80e21d9a0a13c9b56fc0c5398cffe10671c6fdb4ae8afdbef1ffb98a04d487001162b0d79f342cda5d742342ce93451fea376039f0957c72d086e99cdc9942824a7ff14c063b17587855745a557a4ae3ac5841fe3f995cf0a077f9055976b8fd9f4480615740fed77e4288453e6cb5692c344264dc8d0fcc28a0a1fbaa457a3827df3715cf290be9de53d13ad5fdf410aa1bd9021af252994762fce64888a2433a5af2165e031c97952b5c2d5bc505862d5149434ea565b2dd98d73f2cd1e68f05b6b8a19a2f39c294f3030e312eb692199c9d0ae3d41469f80d604cac363813601ff5f1fd2753ced3d8ef586ad01353d270abc9db444319e8f551818"], 0x64, 0x4fd, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010140)=ANY=[], 0x1000a) [ 746.113922][T14119] loop1: detected capacity change from 0 to 512 [ 746.135173][T14119] ======================================================= [ 746.135173][T14119] WARNING: The mand mount option has been deprecated and [ 746.135173][T14119] and is ignored by this kernel. Remove the mand [ 746.135173][T14119] option from the mount to silence this warning. [ 746.135173][T14119] ======================================================= [ 746.153818][T14119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 746.192753][T14119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 746.280282][T14119] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 746.298290][T14119] Quota error (device loop1): write_blk: dquota write failed [ 746.299079][T14119] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 746.304288][T14119] EXT4-fs error (device loop1): ext4_acquire_dquot:6884: comm syz-executor.1: Failed to acquire dquot type 1 [ 746.330625][T14119] EXT4-fs (loop1): 1 truncate cleaned up [ 746.331867][T14119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 00:12:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003e00)={&(0x7f0000003bc0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000003cc0)=[@sndrcv={0x2c}, @authinfo={0x10}, @sndrcv={0x2c}, @sndrcv={0x2c}, @sndinfo={0x1c}, @sndinfo={0x1c}], 0xcc}, 0x0) [ 746.458872][T10859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.466732][T12468] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 746.472827][T12468] EXT4-fs error (device loop1): ext4_release_dquot:6907: comm kworker/u9:2: Failed to release dquot type 1 00:12:26 executing program 1: socket$rds(0x1d, 0x5, 0x0) [ 747.131307][T14128] can: request_module (can-proto-0) failed. 00:12:27 executing program 1: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x5450, 0x0) 00:12:27 executing program 1: r0 = socket(0x1c, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 00:12:27 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x0) 00:12:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x64, 0x4fd, &(0x7f0000000540)="$eJzs3VFrHFsdAPD/bHZr06ZNqj5owVptJS3a3aSxbfChVhB9Kqj1vcZkE0I22ZDdtE0omuIHEERU8ElffBH8AIIUfPFRhII+KyqKeNt7H+7DvZ3L7k7SNN1N0nabTZPfD07mnJmd+Z+zYWbnzBxmAji0zkbEjYh4mqbpxYgYzObnshRrrdT43JPH9ycbKYk0vfX/JJJs3vq2kmx6PFvtaER855sR309ejFtbWZ2bqFTKS1m5VJ9fLNVWVi/Nzk/MlGfKC2Njo1fHr41fGR/pSjtPRMT1r//7Zz/+zTeu/+FLd/9x+78XftCo1kC2fHM7XlJ+u4Wtphea38XmFZZeMdh+lG+2MNO/u3UevMH6AADQWeMc/+MR8fmIuBiD0bf96SwAAADwFkq/OhAfJBFpe0c6zAcAAADeIrnmGNgkV8zGAgxELlcstsbwfjKO5SrVWv2L09XlhanWWNmhKOSmZyvlkWys8FAUkkZ5tJl/Vr68pTwWEaci4qeD/c1ycbJamer1xQ8AAAA4JI5v6f+/N9jq/wMAAAAHzFCvKwAAAAC8cfr/AAAAcPDp/wMAAMCB9q2bNxspXX//9dSdleW56p1LU+XaXHF+ebI4WV1aLM5UqzPNZ/bN77S9SrW6+OVYWL5Xqpdr9VJtZfX2fHV5oX579rlXYAMAAAB76NRnH/4tiYi1r/Q3U8ORXlcK2BP5jVySTdvs/X8/2Zr+a48qBeyJvl5XAOiZfK8rAPRModcVAHou2WF5x8E7f86mn+tufQAAgO4b/nTn+/+5bddc234xsO/ZieHwcv8fDq/m/f/dDvh1sgAHSsEZABx6r33/f0dp+lIVAgAAum6gmZJcMbu8NxC5XLEYcaL5WoBCMj1bKY9ExMmI+Otg4WON8mhzzWTHPgMAAAAAAAAAAAAAAAAAAAAAAAAA0JKmSaQAAADAgRaR+0/yx9az/IcHzw9svT5wJHl/MLJXhN795a2f35uo15dGG/Pf2Zhf/0U2/3IvrmAAAAAAW63309f78QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTU8e359cT3sZ939fi4ihdvHzcbQ5PRqFiDj2bhL5TeslEdHXhfhrDyLiU+3iJ41qbYRsF7//zcePoexbaBf/eBfiw2H2sHH8udFu/8vF2ea0/f6Xj3iu/Ko6H/9i4/jX12H/P7HLGKcf/a7UMf6DiNP59sef9fhJh/jndhn/e99dXe20LP1VxHDb35/kuVil+vxiqbayeml2fmKmPFNeGBsbvTp+bfzK+EhperZSzv62jfGTz/z+6XbtP9Yh/tAO7T+/y/Z/+Oje40+0soV28S+caxP/T7/OPvFi/Fz22/eFLN9YPryeX2vlNzvz27+c2a79Ux3av9P//8Iu23/x2z/65y4/CgDsgdrK6txEpVJeOrCZRi99H1RDZh9mftjVDaZpmjb2qdfYThL74WtpZnp9ZAIAALrt2Ul/r2sCAAAAAAAAAAAAAAAAAAAAh9dePE5sa8y1jVzSjUdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xUcBAAD//9om2kE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010140)=ANY=[], 0x1000a) 00:12:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xf}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x10, {0x10, 0x0, "828fd250eb20910b6a1436104424"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 748.323484][T14139] loop1: detected capacity change from 0 to 512 [ 748.365661][T14139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 748.368171][ T92] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 748.394873][T14139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 748.558278][T14139] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 748.560857][T14139] Quota error (device loop1): write_blk: dquota write failed [ 748.561844][T14139] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 748.562534][T14139] EXT4-fs error (device loop1): ext4_acquire_dquot:6884: comm syz-executor.1: Failed to acquire dquot type 1 [ 748.600354][T14139] EXT4-fs (loop1): 1 truncate cleaned up [ 748.601121][T14139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.618851][ T92] usb 1-1: Using ep0 maxpacket: 8 00:12:28 executing program 1: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) [ 748.682887][T10859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.687019][ T8111] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 748.688349][ T8111] EXT4-fs error (device loop1): ext4_release_dquot:6907: comm kworker/u9:0: Failed to release dquot type 1 [ 748.738166][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.738785][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.739356][ T92] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 748.740135][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.750329][ T92] usb 1-1: config 0 descriptor?? [ 749.240351][ T92] asus 0003:0B05:1822.0008: unknown main item tag 0x1 [ 749.240685][ T92] asus 0003:0B05:1822.0008: unknown main item tag 0x0 [ 749.241066][ T92] asus 0003:0B05:1822.0008: unknown main item tag 0x5 00:12:29 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) [ 749.250612][ T92] asus 0003:0B05:1822.0008: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.0-1/input0 [ 749.251628][ T92] asus 0003:0B05:1822.0008: Asus input not registered [ 749.261063][ T92] asus 0003:0B05:1822.0008: probe with driver asus failed with error -12 [ 749.437814][ T45] usb 1-1: USB disconnect, device number 30 00:12:29 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) 00:12:29 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000180)=@in6={0x1c, 0x1c}, 0x1c) 00:12:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/177) 00:12:30 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:12:30 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) 00:12:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x7, 0x100}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, &(0x7f0000003cc0)='gid=0Xnore') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) 00:12:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:34 executing program 0: clock_getres(0xe, &(0x7f00000000c0)) 00:12:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000100), &(0x7f0000000040)=0x8) 00:12:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'vxcan1\x00'}) 00:12:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0xffffffffffffffff, 0x0) 00:12:34 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x14) 00:12:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x44, 0x0, &(0x7f0000000040)) 00:12:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) 00:12:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:12:34 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x127e, 0x0) 00:12:34 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) sigaltstack(&(0x7f0000004180)={&(0x7f0000004140)}, &(0x7f0000004200)={&(0x7f00000041c0)=""/44, 0x0, 0x2c}) sigaltstack(&(0x7f0000004280)={&(0x7f0000004240)=""/2, 0x80000000, 0x2}, &(0x7f0000004340)={&(0x7f00000042c0)=""/86, 0x0, 0x56}) sigaltstack(&(0x7f0000004480)={&(0x7f0000004380)=""/253, 0x0, 0xfd}, &(0x7f0000004580)={&(0x7f00000044c0)=""/151, 0x0, 0x97}) sigaltstack(&(0x7f0000004640)={&(0x7f00000045c0)=""/95, 0x0, 0x5f}, &(0x7f0000004740)={&(0x7f0000004680)=""/181, 0x0, 0xb5}) sigaltstack(&(0x7f0000004880)={&(0x7f0000004780)=""/246, 0x80000002, 0xf6}, &(0x7f00000049c0)={&(0x7f00000048c0)=""/215, 0x0, 0xd7}) sigaltstack(&(0x7f0000005a00)={&(0x7f0000004a00)=""/4096, 0x80000001, 0x1000}, &(0x7f0000005b40)={&(0x7f0000005a40)=""/230, 0x0, 0xe6}) sigaltstack(&(0x7f0000005c00)={&(0x7f0000005b80)=""/120, 0x80000001, 0x78}, &(0x7f0000005d40)={&(0x7f0000005c40)=""/227, 0x0, 0xe3}) sigaltstack(&(0x7f0000005e40)={&(0x7f0000005d80)=""/134, 0x80000003, 0x86}, &(0x7f0000005f00)={&(0x7f0000005e80)=""/75, 0x0, 0x4b}) sigaltstack(&(0x7f0000005fc0)={&(0x7f0000005f40)=""/78, 0x1, 0x4e}, 0x0) sigaltstack(&(0x7f0000006080)={&(0x7f0000006000)=""/95, 0x80000000, 0x5f}, 0x0) 00:12:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000080)=ANY=[], 0xa) 00:12:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 00:12:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:35 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) sigaltstack(&(0x7f0000004180)={&(0x7f0000004140)}, &(0x7f0000004200)={&(0x7f00000041c0)=""/44, 0x0, 0x2c}) sigaltstack(&(0x7f0000004280)={&(0x7f0000004240)=""/2, 0x80000000, 0x2}, &(0x7f0000004340)={&(0x7f00000042c0)=""/86, 0x0, 0x56}) sigaltstack(&(0x7f0000004480)={&(0x7f0000004380)=""/253, 0x0, 0xfd}, &(0x7f0000004580)={&(0x7f00000044c0)=""/151, 0x0, 0x97}) sigaltstack(&(0x7f0000004640)={&(0x7f00000045c0)=""/95, 0x0, 0x5f}, &(0x7f0000004740)={&(0x7f0000004680)=""/181, 0x0, 0xb5}) sigaltstack(&(0x7f0000004880)={&(0x7f0000004780)=""/246, 0x80000002, 0xf6}, &(0x7f00000049c0)={&(0x7f00000048c0)=""/215, 0x0, 0xd7}) sigaltstack(&(0x7f0000005a00)={&(0x7f0000004a00)=""/4096, 0x80000001, 0x1000}, &(0x7f0000005b40)={&(0x7f0000005a40)=""/230, 0x0, 0xe6}) sigaltstack(&(0x7f0000005c00)={&(0x7f0000005b80)=""/120, 0x80000001, 0x78}, &(0x7f0000005d40)={&(0x7f0000005c40)=""/227, 0x0, 0xe3}) sigaltstack(&(0x7f0000005e40)={&(0x7f0000005d80)=""/134, 0x80000003, 0x86}, &(0x7f0000005f00)={&(0x7f0000005e80)=""/75, 0x0, 0x4b}) sigaltstack(&(0x7f0000005fc0)={&(0x7f0000005f40)=""/78, 0x1, 0x4e}, 0x0) sigaltstack(&(0x7f0000006080)={&(0x7f0000006000)=""/95, 0x80000000, 0x5f}, 0x0) 00:12:35 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x2001, &(0x7f00000013c0)=ANY=[], 0x8) 00:12:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@un=@abs={0x8}, 0x8) 00:12:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:35 executing program 1: semget(0x3, 0xd28f5b87772fb86c, 0x201) 00:12:35 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) sigaltstack(&(0x7f0000004180)={&(0x7f0000004140)}, &(0x7f0000004200)={&(0x7f00000041c0)=""/44, 0x0, 0x2c}) sigaltstack(&(0x7f0000004280)={&(0x7f0000004240)=""/2, 0x80000000, 0x2}, &(0x7f0000004340)={&(0x7f00000042c0)=""/86, 0x0, 0x56}) sigaltstack(&(0x7f0000004480)={&(0x7f0000004380)=""/253, 0x0, 0xfd}, &(0x7f0000004580)={&(0x7f00000044c0)=""/151, 0x0, 0x97}) sigaltstack(&(0x7f0000004640)={&(0x7f00000045c0)=""/95, 0x0, 0x5f}, &(0x7f0000004740)={&(0x7f0000004680)=""/181, 0x0, 0xb5}) sigaltstack(&(0x7f0000004880)={&(0x7f0000004780)=""/246, 0x80000002, 0xf6}, &(0x7f00000049c0)={&(0x7f00000048c0)=""/215, 0x0, 0xd7}) sigaltstack(&(0x7f0000005a00)={&(0x7f0000004a00)=""/4096, 0x80000001, 0x1000}, &(0x7f0000005b40)={&(0x7f0000005a40)=""/230, 0x0, 0xe6}) sigaltstack(&(0x7f0000005c00)={&(0x7f0000005b80)=""/120, 0x80000001, 0x78}, &(0x7f0000005d40)={&(0x7f0000005c40)=""/227, 0x0, 0xe3}) sigaltstack(&(0x7f0000005e40)={&(0x7f0000005d80)=""/134, 0x80000003, 0x86}, &(0x7f0000005f00)={&(0x7f0000005e80)=""/75, 0x0, 0x4b}) sigaltstack(&(0x7f0000005fc0)={&(0x7f0000005f40)=""/78, 0x1, 0x4e}, 0x0) sigaltstack(&(0x7f0000006080)={&(0x7f0000006000)=""/95, 0x80000000, 0x5f}, 0x0) 00:12:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0189436, &(0x7f0000000080)) 00:12:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:35 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000012c0)=""/4101) 00:12:36 executing program 0: r0 = semget(0x2, 0x0, 0x200) semop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x800}, {0x1, 0x3}, {0x0, 0x4}, {0x3, 0xfffb, 0x1800}, {0x0, 0x1, 0x800}], 0x5) 00:12:36 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) sigaltstack(&(0x7f0000004180)={&(0x7f0000004140)}, &(0x7f0000004200)={&(0x7f00000041c0)=""/44, 0x0, 0x2c}) sigaltstack(&(0x7f0000004280)={&(0x7f0000004240)=""/2, 0x80000000, 0x2}, &(0x7f0000004340)={&(0x7f00000042c0)=""/86, 0x0, 0x56}) sigaltstack(&(0x7f0000004480)={&(0x7f0000004380)=""/253, 0x0, 0xfd}, &(0x7f0000004580)={&(0x7f00000044c0)=""/151, 0x0, 0x97}) sigaltstack(&(0x7f0000004640)={&(0x7f00000045c0)=""/95, 0x0, 0x5f}, &(0x7f0000004740)={&(0x7f0000004680)=""/181, 0x0, 0xb5}) sigaltstack(&(0x7f0000004880)={&(0x7f0000004780)=""/246, 0x80000002, 0xf6}, &(0x7f00000049c0)={&(0x7f00000048c0)=""/215, 0x0, 0xd7}) sigaltstack(&(0x7f0000005a00)={&(0x7f0000004a00)=""/4096, 0x80000001, 0x1000}, &(0x7f0000005b40)={&(0x7f0000005a40)=""/230, 0x0, 0xe6}) sigaltstack(&(0x7f0000005c00)={&(0x7f0000005b80)=""/120, 0x80000001, 0x78}, &(0x7f0000005d40)={&(0x7f0000005c40)=""/227, 0x0, 0xe3}) sigaltstack(&(0x7f0000005e40)={&(0x7f0000005d80)=""/134, 0x80000003, 0x86}, &(0x7f0000005f00)={&(0x7f0000005e80)=""/75, 0x0, 0x4b}) sigaltstack(&(0x7f0000005fc0)={&(0x7f0000005f40)=""/78, 0x1, 0x4e}, 0x0) sigaltstack(&(0x7f0000006080)={&(0x7f0000006000)=""/95, 0x80000000, 0x5f}, 0x0) 00:12:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:36 executing program 0: close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x8000000, 0x200, 0x0, 0x720d, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 00:12:36 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cubic\x00', 0x3) 00:12:36 executing program 0: write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) 00:12:37 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 757.570903][T14254] vmap allocation for size 536875008 failed: use vmalloc= to increase size [ 757.572767][T14254] syz-executor.1: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 757.580071][T14254] CPU: 0 PID: 14254 Comm: syz-executor.1 Not tainted 6.9.0-rc1-syzkaller #0 [ 757.580751][T14254] Hardware name: ARM-Versatile Express [ 757.581602][T14254] Call trace: [ 757.582114][T14254] [<81878e9c>] (dump_backtrace) from [<81878f98>] (show_stack+0x18/0x1c) [ 757.582926][T14254] r7:ff800000 r6:81fdcc9c r5:60000013 r4:81fc4710 [ 757.583560][T14254] [<81878f80>] (show_stack) from [<81896750>] (dump_stack_lvl+0x70/0x7c) [ 757.583975][T14254] [<818966e0>] (dump_stack_lvl) from [<81896774>] (dump_stack+0x18/0x1c) [ 757.584810][T14254] r5:82e3c800 r4:00000000 [ 757.585062][T14254] [<8189675c>] (dump_stack) from [<804a8b74>] (warn_alloc+0xdc/0x17c) [ 757.585588][T14254] [<804a8a98>] (warn_alloc) from [<804a0450>] (__vmalloc_node_range+0xc4/0x534) [ 757.586177][T14254] r3:20000000 r2:81fdcc9c [ 757.586429][T14254] r6:00000dc0 r5:20000000 r4:81fdccd4 [ 757.586846][T14254] [<804a038c>] (__vmalloc_node_range) from [<8045a6e0>] (kvmalloc_node+0xc0/0x110) [ 757.587840][T14254] r10:dff61d00 r9:852c2400 r8:81526f70 r7:ffffffff r6:00000dc0 r5:20000000 [ 757.588232][T14254] r4:00000000 [ 757.588458][T14254] [<8045a620>] (kvmalloc_node) from [<81526f70>] (xt_alloc_entry_offsets+0x24/0x30) [ 757.589062][T14254] r8:84520cc0 r7:00000000 r6:00000000 r5:852c2440 r4:08000000 [ 757.589556][T14254] [<81526f4c>] (xt_alloc_entry_offsets) from [<815dd7a4>] (translate_table+0x70/0x78c) [ 757.590179][T14254] [<815dd734>] (translate_table) from [<815de8b8>] (do_replace.constprop.0+0xc0/0x530) [ 757.590647][T14254] r10:00000126 r9:00000200 r8:84520cc0 r7:852c2440 r6:00000000 r5:20000160 [ 757.591246][T14254] r4:852c2400 [ 757.591429][T14254] [<815de7f8>] (do_replace.constprop.0) from [<815dee58>] (do_ipt_set_ctl+0x130/0x29c) [ 757.592042][T14254] r10:00000126 r9:8137e498 r8:84f01ac0 r7:00000260 r6:dff61da8 r5:84144d80 [ 757.592551][T14254] r4:00000040 [ 757.592828][T14254] [<815ded28>] (do_ipt_set_ctl) from [<814b5870>] (nf_setsockopt+0x60/0x7c) [ 757.593459][T14254] r10:00000126 r9:8137e498 r8:84f01ac0 r7:00000260 r6:84144d80 r5:815ded28 [ 757.593916][T14254] r4:827d04ec [ 757.594095][T14254] [<814b5814>] (nf_setsockopt) from [<8154c8a4>] (ip_setsockopt+0x88/0x98) [ 757.595348][T14254] r6:84144d80 r5:00000260 r4:00000040 [ 757.595800][T14254] [<8154c820>] (ip_setsockopt) from [<8155bf78>] (tcp_setsockopt+0x3c/0x58) [ 757.596351][T14254] r6:00000000 r5:84f01680 r4:8154c81c [ 757.596599][T14254] [<8155bf40>] (tcp_setsockopt) from [<8137e4d0>] (sock_common_setsockopt+0x38/0x40) [ 757.597037][T14254] r4:8155bf3c [ 757.597524][T14254] [<8137e49c>] (sock_common_setsockopt) from [<81786958>] (smc_setsockopt+0xa8/0x3c8) [ 757.598059][T14254] r4:00000040 [ 757.598484][T14254] [<817868b4>] (smc_setsockopt) from [<81379f68>] (do_sock_setsockopt+0xb0/0x17c) [ 757.599181][T14254] r9:82e3c800 r8:80200288 r7:8480a280 r6:8480a280 r5:00000000 r4:817868b0 [ 757.599821][T14254] [<81379eb8>] (do_sock_setsockopt) from [<8137d070>] (sys_setsockopt+0x7c/0xc0) [ 757.600286][T14254] r6:00000040 r5:00000000 r4:00000000 [ 757.600876][T14254] [<8137cff4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 757.601516][T14254] Exception stack(0xdff61fa8 to 0xdff61ff0) [ 757.601968][T14254] 1fa0: 00000260 00000000 00000003 00000000 00000040 20000100 [ 757.602599][T14254] 1fc0: 00000260 00000000 0014c2d0 00000126 7eefd32e 7eefd32f 003d0f00 76bbe0fc [ 757.603231][T14254] 1fe0: 76bbdf08 76bbdef8 000167f8 00050bc0 [ 757.603785][T14254] r7:00000126 r6:0014c2d0 r5:00000000 r4:00000260 [ 757.624824][T14254] Mem-Info: [ 757.626803][T14254] active_anon:7999 inactive_anon:0 isolated_anon:0 [ 757.626803][T14254] active_file:0 inactive_file:39258 isolated_file:0 [ 757.626803][T14254] unevictable:768 dirty:14 writeback:0 [ 757.626803][T14254] slab_reclaimable:1107 slab_unreclaimable:5537 [ 757.626803][T14254] mapped:5124 shmem:3021 pagetables:222 [ 757.626803][T14254] sec_pagetables:0 bounce:0 [ 757.626803][T14254] kernel_misc_reclaimable:0 [ 757.626803][T14254] free:432957 free_pcp:928 free_cma:4031 [ 757.633633][T14254] Node 0 active_anon:31996kB inactive_anon:0kB active_file:0kB inactive_file:157032kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:20496kB dirty:56kB writeback:0kB shmem:12084kB writeback_tmp:0kB kernel_stack:1560kB pagetables:888kB sec_pagetables:0kB all_unreclaimable? no [ 757.636771][T14254] Normal free:1388864kB boost:0kB min:4780kB low:6208kB high:7636kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2504kB unevictable:0kB writepending:56kB present:1556480kB managed:1430152kB mlocked:0kB bounce:0kB free_pcp:3708kB local_pcp:1472kB free_cma:0kB [ 757.640236][T14254] lowmem_reserve[]: 0 4224 4224 [ 757.640815][T14254] Normal: 2*4kB (UM) 1*8kB (M) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 0*128kB 2*256kB (UM) 5*512kB (ME) 5*1024kB (UM) 4*2048kB (UME) 335*4096kB (UM) = 1388864kB [ 757.644806][T14254] 42279 total pagecache pages [ 757.645214][T14254] 0 pages in swap cache [ 757.646779][T14254] Free swap = 124996kB [ 757.651788][T14254] Total swap = 124996kB [ 757.652307][T14254] 524288 pages RAM [ 757.653157][T14254] 135168 pages HighMem/MovableOnly [ 757.653538][T14254] 31582 pages reserved [ 757.653731][T14254] 4096 pages cma reserved 00:12:37 executing program 1: close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:37 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:12:37 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:12:38 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x8000000, 0x200, 0x0, 0x720d, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) [ 758.328629][T14281] vmap allocation for size 536875008 failed: use vmalloc= to increase size 00:12:38 executing program 1: r0 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:38 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:12:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) 00:12:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(r0, &(0x7f0000000100)=""/69, 0x45) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) 00:12:39 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:12:39 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:12:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) 00:12:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003b40)={&(0x7f0000003700)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003b00)=[@init={0x14}], 0x14}, 0x0) 00:12:39 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x8000000, 0x200, 0x0, 0x720d, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) [ 759.948999][T14306] vmap allocation for size 536875008 failed: use vmalloc= to increase size 00:12:39 executing program 1: getgroups(0x3, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) setgid(r0) 00:12:40 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 00:12:40 executing program 0: r0 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:12:40 executing program 1: sigaltstack(&(0x7f0000ffc000), 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/161) sigaltstack(&(0x7f0000ffe000), 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) 00:12:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:40 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="99dc4447308a", @random="9fd4540ae0a5", @val, {@ipv6}}, 0x0) 00:12:40 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) [ 760.387662][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:12:40 executing program 1: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f00000002c0)=[{0x2, 0xfffc}, {0x1, 0x1, 0x1800}, {0x1, 0x2, 0x800}, {0x3, 0xe96, 0x1000}, {0x0, 0x6e38, 0x1000}], 0x5) 00:12:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80}, 0x14) 00:12:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000640)={0x0, @in, 0x0, 0x0, 0x95}, 0x98) 00:12:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000540)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc1}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 760.572582][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:12:40 executing program 0: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x5) 00:12:40 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) 00:12:40 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cubic\x00', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cdg\x00', 0x4) 00:12:40 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x0, 0x3a}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x3) 00:12:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x3, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:12:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 00:12:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:41 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 761.350474][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:12:41 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, &(0x7f00000000c0)="73b325cb9d5d377777c93837f50e96ae3f6cada20595ed98b785625f9a29a4b278f7d646adc5ab0d6509864ac84eb2ad", 0x30, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:12:41 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 00:12:41 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000003000)={&(0x7f0000002000)=""/4096, 0x1, 0x1000}, &(0x7f0000004040)={&(0x7f0000003040)=""/4096, 0x0, 0x1000}) msgget$private(0x0, 0x40) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:41 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) 00:12:41 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 00:12:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x4020940d, 0x0) 00:12:41 executing program 0: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) 00:12:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) [ 762.022058][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:12:41 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 00:12:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0xaf02, 0x0) 00:12:42 executing program 0: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:42 executing program 1: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x0) sendto$inet_nvme_of_msg(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:42 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 00:12:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:42 executing program 0: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002840)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="140000008400000007"], 0x9c}, 0x0) 00:12:42 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 00:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 00:12:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) [ 763.392579][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:12:43 executing program 1: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:43 executing program 0: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:43 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 00:12:43 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x5, 0x4) 00:12:43 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:43 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 00:12:43 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:44 executing program 1: ioctl$EVIOCGLED(0xffffffffffffffff, 0x5450, 0x0) 00:12:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@sndinfo={0x1c}], 0x1c}, 0x0) 00:12:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:44 executing program 0: ioctl$EVIOCGLED(0xffffffffffffffff, 0x5450, 0x0) 00:12:44 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) sigaltstack(&(0x7f0000001e80)={&(0x7f0000001e00)=""/104, 0x2, 0x68}, &(0x7f0000001fc0)={&(0x7f0000001ec0)=""/237, 0x0, 0xed}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:45 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:12:45 executing program 1: r0 = socket(0x1c, 0x10000001, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xf}, 0xc) 00:12:45 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 00:12:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 00:12:45 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)={'filter\x00', 0x10ff}, 0x4b) 00:12:45 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:12:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x7d, 0x0, 0x0) 00:12:46 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 00:12:46 executing program 1: r0 = socket(0x0, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xd, 0x0, 0x0) 00:12:47 executing program 0: setrlimit(0x7, &(0x7f0000000080)) 00:12:47 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 00:12:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=""/98, 0x62}, 0x0) 00:12:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xd, 0x0, 0x0) 00:12:47 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x5450, 0x0) 00:12:47 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 00:12:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x5, 0x0, 0x0) 00:12:48 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x5450, 0x0) 00:12:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:12:49 executing program 0: r0 = socket(0x0, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:49 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x0, 'blkio'}]}, 0x7) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {r3, r4+60000000}}, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 00:12:50 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:50 executing program 1: r0 = socket(0x1d, 0x0, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt(r0, 0x84, 0x9, &(0x7f0000000000)="a9144b2e", 0x4) 00:12:50 executing program 1: inotify_init() r0 = mq_open(&(0x7f00000000c0)='*\x00\x1e\x95\x9a\x17u\xff\xff\xff\xff@\x00', 0x40, 0x0, &(0x7f0000000300)={0x2, 0x4, 0x248}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x5451, 0x0) timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x6, 0x7}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5450, 0x0) 00:12:50 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:50 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:50 executing program 1: r0 = socket(0x1d, 0x0, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:12:50 executing program 0: syz_clone3(&(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) rt_sigreturn() clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000140)={[0x4]}, 0x8) 00:12:51 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) r0 = msgget$private(0x0, 0x260) sigaltstack(&(0x7f0000001c80)={&(0x7f0000001bc0)=""/155, 0x80000000, 0x9b}, &(0x7f0000001d00)={&(0x7f0000001cc0)=""/35, 0x0, 0x23}) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = mq_open(&(0x7f0000001100)='\\%\x00', 0x40, 0x80, &(0x7f0000001140)={0x0, 0x100, 0x97, 0x1f}) r2 = dup3(r0, r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000001300)={0x77359400}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x5421, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001b80)={{}, "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"}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0xffb, 0xa, 0x10001, 0x45c5}, 0x10) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000010c0)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200), 0x4) readlinkat(r2, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)=""/220, 0xdc) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000001040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, 0x0, 0xfd6) ioctl$sock_netdev_private(r5, 0x89f9, &(0x7f00000000c0)="93f7bf8032b162dd36c3951ae004a518075df36ea3ab98606fd8887ceac136bfa2bfe038b3fd7f85af0df0bc29b9073e8595d9504a3d38380214f2ffdaac1c3a648b9af9478e5cc76f93") fdatasync(0xffffffffffffffff) fchmod(r1, 0xb0) 00:12:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x10f, {0x0, r1}}, 0x18) 00:12:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ipvlan0\x00', 0xfe01}) [ 772.539606][T14520] ipvlan0: entered allmulticast mode [ 772.539928][T14520] veth0_vlan: entered allmulticast mode 00:12:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:52 executing program 0: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) semctl$IPC_RMID(r0, 0x0, 0x0) 00:12:52 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000600)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:12:52 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) msgrcv(0x0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(0x0, 0x0) 00:12:52 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:52 executing program 0: r0 = socket(0x1d, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) [ 773.039248][T14532] can: request_module (can-proto-0) failed. 00:12:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40044591, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 00:12:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:53 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0xfffffe73}, 0x0) 00:12:53 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) sigaltstack(&(0x7f0000001b00)={&(0x7f0000001a00)=""/223, 0x0, 0xdf}, &(0x7f0000001b80)={&(0x7f0000001b40)=""/15, 0x0, 0xf}) msgrcv(0x0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(0x0, 0x0) 00:12:53 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001100)={&(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) 00:12:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x8901, &(0x7f0000000800)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) 00:12:53 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:53 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) sigaltstack(&(0x7f00000019c0)={&(0x7f0000001900)=""/161, 0x80000003, 0xa1}, 0x0) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:53 executing program 0: r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x17, 0x20000028, r1) 00:12:53 executing program 0: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(0x0, r0) 00:12:53 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:12:53 executing program 1: r0 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(0x0, r0) 00:12:53 executing program 1: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) 00:12:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000180)) 00:12:53 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x80}, {0x8, 0x0, 0x1, 0x3ff, 0x80, 0x0, 0x3f, 0x1}, {0x9, 0x3ff, 0x315}, 0x8000, 0x6e6bb9}, {{@in=@remote, 0x4d6}, 0x0, @in=@broadcast, 0x3505, 0x4, 0x3, 0x0, 0x8, 0x0, 0x450}}, 0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x5451, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x19) fcntl$dupfd(r2, 0x0, r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x2c8}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x2f) dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x5451, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:12:54 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000180)) 00:12:54 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x5452, &(0x7f0000000000)) 00:12:54 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) sigaltstack(&(0x7f0000001800)={&(0x7f0000001780)=""/73, 0x1, 0x49}, &(0x7f00000018c0)={&(0x7f0000001840)=""/81, 0x0, 0x51}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:54 executing program 0: socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 00:12:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x80000000) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x80}, {0x8, 0x0, 0x1, 0x3ff, 0x80, 0x0, 0x3f, 0x1}, {0x9, 0x3ff, 0x315}, 0x8000, 0x6e6bb9}, {{@in=@remote, 0x4d6}, 0x0, @in=@broadcast, 0x3505, 0x4, 0x3, 0x0, 0x8, 0x0, 0x450}}, 0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x5451, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x19) fcntl$dupfd(r2, 0x0, r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x2c8}, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x2f) dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x5451, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:12:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0}}, 0x0) 00:12:54 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x5452, &(0x7f0000000000)) 00:12:54 executing program 1: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:54 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:54 executing program 1: socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 00:12:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 00:12:54 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x5452, &(0x7f0000000000)) 00:12:54 executing program 1: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:54 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) sigaltstack(&(0x7f0000001640)={&(0x7f0000001600)=""/16, 0x1, 0x10}, &(0x7f0000001740)={&(0x7f0000001680)=""/182, 0x0, 0xb6}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:54 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 00:12:54 executing program 1: socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 00:12:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RSETATTR(r0, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7) mq_open(&(0x7f0000000040)='(:\xc4)\x00\xd9\xa5\x11\x04 \xfas\x1b}p\xa8x\xaeZ(\xc9\x82x\x05v~\xcb\f\rq\x98\x89f~\x96\x8blv\x06u\x03\xcdG\xab\x9d\xef\\<\r\x1b\xbcJ{\xfb\xc2\xe9\xb8M`\x9fh\xf0\x83\x0f\xc8d\xa9S\x19/R\xb0\xceU\x0571\"\a~4\xc0\x04\x82\x86t\xd8)\xa2\x9e\xeaRf\xb0\xc70xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0xffffff99}, 0x69ff9a93bfc25838) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() write$P9_RGETLOCK(r0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/206, 0xce}], 0x1}}], 0x1, 0x0, 0x0) 00:12:56 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:56 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r5, r3, r4, 0x0, 0x0, 0x0, 0x0, 0x8}) 00:12:57 executing program 1: r0 = semget$private(0x0, 0x3, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001180)={[0x8e0]}, 0x8, 0x0) getdents(r1, &(0x7f0000001380)=""/79, 0x4f) socket$nl_route(0x10, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000010c0)=[0x6]) socket$unix(0x1, 0x5, 0x0) r2 = mq_open(&(0x7f0000000040)=':\x00\x00\x00\x00\x00\x00\x00\x93t_\x83\xc8\xfb\xf5\x82\xed\xe0I\x1aGC\x94\xf7\xbd\xa88\x00\x00\x00\x00\x00\x00\x00', 0x41, 0x49, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x5450, 0x0) 00:12:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:57 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 00:12:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff002, 0x7f, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000000)=""/166}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) 00:12:57 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5450, 0x0) 00:12:57 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:12:57 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:57 executing program 1: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/119, 0x77, 0x0, 0x0, 0xfffffffffffffceb) 00:12:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000073c00000000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) 00:12:57 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5450, 0x0) 00:12:57 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:12:57 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:12:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 00:12:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:58 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:12:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)) 00:12:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5450, 0x0) 00:12:58 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) rt_sigreturn() timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) mlockall(0x3) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 00:12:59 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:12:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:12:59 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:12:59 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 00:13:00 executing program 0: syz_emit_ethernet(0x12d9, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6623d49a12a32c3ffe8000000000000000000000000000bbfe8000000000000000000000000000aa03"], 0x0) 00:13:00 executing program 0: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0x5450, 0x0) 00:13:00 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:00 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000180)) 00:13:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:01 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:13:01 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f00000012c0)={&(0x7f0000001240)=""/125, 0x1, 0x7d}, &(0x7f0000001340)={&(0x7f0000001300)=""/48, 0x0, 0x30}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000180)) 00:13:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @val, {@ipv4}}, 0x0) 00:13:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 00:13:02 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000180)) 00:13:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'caif0\x00', 0x400}) 00:13:02 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5450, 0x0) 00:13:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) close(r0) 00:13:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 00:13:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 00:13:03 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map, r0, 0x7, 0x4}, 0x14) 00:13:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_create_chunk\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 00:13:03 executing program 1: sendmsg$unix(0xffffffffffffff9c, &(0x7f00000000c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x7}, 0x0) 00:13:04 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x100000002, 0x1000}, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:04 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5450, 0x0) 00:13:04 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map, r0, 0x7, 0x4}, 0x14) 00:13:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:04 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 00:13:04 executing program 0: syz_emit_ethernet(0x12d9, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6623d49a12a32c3ffe8000000000000000000000000000bbfe"], 0x0) 00:13:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:05 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:05 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0x5450, 0x0) 00:13:05 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x0, 0x0, 0x7f}) memfd_create(0x0, 0x2) r0 = mq_open(&(0x7f0000000100)='%\x00', 0x40, 0x0, &(0x7f0000000140)={0x7, 0x1ff, 0x5, 0x200}) preadv2(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x20, 0xfffffbff, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$GIO_FONT(r0, 0x8904, &(0x7f0000000440)=""/74) 00:13:05 executing program 1: r0 = openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:13:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:05 executing program 1: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'caif0\x00', 0x400}) 00:13:06 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0x5450, 0x0) 00:13:06 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) [ 787.005511][T14761] syzkaller0: entered promiscuous mode [ 787.006150][T14761] syzkaller0: entered allmulticast mode 00:13:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:07 executing program 0: sigaltstack(&(0x7f0000000100)={&(0x7f0000000000)=""/227, 0x80000000, 0xe3}, 0x0) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:07 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_create_chunk\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:13:07 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 00:13:07 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:07 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffd596ffffff86dd6097ff8b00080a00fe8000000000000000000000000000bbfe8000000020"], 0x0) 00:13:07 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:13:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x0) 00:13:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:08 executing program 1: syz_emit_ethernet(0xfffffffffffffe43, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 00:13:08 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:08 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 00:13:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040a01, 0x0) write$dsp(r0, &(0x7f0000000180)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 00:13:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:09 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:09 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 00:13:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:09 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:10 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:10 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 00:13:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) 00:13:10 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:11 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 00:13:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:11 executing program 1: sigaltstack(0x0, 0x0) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:11 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:11 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) 00:13:11 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x5, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x10}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:12 executing program 1: sigaltstack(0x0, 0x0) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:12 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:12 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:12 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5522, 0x0) 00:13:12 executing program 1: sigaltstack(0x0, &(0x7f0000001200)={0x0}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:12 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:12 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:12 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5522, 0x0) 00:13:13 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={0x0}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:13 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x0, 0x8, 0xfffffffffffffea4, &(0x7f00000006c0)}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:13 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 00:13:13 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:13 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5522, 0x0) 00:13:14 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={0x0}) sigaltstack(&(0x7f0000001480)={&(0x7f0000001380)=""/225, 0x1, 0xe1}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:14 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:14 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:14 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 00:13:14 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:15 executing program 1: mlockall(0x3) r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x1e, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x1) fcntl$getownex(r0, 0x10, 0x0) 00:13:15 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 00:13:15 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='\a', 0x1, 0x0, 0x0, 0x0) [ 796.610162][ T6444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.716262][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.823512][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.972595][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.569229][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.583032][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.589939][ T6444] bond0 (unregistering): Released all slaves [ 797.788566][ T6444] hsr_slave_0: left promiscuous mode [ 797.803731][ T6444] hsr_slave_1: left promiscuous mode [ 797.864762][ T6444] veth1_macvtap: left promiscuous mode [ 797.865261][ T6444] veth0_macvtap: left promiscuous mode [ 797.873102][ T6444] veth1_vlan: left promiscuous mode [ 797.873696][ T6444] veth0_vlan: left promiscuous mode [ 801.803955][T14892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.831173][T14892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.306984][T14892] hsr_slave_0: entered promiscuous mode [ 803.322493][T14892] hsr_slave_1: entered promiscuous mode [ 803.325474][T14892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.326359][T14892] Cannot create hsr debugfs directory [ 804.130705][T14892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 804.141318][T14892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 804.146266][T14892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 804.160364][T14892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 804.876068][T14892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.271456][T14892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.710699][T14892] veth0_vlan: entered promiscuous mode [ 807.740432][T14892] veth1_vlan: entered promiscuous mode [ 807.813028][T14892] veth0_macvtap: entered promiscuous mode [ 807.821135][T14892] veth1_macvtap: entered promiscuous mode [ 807.870391][T14892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.870766][T14892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.871287][T14892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.871725][T14892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:13:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:27 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 00:13:28 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:28 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, &(0x7f00000015c0)={&(0x7f00000014c0)=""/253, 0x0, 0xfd}) r0 = msgget$private(0x0, 0x260) msgrcv(r0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:28 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 00:13:28 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2d012e2f66696c6530"], 0xa) setreuid(0xee00, 0x0) r2 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000031c0)={0x0, 0x0, 0x0}, &(0x7f0000003200)=0xc) fchownat(r4, &(0x7f00000000c0)='./file0\x00', 0x0, r5, 0x0) setreuid(0xee00, r2) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0115, './file0\x00'}, 0xa) 00:13:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5522, 0x0) 00:13:28 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) [ 809.030676][T15336] process 'syz-executor.0' launched './file2' with NULL argv: empty string added 00:13:29 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 00:13:29 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800003b060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000076090000000000007baaf0ff00000000bf2700000000000047090000fffdffffbfa400000000000007040000f0ffffff240200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76efffffbe9800000800000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 00:13:29 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000001d40)={0x0, ""/153}, 0xa1, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:29 executing program 0: close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:29 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5450, 0x0) 00:13:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 00:13:30 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x82242) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5522, 0x0) 00:13:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:30 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIONCLEX(r0, 0x5450) 00:13:30 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) sendto$inet_nvme_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 00:13:30 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:30 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 00:13:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80040, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 00:13:31 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000001600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 00:13:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x8940, 0x0) 00:13:31 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 00:13:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 00:13:31 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000001600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 00:13:31 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xbd) 00:13:31 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 00:13:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 00:13:32 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 00:13:32 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) listen(r0, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x18}, 0x1e) 00:13:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:32 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80040, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 00:13:32 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 00:13:32 executing program 0: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 00:13:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x0) 00:13:32 executing program 1: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x5450, 0x719000) 00:13:32 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000001600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 00:13:32 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000180)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 00:13:32 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5450, 0x0) 00:13:32 executing program 0: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x5450, 0x719000) 00:13:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:13:32 executing program 0: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x40044102, 0x0) 00:13:32 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)) 00:13:32 executing program 1: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x5450, 0x719000) 00:13:33 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5450, 0x0) 00:13:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0xe0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:13:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100000000}) r1 = socket$inet6(0x18, 0x2, 0x0) accept$inet6(r1, 0x0, 0x0) 00:13:33 executing program 0: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x40044102, 0x0) 00:13:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:33 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) 00:13:33 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5450, 0x0) 00:13:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:33 executing program 1: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x40044102, 0x0) 00:13:33 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0xc020660b, 0x0) 00:13:33 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:33 executing program 1: syz_clone3(&(0x7f0000000340)={0x10000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:13:33 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 00:13:33 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, 0x0, 0x0) 00:13:33 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0x1b, &(0x7f0000000a80)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 00:13:33 executing program 1: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:33 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x40044102, 0x0) 00:13:34 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 00:13:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:34 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:34 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 00:13:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:34 executing program 0: r0 = epoll_create1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:13:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x40049409, 0x0) 00:13:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:34 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x40305839, 0x0) 00:13:34 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000001600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x40044102, 0x0) 00:13:34 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x24, 0x0}, 0x41) 00:13:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:35 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 815.686619][ T6444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.746177][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.806864][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.864584][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.124918][ T6444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.129536][ T6444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.134415][ T6444] bond0 (unregistering): Released all slaves [ 816.248722][ T6444] hsr_slave_0: left promiscuous mode [ 816.250578][ T6444] hsr_slave_1: left promiscuous mode [ 816.254986][ T6444] veth1_macvtap: left promiscuous mode [ 816.255433][ T6444] veth0_macvtap: left promiscuous mode [ 816.255760][ T6444] veth1_vlan: left promiscuous mode [ 816.256077][ T6444] veth0_vlan: left promiscuous mode 00:13:36 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:36 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000001600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x40044102, 0x0) 00:13:36 executing program 1: r0 = socket$inet6(0x18, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0x18, 0x2}, 0xc) 00:13:36 executing program 1: close(0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:37 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6097748b00080200fe8000000000000000000000000000bbfe"], 0x0) 00:13:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000800)={0x0, 0x0}) 00:13:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 00:13:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x34000094) 00:13:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) [ 818.353796][T15520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.356589][T15520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:13:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 00:13:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 00:13:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 00:13:38 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) 00:13:39 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 00:13:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 00:13:39 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 819.472995][T15520] hsr_slave_0: entered promiscuous mode [ 819.488989][T15520] hsr_slave_1: entered promiscuous mode [ 819.490423][T15520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.490827][T15520] Cannot create hsr debugfs directory 00:13:39 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) 00:13:39 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:13:39 executing program 1: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) [ 820.571067][T15520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 820.589433][T15520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 820.606221][T15520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 820.628978][T15520] netdevsim netdevsim0 netdevsim3: renamed from eth3 00:13:42 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:42 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) [ 822.585321][T15520] 8021q: adding VLAN 0 to HW filter on device bond0 00:13:42 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 00:13:42 executing program 1: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004080)=""/163) shmctl$IPC_RMID(r0, 0x0) 00:13:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000400)) 00:13:45 executing program 1: io_setup(0x8, &(0x7f0000000080)=0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) io_destroy(r0) io_setup(0xffff, &(0x7f0000003340)) 00:13:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:46 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 00:13:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) 00:13:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:47 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') [ 827.550387][T15520] veth0_vlan: entered promiscuous mode [ 827.573938][T15520] veth1_vlan: entered promiscuous mode 00:13:47 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) [ 827.677115][T15520] veth0_macvtap: entered promiscuous mode [ 827.704407][T15520] veth1_macvtap: entered promiscuous mode [ 827.819557][T15520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.820265][T15520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.820912][T15520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.821504][T15520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:13:47 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:13:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) [ 828.078297][ T30] audit: type=1400 audit(828.002:287): avc: denied { connect } for pid=16019 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 00:13:48 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:48 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:13:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 00:13:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 00:13:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 00:13:49 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(r0, 0x0) 00:13:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 00:13:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000400)) 00:13:50 executing program 1: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r0, 0x0) 00:13:51 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) fremovexattr(r0, 0x0) 00:13:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044102, 0x0) 00:13:52 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:52 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001500), &(0x7f0000001540)=0x10) 00:13:52 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:13:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80040, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x5450, 0x719000) 00:13:53 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:13:53 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:13:53 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(r0, 0x0) 00:13:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044102, 0x0) 00:13:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000400)) 00:13:53 executing program 1: r0 = openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 00:13:54 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:13:56 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 00:13:56 executing program 0: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044102, 0x0) 00:13:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x63b3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r1}, 0x10) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 00:13:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 00:13:56 executing program 0: r0 = getegid() semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804100, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x1, 0x541, &(0x7f0000000ac0)="$eJzs3V9rZGcZAPDnnGSyyW5qUv9RC3arrewW3ZlNY9sgUiqIXhXUer/GZBJCJpmQmdRNKJriBxBEVPDKK28EP4Ag/QgiFPRS8KJWRLd60Rv3yJk50ybpmWRqJpmY/H5wMu97zpx5nneW8857/uw5AVxZT0bESxExFhHPRMRMMT+vpxFxL6/sd9/3zoPXlvIpiSx75R9JJMW83mfl9fGIuNFdJSYj4ltfj/hu8sG4rd299cVGo75d1Gvtja1aa3fvztrG4mp9tb45Pz/3/MILC88t3M0Kp2rnbES8+NW3fvqjX33txd994Xt/ufe329//4VjElz/ZzTsilk4VoI/uZ1c630VP/h1tn0WwERgr2lMZdSIAAAzko8U4/7P5WPWUY2wAAADgYnpvjz871knLAQAAgAssjYjpSNJqcR3AdKRptdq9hvfjcT1tNFvtz680dzaX82URs1FJV9Ya9bvFtcKzUUny+lxxjW2v/uyR+nxEPBoRP5mZ6tSrS83G8mgPfQAAAMCVcePm4f3/f8+knfIhD7vHCkaTIQAAADAUs30rAAAAwGVhlx8AAAAuvwH2/z/R+fvXmbNPBgAAABi2b7z8cj5lved4L7+6u7PefPXOcr21Xt3YWaouNbe3qqvN5mrnnn0bJ31eo9nc+mJs7tyvteutdq21u3dvo7mz2b63dugR2MWTxwEAAIDz8OjNN/6URMT+l6Y6UxT3ATxgv//ayRlnB1wMlVEnAAzZ2KgTAEZmfNQJACNzcFRfPhbQQ8Bld9KRvMl+C35/pD41nHwAAIDhu/WpD57/7431nfGDyy390Gv0PRIAAPyfcHYPrq7KcVcAujgQroSPdF8+02/5wOf/+8qyD50UAAAwVNOdKUmrxbnA6UjTajXikc5jASrJylqjfrfYP/jjTOVaXp/rrJn43/8AAAAAAAAAAAAAAAAAAAAAAAAAMKAsSyIDAAAALrWI9O2kczf/iFszT0/3jgu8WyyfSN6dibeKmb945Wf3F9vt7bmIieSfb+ezJiKi/fNi/rOZRwIAAADABdDdTy9e50adDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXzTsPXlvqTecZ9+9fiYjZsvjjMdl5nYxKRFz/VxLjB9ZLImJsCPH3X4+Ix8riJ/Ewy7LZIouy+FNnFP9mEWG289WUx08j4sYQ4sNV9kbe/7xUtv2n8WTntXz7Gy/6gHwTPk38/v1f+l7/N9an/3nk0Jz+Hn/zN7XDcybej/96xOPj5f1fL37SJ/5TA7bxO9/e2+u3LPtlxK3y35+pg7Fq7Y2tWmt3787axuJqfbW+OT8/9/zCCwvPLdytraw16sXf0hg//vRvH/aLn7f/emn8bv97XPufHrD9/3nz/oOPdYuVsvi3nyr//X2sGz/7wZH4afHb97minOdyq1fe75YPeuLXf3jiuPYv92n/Sf/+twds/zPfnBjwnQDAeWjt7q0vNhr17WMKkwO858TCn7NTrT78wrWLkca5FvK9lQuQRkmhM8iNiNL3jMeAn1O++v9eyEb9tZQXrhUb75nGGmWvBAAAnIX3B/2jzgQAAAAAAAAAAAAAAAAAAACurvO4Y9nRmKe6YTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBn5bwAAAP//6nzosQ==") 00:13:56 executing program 1: write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 00:13:57 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) [ 837.190085][T16124] loop0: detected capacity change from 0 to 512 [ 837.211397][T16124] EXT4-fs (loop0): bad block size 8192 00:13:57 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:13:57 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:13:59 executing program 1: write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 00:13:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) 00:13:59 executing program 0: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044102, 0x0) 00:13:59 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:13:59 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(0x0, 0x0) 00:14:02 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000400)) 00:14:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:02 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="00020201"], 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:02 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:02 executing program 0: sigaltstack(0x0, &(0x7f0000001200)={&(0x7f0000001180)=""/73, 0x0, 0x49}) sigaltstack(&(0x7f0000001480)={0x0}, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(0x0, 0x0) 00:14:05 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:05 executing program 0: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2316], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000740000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 00:14:07 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 00:14:07 executing program 1: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) 00:14:07 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) 00:14:08 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:10 executing program 1: semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000080)=""/247) 00:14:10 executing program 1: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) 00:14:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:11 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:11 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, &(0x7f0000000080)) 00:14:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:11 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:12 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:12 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, &(0x7f0000000080)) 00:14:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) 00:14:13 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @mptcp=@mp_join={0x1e, 0x3, 0x9}]}}}}}}}}, 0x0) [ 853.689134][T16207] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 00:14:13 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, &(0x7f0000000080)) 00:14:13 executing program 1: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4) 00:14:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40000) 00:14:15 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:15 executing program 1: r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:14:16 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:14:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 00:14:16 executing program 1: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0xa, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 00:14:17 executing program 1: r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:14:17 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000008000000000000000000000500000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 00:14:17 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:19 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:19 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5450, 0x0) 00:14:19 executing program 1: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 00:14:20 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, &(0x7f0000000080)) 00:14:21 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000032c0)=ANY=[], 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x31, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x29, 0x6, 0x7, 0x7fffffff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x700, 0x7800, 0xbadb, 0xffff}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0xc0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 00:14:21 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:22 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:22 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:14:22 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) 00:14:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:22 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:22 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:14:22 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:23 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:23 executing program 0: r0 = openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0xa, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 00:14:23 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, 0x0) 00:14:23 executing program 0: r0 = io_uring_setup(0x6c33, 0x0) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:23 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:23 executing program 1: openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 00:14:23 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, 0x0) 00:14:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000032c0)=ANY=[], 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x31, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x29, 0x6, 0x7, 0x7fffffff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x700, 0x7800, 0xbadb, 0xffff}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0xc0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 00:14:23 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:24 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5450, 0x0) 00:14:24 executing program 0: openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 00:14:24 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0x5452, 0x0) 00:14:24 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:24 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5450, 0x0) 00:14:24 executing program 0: r0 = io_uring_setup(0x6c33, 0x0) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b66, 0x0) 00:14:24 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:24 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x0, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:24 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x5450, 0x0) 00:14:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000032c0)=ANY=[], 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x31, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x29, 0x6, 0x7, 0x7fffffff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x700, 0x7800, 0xbadb, 0xffff}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0xc0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 00:14:25 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:14:25 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:25 executing program 1: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 00:14:25 executing program 0: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x0, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:26 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 00:14:26 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:26 executing program 1: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 00:14:26 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000a40)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 00:14:27 executing program 1: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) [ 867.185880][ T30] audit: type=1400 audit(867.122:288): avc: denied { bind } for pid=16336 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 867.219061][ T30] audit: type=1400 audit(867.162:289): avc: denied { write } for pid=16336 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:14:27 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5450, 0x0) 00:14:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:27 executing program 0: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) 00:14:28 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_crypto(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=@delrng={0x10, 0x14, 0x4}, 0x10}}, 0x0) 00:14:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) [ 868.506158][ T30] audit: type=1400 audit(868.442:290): avc: denied { read } for pid=16349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 00:14:28 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:28 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000cc0)={0x0}) 00:14:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 00:14:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5450, 0x0) 00:14:28 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x0, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:28 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400)=ANY=[], 0x0, 0x491, &(0x7f0000000480)="$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") umount2(&(0x7f0000000000)='./file0\x00', 0x3) mknodat$null(r0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x103) close(r0) 00:14:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) 00:14:29 executing program 1: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x5450, 0x0) [ 869.187479][T16364] loop0: detected capacity change from 0 to 512 [ 869.203470][T16364] EXT4-fs (loop0): orphan cleanup on readonly fs [ 869.204882][T16364] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 869.214120][T16364] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 15 (err -117) 00:14:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) [ 869.228566][T16364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 869.258555][T16364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:14:29 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:29 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:29 executing program 1: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) 00:14:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0xe2402) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)) 00:14:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="48000000030601030000000000000000010000040900020073797a31000000000500010007"], 0x48}}, 0x0) 00:14:29 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400)=ANY=[], 0x0, 0x491, &(0x7f0000000480)="$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") umount2(&(0x7f0000000000)='./file0\x00', 0x3) mknodat$null(r0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x103) close(r0) [ 869.576826][T16384] loop1: detected capacity change from 0 to 512 [ 869.605095][T16384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 869.608769][T16384] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 869.614524][T16384] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 869.620670][T16384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. 00:14:29 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) [ 869.660123][T16384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 00:14:29 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:29 executing program 0: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:29 executing program 1: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) 00:14:29 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400)=ANY=[], 0x0, 0x491, &(0x7f0000000480)="$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") umount2(&(0x7f0000000000)='./file0\x00', 0x3) mknodat$null(r0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x103) close(r0) 00:14:29 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5450, 0x0) 00:14:29 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:29 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 00:14:29 executing program 0: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x4004550d, 0x0) 00:14:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x5450, 0x0) 00:14:30 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400)=ANY=[], 0x0, 0x491, &(0x7f0000000480)="$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") umount2(&(0x7f0000000000)='./file0\x00', 0x3) mknodat$null(r0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x103) close(r0) 00:14:30 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 00:14:30 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) 00:14:30 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) 00:14:30 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 00:14:30 executing program 0: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:30 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x5450, 0x0) 00:14:30 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:30 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setlease(r0, 0x8, 0x0) 00:14:30 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 00:14:30 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) 00:14:30 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x5450, 0x0) 00:14:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 00:14:30 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) 00:14:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x0, 0x3ff, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "808b075f73a3ad7683aa1ce8dc9c2b45"}) 00:14:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) 00:14:31 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:14:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:31 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x13, 0x3}]}}}}}}}}, 0x0) 00:14:31 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) 00:14:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) dup3(r1, r0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) [ 871.344561][T16453] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 00:14:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:31 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) accept(r1, 0x0, 0x0) shutdown(r1, 0x0) 00:14:31 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) 00:14:31 executing program 1: r0 = socket(0x0, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:31 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0) 00:14:31 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000019c0)) 00:14:31 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x7f79, 0x1f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000400)={r1}) 00:14:31 executing program 1: r0 = socket(0x0, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:32 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:32 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000019c0)) 00:14:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) 00:14:32 executing program 1: r0 = socket(0x0, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:32 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000019c0)) 00:14:32 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:32 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:14:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:32 executing program 1: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:14:32 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:32 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:14:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x4004550d, 0x0) 00:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000020c0)={0x14}, 0x14}}, 0x8800) 00:14:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:32 executing program 1: io_uring_setup(0x6c33, &(0x7f0000000080)) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:14:32 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:14:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:33 executing program 0: read$usbfs(0xffffffffffffffff, 0x0, 0x0) 00:14:33 executing program 1: io_uring_setup(0x6c33, &(0x7f0000000080)) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:14:33 executing program 0: r0 = socket(0x1d, 0x0, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:33 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:14:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:33 executing program 1: r0 = getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r2, r1, 0x0) 00:14:33 executing program 1: read$usbfs(0xffffffffffffffff, 0x0, 0x0) 00:14:33 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:33 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:14:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) 00:14:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:33 executing program 0: read$usbfs(0xffffffffffffffff, 0x0, 0x0) 00:14:33 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 00:14:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 00:14:33 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:33 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x4004550d, 0x0) 00:14:33 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000800), 0x940, 0x0) 00:14:34 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 00:14:34 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:34 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:34 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x4004550d, 0x0) 00:14:34 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x8) 00:14:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x8041) ioctl$USBDEVFS_GET_SPEED(r0, 0x550b) 00:14:34 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 00:14:34 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:14:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000940)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000002c0)) 00:14:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x8) 00:14:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='reno\x00', 0x5) 00:14:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 00:14:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541d, 0x0) 00:14:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xd3, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) 00:14:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x8) 00:14:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$getflags(r0, 0x0) 00:14:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 00:14:34 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x3, 0xff) recvmsg$unix(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x1) 00:14:34 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x8) 00:14:34 executing program 0: r0 = socket(0x1d, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) [ 875.132012][T16597] can: request_module (can-proto-0) failed. 00:14:35 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:35 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:35 executing program 0: flock(0xffffffffffffffff, 0x8) 00:14:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4000880) 00:14:35 executing program 1: r0 = socket(0x1d, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:35 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:35 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:35 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) [ 875.519210][T16612] can: request_module (can-proto-0) failed. 00:14:35 executing program 1: flock(0xffffffffffffffff, 0x8) 00:14:35 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:35 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x1d1371d3, 0x0, 0x0, "5b0e9ecaed365d7fe1b0166fa185767239a942"}) 00:14:35 executing program 1: r0 = socket(0x1d, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:35 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) [ 875.839680][T16627] can: request_module (can-proto-0) failed. 00:14:35 executing program 1: flock(0xffffffffffffffff, 0x8) 00:14:35 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:35 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:35 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:35 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 00:14:36 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) flock(r0, 0x8) 00:14:36 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:36 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:36 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 00:14:36 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:36 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) flock(r0, 0x8) 00:14:36 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:36 executing program 0: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:36 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:14:36 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:36 executing program 1: syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) 00:14:36 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:36 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:36 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:14:36 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:36 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:36 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 00:14:36 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:36 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) 00:14:36 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:36 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:37 executing program 1: openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80101, 0x0) 00:14:37 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:37 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:37 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) 00:14:37 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:37 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:37 executing program 1: openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80101, 0x0) 00:14:37 executing program 0: ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:37 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, 0x0, 0x0) 00:14:37 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:37 executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:37 executing program 1: ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000940)={&(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}, 0x0) 00:14:37 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(0xffffffffffffffff, 0x8) 00:14:37 executing program 0: ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:37 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 00:14:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000bc0)={0xd, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @private2}}}, 0x48) 00:14:37 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(0xffffffffffffffff, 0x8) 00:14:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:37 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) 00:14:37 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:38 executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 00:14:38 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:14:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:38 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) 00:14:38 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:38 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:14:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) 00:14:38 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0) 00:14:38 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x80101, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:14:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d5be1a43ce38", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff"], 0x30}}, 0x0) 00:14:38 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) [ 878.708318][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:38 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:38 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:38 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000004980), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5452, &(0x7f0000004ac0)={0x0}) 00:14:38 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:14:38 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:39 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) [ 879.313657][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:14:39 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) 00:14:39 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x5450, 0x0) 00:14:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:39 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 00:14:39 executing program 0: r0 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 00:14:39 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) 00:14:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:39 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x0) 00:14:39 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) [ 880.090891][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:14:40 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) 00:14:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:40 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x0) 00:14:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14}, 0x14}}, 0x24004000) 00:14:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) 00:14:40 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) flock(r0, 0x0) 00:14:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0xaf01, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 00:14:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 00:14:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x88) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x8800) 00:14:40 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x8008330e, 0x0) 00:14:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80086601, 0x0) 00:14:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 00:14:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40044591, 0x0) ioctl$EVIOCGREP(r0, 0x80004506, 0x0) 00:14:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x20, 0x1, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:14:40 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:14:40 executing program 0: faccessat(0xffffffffffffffff, 0x0, 0x41) 00:14:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 00:14:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmodat(0xffffffffffffffff, 0x0, 0x0) 00:14:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:41 executing program 0: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000019c0)) 00:14:41 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:14:41 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:41 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x5451, 0x0) 00:14:41 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:41 executing program 1: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000019c0)) 00:14:41 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 00:14:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80086601, 0x0) 00:14:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000024c0)={0x14}, 0x14}}, 0x4041080) 00:14:42 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:42 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x5451, 0x0) [ 882.694994][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:14:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0) 00:14:42 executing program 1: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80086601, 0x0) 00:14:42 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 00:14:43 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) 00:14:43 executing program 1: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000019c0)) 00:14:43 executing program 1: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80086601, 0x0) 00:14:44 executing program 1: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x5451, 0x0) 00:14:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) [ 884.699585][T16879] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 00:14:44 executing program 1: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 00:14:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:45 executing program 1: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x5421, &(0x7f0000000040)={0x0}) 00:14:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) [ 885.624960][T16887] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 00:14:45 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 00:14:45 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:46 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, &(0x7f0000000040)={0x0}) 00:14:46 executing program 1: syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)) 00:14:46 executing program 1: r0 = openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x5451, 0x0) 00:14:46 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 00:14:46 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 00:14:46 executing program 0: syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)) 00:14:46 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80086601, 0x0) 00:14:46 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 00:14:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'veth0_macvtap\x00', @multicast}) 00:14:47 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x5421, &(0x7f0000000040)={0x0}) 00:14:47 executing program 0: openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x5451, 0x0) 00:14:47 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) 00:14:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)) 00:14:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "ebeed70000000000000000960000000800"}) 00:14:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:14:47 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 00:14:47 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:47 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0x5421, &(0x7f0000000040)={0x0}) 00:14:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f0000000140)={0xa, 0x0, 0x0, 0x0, 'syz1\x00'}) 00:14:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:48 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000000000)) 00:14:48 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:14:48 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, 0x0) 00:14:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 00:14:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:48 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) 00:14:48 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:49 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, 0x0) 00:14:49 executing program 1: r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000029c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 00:14:49 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:49 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) 00:14:49 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:49 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, 0x0) 00:14:49 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:14:49 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:49 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:49 executing program 0: r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000029c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 00:14:49 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:50 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) 00:14:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x1ff, 0xa2401) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x80045510, &(0x7f0000000000)) 00:14:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x0, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:50 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) 00:14:50 executing program 0: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000280)=0x8) 00:14:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:50 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0x5450, 0x0) 00:14:50 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:50 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40044591, 0x0) 00:14:50 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0x5450, 0x0) 00:14:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:51 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40044591, 0x0) 00:14:51 executing program 0: r0 = openat$sw_sync_info(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 00:14:51 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:51 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0xaf01, 0x0) 00:14:51 executing program 0: cachestat(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:51 executing program 0: r0 = openat$sw_sync_info(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 00:14:51 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0xaf01, 0x0) 00:14:51 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:51 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:51 executing program 1: r0 = openat$sw_sync_info(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 00:14:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x0, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:52 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0xaf01, 0x0) 00:14:52 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:52 executing program 1: cachestat(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) [ 892.701563][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:14:52 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:52 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:14:52 executing program 1: openat$sw_sync_info(0xffffff9c, &(0x7f00000029c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0x5450, 0x0) 00:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) [ 892.960527][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:14:52 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:52 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:53 executing program 0: openat$sw_sync_info(0xffffff9c, &(0x7f00000029c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0x5450, 0x0) 00:14:53 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) cachestat(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:53 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40044591, 0x0) 00:14:53 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$nci(r3, &(0x7f0000000000)=ANY=[], 0x4) 00:14:53 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:53 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) 00:14:53 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:14:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:53 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:14:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) 00:14:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40044591, 0x0) 00:14:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f0000000040)) 00:14:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:54 executing program 1: syz_open_dev$evdev(&(0x7f0000000dc0), 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40044591, 0x0) 00:14:54 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:14:54 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)) 00:14:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x5, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "e7"}, @restrict, @typedef, @typedef, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @int, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @array, @typedef]}, {0x0, [0x0, 0x6c, 0x2e]}}, 0x0, 0x109}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000280)}, 0x20) 00:14:54 executing program 1: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0xaf01, 0x0) 00:14:55 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:55 executing program 1: r0 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 00:14:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:57 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000000000)) 00:14:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_CMAP(r0, 0x5409, 0x0) 00:14:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:14:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, 0x0, &(0x7f00000000c0), 0x0) 00:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)) 00:14:57 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)) 00:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, 0x0, &(0x7f00000000c0), 0x0) 00:14:57 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:57 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)) 00:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000080), 0x0, 0x0) 00:14:57 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:57 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:14:57 executing program 1: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000080), 0x0, 0x0) 00:14:58 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)) 00:14:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0xaf01, 0x0) 00:14:58 executing program 1: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000080), 0x0, 0x0) 00:14:58 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)) 00:14:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) 00:14:58 executing program 1: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:14:58 executing program 1: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, 0x0) 00:14:58 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, 0x0) 00:14:58 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) fcntl$dupfd(r0, 0x0, r1) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4) 00:14:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 00:14:59 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:14:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 00:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:00 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:00 executing program 0: close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) 00:15:00 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) fcntl$dupfd(r0, 0x0, r1) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4) 00:15:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, 0x0) 00:15:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:01 executing program 0: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) 00:15:01 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) fcntl$dupfd(r0, 0x0, r1) write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4) 00:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, 0x0) 00:15:02 executing program 0: close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) 00:15:02 executing program 1: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) 00:15:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r1, 0x0, 0x0) 00:15:02 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, 0x0, 0x4) 00:15:02 executing program 0: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:03 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)) 00:15:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r1, 0x0, 0x0) 00:15:03 executing program 0: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/231) 00:15:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)) 00:15:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, 0x0) 00:15:03 executing program 0: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:03 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)) 00:15:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000780)) 00:15:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 00:15:04 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:04 executing program 1: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) write$nci(r3, 0x0, 0x4) 00:15:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r1, 0x0, 0x0) 00:15:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') mknodat$loop(r0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0) 00:15:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:05 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) 00:15:05 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:15:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:05 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:05 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4161, 0x0) 00:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x0) 00:15:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:06 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:06 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4161, 0x0) 00:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x4c82) 00:15:06 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:06 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 00:15:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x6, [@dev, @dev, @remote, @dev, @remote, @random="b5958a4bf4c1"]}) 00:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x4c82) 00:15:06 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 00:15:06 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x48000) 00:15:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r1, 0x0, 0x0) 00:15:06 executing program 0: ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x4161, 0x0) 00:15:06 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) 00:15:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 00:15:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd3, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x0) 00:15:07 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) 00:15:07 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) 00:15:07 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:07 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 00:15:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x4c82) 00:15:07 executing program 0: ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x4161, 0x0) 00:15:07 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)) 00:15:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x2080) 00:15:07 executing program 0: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4c82) 00:15:07 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001880)) 00:15:07 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg1\x00'}) 00:15:07 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:08 executing program 0: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4c82) 00:15:08 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4161, 0x0) 00:15:08 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)) 00:15:08 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:08 executing program 0: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4c82) 00:15:08 executing program 0: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 00:15:08 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001880)) 00:15:08 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:08 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x4161, 0x0) 00:15:08 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 00:15:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x4c82) 00:15:08 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x4161, 0x0) 00:15:08 executing program 0: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000001880)) 00:15:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) 00:15:09 executing program 1: write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 00:15:09 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, 0x0) 00:15:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "eb0d8b1371538f20136d5d31ff746c94d266ac7e8d1bf0fd9e3f360cce0cf1f13b7d687eca7d0bc37393277f3ec6d8e412d00f1b40af91ed2aa8ba1231cfc2cbf5f6ce60dda4b4c0e6400a30841c1ea08c7fce3c70b98b439aa955a9059d98dc159cead59052622965eeb0234d912f97d99ea8ba8c33364ea96382f1c5137b99829d1c664b90961fa65340d9d31754ff647ea72c380e25a5b4b1482609b1d4c281f2aea28d887979bae641e542faccdf18fe1ecb318868e0a56a461352ec384eb1a4f02041bbf904aad35cfab84652b53746362d50b7a2d4310af09f057c2a95b5265cf2a02b4edc3b031c4019be51e394ae9bf907fb80f344f3029ac98ce1c5"}) 00:15:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 00:15:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r0, 0x4) [ 909.699928][T17363] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:15:09 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, 0x0) 00:15:09 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001880)) 00:15:09 executing program 0: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:09 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:15:09 executing program 1: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 00:15:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0x5451, 0x0) 00:15:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc00455d0, 0x0) 00:15:09 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 00:15:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4c82) 00:15:10 executing program 0: ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0x5451, 0x0) 00:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x80002) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, 0x0) 00:15:10 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 00:15:10 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001880)) 00:15:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0x5451, 0x0) 00:15:10 executing program 0: statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r0) 00:15:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc00455d0, 0x0) 00:15:10 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000001880)) 00:15:10 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, 0x0, 0x0) 00:15:10 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc00455d0, 0x0) 00:15:10 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 00:15:10 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x22001, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 00:15:10 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0x5451, 0x0) 00:15:11 executing program 0: statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r0) 00:15:11 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000001880)) 00:15:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x0) 00:15:11 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:11 executing program 0: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0xc00455d0, 0x0) 00:15:11 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) 00:15:11 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 00:15:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x0, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:11 executing program 0: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0x5451, 0x0) 00:15:11 executing program 0: r0 = add_key$fscrypt_provisioning(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="010003"]) 00:15:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x0, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:11 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc00455d0, 0x0) 00:15:11 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="dac300c88095b9c171d39b4148e68764", 0x10) 00:15:12 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0x5451, 0x0) 00:15:12 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:12 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100002, 0x0, 0x0, {r0}}, 0x20) 00:15:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)) 00:15:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:12 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc00455d0, 0x0) 00:15:12 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="93", 0x3d30}], 0x12}, 0x0) 00:15:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:12 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:13 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0xc00455d0, 0x0) 00:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:13 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x280) 00:15:13 executing program 1: syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:13 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syz_tun\x00'}) 00:15:13 executing program 1: syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) 00:15:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:13 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:13 executing program 0: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:13 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300)=@gcm_128={{}, "4eb9ef9804f41504", "fa0cbd81862e0900ae4f591bd6b7e30d", "b61757f1", "8d0db798024466d3"}, 0x28) 00:15:13 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0x5451, 0x0) 00:15:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:13 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:13 executing program 1: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:13 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, 0x0) 00:15:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0x5451, 0x0) 00:15:14 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000480)=""/77) 00:15:14 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:14 executing program 0: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNATTACHFILTER(r0, 0xa, 0x0) 00:15:14 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0xc020660b) [ 914.294120][T17513] tap0: tun_chr_ioctl cmd 10 00:15:14 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000480)=""/77) 00:15:14 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:14 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0xc020660b) 00:15:14 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_allocate_inode\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 00:15:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000480)=""/77) 00:15:14 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:14 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0xc020660b) 00:15:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000480)=""/77) 00:15:14 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 00:15:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x0, &(0x7f00000012c0)={0x0}) 00:15:15 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0xc020660b) 00:15:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000480)=""/77) 00:15:15 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:15 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:15 executing program 1: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0xc020660b) 00:15:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x0, &(0x7f00000012c0)={0x0}) 00:15:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000000)={'veth0_macvtap\x00', @multicast}) 00:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:15 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, 0x0, r1) 00:15:15 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:15 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0xc00455d0, 0x0) 00:15:15 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x13}]}}}], 0x18}, 0x0) 00:15:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 00:15:16 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 00:15:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000480)=""/77) 00:15:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) [ 916.237501][T17580] tap0: tun_chr_ioctl cmd 1074812117 00:15:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 00:15:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10040) 00:15:16 executing program 0: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0xc020660b) 00:15:16 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 00:15:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 00:15:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x14}, 0x14}}, 0x8000) 00:15:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000180)) 00:15:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000480)=""/77) 00:15:16 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) 00:15:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x80002) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, 0x0) 00:15:18 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/234, 0xea) 00:15:18 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:18 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, 0x0, 0x24000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x401, 0x9, 0x19, 0x0, "8ce5da7e00e9c6da8c90de70aa8ad52d9f465a65a6b5a64569be05deb7561aded186cea918bb188aefbc2e76b7c8e48df31939a2e1210e444f0251b2cfcc5b56", "f6f49ff980798973afcca9688d120828d26f48c7fcf82c378eecaac4992d124a", [0x8000000000000001, 0x2]}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x0, 0x18, "e3420a80806466575ba71c84d8bf2ba11f801eba87eaa6a9726931b5a0be3260e28f12406573de50f9f8289f7b53e466a621d7f64e9725417709a46074fa6cf2", "a45c53affe985d7ead1ff7c8e8b13acd08348fd16172f6058d59debad3944207", [0x80000000]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 918.688460][T17610] loop0: detected capacity change from 512 to 509 [ 918.728342][T17610] loop0: detected capacity change from 509 to 511 00:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:19 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read(r0, 0x0, 0x0) 00:15:19 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:19 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) 00:15:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x80002) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, 0x0) 00:15:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc081) 00:15:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:21 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)) keyctl$chown(0x4, r0, 0x0, 0x0) 00:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af12, &(0x7f0000000040)) 00:15:22 executing program 0: r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0x1e, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc0}, 0x0) [ 922.541264][ T30] audit: type=1400 audit(922.482:291): avc: denied { create } for pid=17640 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 00:15:22 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x5451, 0x0) 00:15:22 executing program 0: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) 00:15:22 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, 0x0, 0x24000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x401, 0x9, 0x19, 0x0, "8ce5da7e00e9c6da8c90de70aa8ad52d9f465a65a6b5a64569be05deb7561aded186cea918bb188aefbc2e76b7c8e48df31939a2e1210e444f0251b2cfcc5b56", "f6f49ff980798973afcca9688d120828d26f48c7fcf82c378eecaac4992d124a", [0x8000000000000001, 0x2]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 922.997997][T17648] loop0: detected capacity change from 511 to 509 00:15:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x22000005) 00:15:23 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) statx(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0, &(0x7f00000003c0)) keyctl$chown(0x4, r0, 0x0, 0x0) 00:15:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000480)=""/77) 00:15:23 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) 00:15:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:15:23 executing program 0: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) 00:15:23 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:23 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x87, 0xb9, 0x1e, 0x40, 0xb95, 0x772a, 0x567e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x64, 0xe9, 0x49, 0x0, [], [{{0x9, 0x5, 0x7, 0x1a}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x0, 0x7f}}]}}]}}]}}, 0x0) 00:15:24 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40485404, &(0x7f0000000280)={{0x1}}) [ 924.327996][ T7976] usb 1-1: new high-speed USB device number 31 using dummy_hcd 00:15:24 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af12, &(0x7f0000000040)) 00:15:24 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5421, &(0x7f0000000000)) 00:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) [ 924.699690][ T7976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 924.700283][ T7976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 924.700736][ T7976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 924.858272][ T7976] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=56.7e [ 924.859301][ T7976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.859498][ T7976] usb 1-1: Product: syz [ 924.859613][ T7976] usb 1-1: Manufacturer: syz [ 924.859718][ T7976] usb 1-1: SerialNumber: syz [ 924.864199][ T7976] usb 1-1: config 0 descriptor?? [ 925.107941][ T7976] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 925.108871][ T7976] asix 1-1:0.0: probe with driver asix failed with error -71 [ 925.119376][ T7976] usb 1-1: USB disconnect, device number 31 00:15:26 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0023800}, 0x38) 00:15:26 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:26 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) read$sequencer(r0, 0x0, 0x2) 00:15:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)) 00:15:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, 0x0) 00:15:27 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:27 executing program 1: getgroups(0x0, &(0x7f0000003240)) 00:15:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af12, 0x0) 00:15:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, 0x0) 00:15:27 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 00:15:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af12, 0x0) 00:15:27 executing program 1: syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x80002) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) 00:15:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, 0x0) [ 927.978038][ T30] audit: type=1400 audit(927.912:292): avc: denied { create } for pid=17730 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:15:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 00:15:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af12, 0x0) 00:15:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 00:15:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, 0x0) 00:15:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd5b7, 0x20881) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0xc0185500, &(0x7f0000000440)) 00:15:28 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:28 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x80002) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) 00:15:28 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:15:28 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:28 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x10043) 00:15:28 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$sequencer(r0, 0x0, 0x2) 00:15:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) flistxattr(r0, &(0x7f0000000040)=""/217, 0xd9) 00:15:29 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:29 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x8982, &(0x7f0000000940)) 00:15:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$sequencer(r0, 0x0, 0x2) 00:15:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000002700), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) 00:15:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160012000a0002000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) [ 929.463969][T17768] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 00:15:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/power/sync_on_suspend', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 00:15:29 executing program 1: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$sequencer(0xffffffffffffffff, 0x0, 0x2) 00:15:29 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90) 00:15:29 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000040)={0x0}, 0x10) 00:15:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000200)) 00:15:29 executing program 0: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$sequencer(0xffffffffffffffff, 0x0, 0x2) 00:15:30 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:30 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:30 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:30 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:30 executing program 0: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$sequencer(0xffffffffffffffff, 0x0, 0x2) 00:15:30 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:30 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:30 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 00:15:31 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 00:15:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 00:15:31 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:31 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 00:15:31 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x290440, 0x30) 00:15:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGID(r0, 0xc0045878, 0x0) 00:15:32 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 00:15:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 00:15:32 executing program 1: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) 00:15:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:32 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:33 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/system', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) fcntl$getflags(r2, 0x0) 00:15:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) 00:15:33 executing program 1: r0 = openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:33 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:33 executing program 1: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:33 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, &(0x7f0000000000), 0xfdc1) 00:15:34 executing program 1: r0 = openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:34 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) read$sequencer(r0, 0x0, 0x2) 00:15:34 executing program 1: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:34 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 00:15:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 00:15:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0x5450, 0x0) 00:15:35 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:35 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:36 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:36 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:36 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:36 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000600)) 00:15:36 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr\n'], 0xa) 00:15:37 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0x40049409, 0x0) 00:15:37 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:37 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x20004800) 00:15:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$sequencer(r0, 0x0, 0x2) 00:15:37 executing program 0: r0 = syz_open_dev$sndmidi(0x0, 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:37 executing program 1: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 00:15:38 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:15:38 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, 0xffffffffffffffff, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 00:15:38 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:38 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 00:15:38 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:38 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0x40049409, 0x0) 00:15:38 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, 0xffffffffffffffff, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 00:15:39 executing program 0: r0 = syz_open_dev$sndmidi(0x0, 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x20004800) 00:15:39 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:39 executing program 1: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0x40049409, 0x0) 00:15:39 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) read$sequencer(r0, 0x0, 0x2) 00:15:39 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x0, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:39 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x20004800) 00:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:40 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:40 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x0, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 00:15:40 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 00:15:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:40 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 00:15:40 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0x40049409, 0x0) 00:15:40 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, &(0x7f0000000600)) 00:15:41 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20004800) 00:15:41 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 00:15:41 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) read$sequencer(0xffffffffffffffff, 0x0, 0x2) 00:15:41 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) dup3(0xffffffffffffffff, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:41 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0x40049409, 0x0) 00:15:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 00:15:41 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 942.012342][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:15:42 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) dup3(0xffffffffffffffff, r0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20004800) 00:15:42 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x0) 00:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:42 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0x40049409, 0x0) [ 942.509889][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 00:15:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 00:15:42 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20004800) 00:15:42 executing program 1: syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000600)) 00:15:42 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, 0xffffffffffffffff, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 00:15:42 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 00:15:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000540)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1, 0x0, '\"'}}]}, 0xb0) 00:15:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc00455d0, 0x0) 00:15:43 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86418, 0x0) 00:15:43 executing program 1: syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000600)) 00:15:43 executing program 1: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 00:15:43 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000180)='O', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 00:15:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000001140)=""/4074, 0xfea}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000980)=""/41, 0x29}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 00:15:43 executing program 0: syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000600)) 00:15:44 executing program 0: pipe2$watch_queue(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) 00:15:44 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 00:15:44 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:15:45 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 00:15:45 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064ce, &(0x7f0000000640)) 00:15:45 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, 0x0) 00:15:46 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) 00:15:46 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 00:15:46 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:15:46 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000010c0), 0x200, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045731, 0x0) 00:15:46 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:15:46 executing program 1: prctl$PR_GET_FPEXC(0xb, &(0x7f0000009ec0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2200c851, &(0x7f0000001340)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/223, 0xdf}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/178, 0xb2}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002d80)=@rc, 0x80, 0x0}}], 0x4, 0x200, &(0x7f0000003640)={0x0, 0x3938700}) sendto$inet6(r1, &(0x7f0000003900)="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", 0x17e, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 00:15:47 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 00:15:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) 00:15:47 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) 00:15:47 executing program 1: r0 = fanotify_init(0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x2, r1, 0x0) 00:15:48 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064ce, &(0x7f0000000640)) [ 948.112145][ T7863] usb 1-1: new high-speed USB device number 32 using dummy_hcd 00:15:48 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, 0x0) 00:15:48 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) 00:15:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNGETFEATURES(r0, 0x89a1, 0x0) [ 948.378732][ T7863] usb 1-1: Using ep0 maxpacket: 16 00:15:48 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064ce, &(0x7f0000000640)) [ 948.518592][ T7863] usb 1-1: config 0 has no interfaces? 00:15:48 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, 0x0) 00:15:48 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x10) write$P9_RSETATTR(r1, 0x0, 0x0) [ 948.698301][ T7863] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 948.698903][ T7863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.699744][ T7863] usb 1-1: Product: syz [ 948.700199][ T7863] usb 1-1: Manufacturer: syz [ 948.700403][ T7863] usb 1-1: SerialNumber: syz [ 948.838017][ T7863] r8152-cfgselector 1-1: Unknown version 0x0000 [ 948.838599][ T7863] r8152-cfgselector 1-1: config 0 descriptor?? [ 949.082151][ T7863] r8152-cfgselector 1-1: USB disconnect, device number 32 00:15:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000003280), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40049409, 0x0) 00:15:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/129, 0x81) read$usbfs(r0, &(0x7f0000002240)=""/4107, 0x100b) 00:15:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x5451, 0x0) 00:15:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x20802) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:15:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000003280), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40049409, 0x0) 00:15:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000004d80), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5015, 0x0) 00:15:51 executing program 0: fanotify_mark(0xffffffffffffffff, 0x1, 0x40001000, 0xffffffffffffffff, 0x0) 00:15:51 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064ce, &(0x7f0000000640)) 00:15:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000003280), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40049409, 0x0) 00:15:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000001c0)) 00:15:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) write$P9_RSETATTR(r2, 0x0, 0x0) 00:15:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 00:15:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000003280), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x40049409, 0x0) 00:15:51 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0xae04, 0x0) 00:15:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000001c0)) 00:15:51 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003000)) 00:15:51 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40049409, 0x0) 00:15:51 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0xae04, 0x0) 00:15:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000001c0)) 00:15:51 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003000)) 00:15:52 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x40049409, 0x0) 00:15:52 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0xae04, 0x0) 00:15:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000001c0)) 00:15:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x24}}, 0x0) 00:15:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000100)) 00:15:52 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0xae04, 0x0) 00:15:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x20802) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x0, 0x0}) 00:15:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) fchmod(r0, 0x0) 00:15:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0x4008af22, &(0x7f0000000840)) 00:15:52 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0xae04, 0x0) 00:15:52 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003000)) 00:15:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) fchmod(r0, 0x0) 00:15:53 executing program 0: getrandom(&(0x7f00000000c0)=""/4109, 0x100d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrandom(&(0x7f0000001100)=""/134, 0x86, 0x0) getrandom(&(0x7f0000000000)=""/181, 0xb5, 0x0) [ 953.182772][T18115] ------------[ cut here ]------------ [ 953.183360][T18115] kernel BUG at include/linux/scatterlist.h:187! [ 953.184118][T18115] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 953.184943][T18115] Modules linked in: [ 953.186663][T18115] CPU: 1 PID: 18115 Comm: syz-executor.0 Not tainted 6.9.0-rc1-syzkaller #0 [ 953.187848][T18115] Hardware name: ARM-Versatile Express [ 953.188919][T18115] PC is at sg_init_one+0x9c/0xa8 [ 953.189403][T18115] LR is at sg_init_table+0x2c/0x40 [ 953.189761][T18115] pc : [<807e8648>] lr : [<807e6a3c>] psr: 80000113 [ 953.192119][T18115] sp : e08a9a70 ip : e08a9aa8 fp : e08a9a8c [ 953.193796][T18115] r10: 00000000 r9 : ffedc000 r8 : ff7fbf1c [ 953.195313][T18115] r7 : 00000f5e r6 : e08a9a90 r5 : 853394d8 r4 : ffedc000 [ 953.196754][T18115] r3 : df000000 r2 : ffffffd8 r1 : 00000000 r0 : e08a9a90 [ 953.197993][T18115] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 953.198934][T18115] Control: 30c5387d Table: 84d54280 DAC: 00000000 [ 953.199827][T18115] Register r0 information: 2-page vmalloc region starting at 0xe08a8000 allocated at kernel_clone+0xac/0x3cc [ 953.201940][T18115] Register r1 information: NULL pointer [ 953.202945][T18115] Register r2 information: non-paged memory [ 953.203792][T18115] Register r3 information: non-paged memory [ 953.204900][T18115] Register r4 information: non-paged memory [ 953.206082][T18115] Register r5 information: slab vmap_area start 853394d8 pointer offset 0 size 40 [ 953.208058][T18115] Register r6 information: 2-page vmalloc region starting at 0xe08a8000 allocated at kernel_clone+0xac/0x3cc [ 953.209484][T18115] Register r7 information: non-paged memory [ 953.210424][T18115] Register r8 information: 0-page vmalloc region starting at 0xff7d8000 allocated at pcpu_get_vm_areas+0x0/0x12c8 [ 953.211898][T18115] Register r9 information: non-paged memory [ 953.212467][T18115] Register r10 information: NULL pointer [ 953.213252][T18115] Register r11 information: 2-page vmalloc region starting at 0xe08a8000 allocated at kernel_clone+0xac/0x3cc [ 953.214563][T18115] Register r12 information: 2-page vmalloc region starting at 0xe08a8000 allocated at kernel_clone+0xac/0x3cc [ 953.215437][T18115] Process syz-executor.0 (pid: 18115, stack limit = 0xe08a8000) [ 953.216088][T18115] Stack: (0xe08a9a70 to 0xe08aa000) [ 953.217145][T18115] 9a60: ff7fbefc 853394d8 dee1e718 841ce940 [ 953.218426][T18115] 9a80: e08a9aec e08a9a90 804c3dd4 807e85b8 00000002 00000000 00000000 00000000 [ 953.219254][T18115] 9aa0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 953.220618][T18115] 9ac0: 00000001 5e800f3e 853394d8 00000001 dee1e718 843ad544 843ad540 843ad540 [ 953.221453][T18115] 9ae0: e08a9b14 e08a9af0 804c6a18 804c3d24 dee1e718 00000001 e08a9b84 00000000 [ 953.222109][T18115] 9b00: 83d84800 84247900 e08a9b64 e08a9b18 804bbbf4 804c68c8 804bd118 802e2798 [ 953.223035][T18115] 9b20: e08a9b94 00000000 00100cca 00000000 00000000 5e800f3e e08a9cb8 00000001 [ 953.224275][T18115] 9b40: 00100cca 00000000 00000000 e08a9b83 00000007 00000000 e08a9bdc e08a9b68 [ 953.225258][T18115] 9b60: 804bd614 804bbb58 e08a9b83 00000000 00000000 dee1e718 00000003 00000003 [ 953.226335][T18115] 9b80: 018a9c38 00000000 00000000 00000000 00000000 00000000 00000001 00000000 [ 953.227236][T18115] 9ba0: e08a9ba0 e08a9ba0 818753b0 5e800f3e 00000406 00000001 00000000 00000003 [ 953.227967][T18115] 9bc0: 843ef8a0 00100cca 00000000 e08a9cf0 e08a9c54 e08a9be0 804bd968 804bd45c [ 953.228468][T18115] 9be0: 00000000 5e800f3e 00000001 e08a9cf0 00000000 00000000 e08a9c2c e08a9c08 [ 953.229647][T18115] 9c00: 8042e9b0 8042e804 e08a9cf0 8260cac8 843ef8a0 20001000 84247900 00000000 [ 953.230630][T18115] 9c20: e08a9c54 5e800f3e 804bcde8 e08a9cf0 00000000 00000003 843ef8a0 84247900 [ 953.231602][T18115] 9c40: 00000000 00000000 e08a9cb4 e08a9c58 8047f368 804bd90c 8049445c 80479d1c [ 953.232431][T18115] 9c60: e08a9d24 83d84800 00000000 00000000 20001000 83f54300 e08a9cb4 e08a9c88 [ 953.233012][T18115] 9c80: 84247900 804943e4 fe0b1003 00000215 83d84800 20001000 843ef8a0 20001000 [ 953.234298][T18115] 9ca0: 83f54300 00000000 e08a9d64 e08a9cb8 80480c4c 8047f174 83f54340 ffffffff [ 953.235081][T18115] 9cc0: e08a9d28 20001100 81c66394 84f7350c 83f54340 20000000 20ffffff 84f7350c [ 953.236102][T18115] 9ce0: 00000000 ffffffff e08a9cf0 e08a9de8 843ef8a0 00000cc0 00020001 20001000 [ 953.237393][T18115] 9d00: 20001000 00000a15 84cd0800 84d54280 00000380 00000000 00000000 00000000 [ 953.238033][T18115] 9d20: 00000000 defb28f8 00000000 00000000 e08a9d64 5e800f3e 80480308 e08a9de8 [ 953.239220][T18115] 9d40: 20001100 00000215 00000a07 20001000 83f54300 00000002 e08a9dac e08a9d68 [ 953.239860][T18115] 9d60: 80215d94 80480880 b4e55c30 e8691587 1bda4f10 e6531e12 c4a8817e 83d84800 [ 953.240691][T18115] 9d80: 818a3788 8261d0e0 00000a07 20001100 e08a9de8 80215c4c 83d84800 00000180 [ 953.241172][T18115] 9da0: e08a9de4 e08a9db0 802161dc 80215c58 8027173c 690bd88a 6131c286 77dccf15 [ 953.242201][T18115] 9dc0: b4e55c30 818490c0 a0000013 ffffffff e08a9e1c 34be2ba0 e08a9eb4 e08a9de8 [ 953.242989][T18115] 9de0: 80200ae4 802161b0 20001100 e08a9f1c ffffffa0 ea0a8ff7 10b5d694 d393c27d [ 953.243470][T18115] 9e00: 6481da06 20001100 34be2ba0 1bdc6b95 00000180 e08a9eb4 4d22f74d e08a9e34 [ 953.244611][T18115] 9e20: 568ee372 818490c0 a0000013 ffffffff 8089c158 00000000 00000040 00000000 [ 953.245515][T18115] 9e40: 00000000 20001100 00000040 00000000 e08a9f70 807eaae8 f9617492 47e8e5cf [ 953.246370][T18115] 9e60: 1a6ad595 e08a9efc 817d3b78 c1a97372 1d598427 3e27c1bc 55db6910 c7ee6eb5 [ 953.247252][T18115] 9e80: 8c221bc9 5e800f3e 3d35f48c 00000000 e08a9f70 e08a9efc e08a9ebc 83d84800 [ 953.248511][T18115] 9ea0: 83d84800 00000180 e08a9f64 e08a9eb8 8099dd84 807eaa5c 82e4f5bc 61707865 [ 953.249334][T18115] 9ec0: 3320646e 79622d32 6b206574 ecd545d1 01719600 e59b64ec d511a7fa 86aa81cb [ 953.250654][T18115] 9ee0: 0649fe7c dc3b2892 fa09e3ec 00000002 00000000 00000000 00000000 ea0a8ff7 [ 953.251788][T18115] 9f00: 10b5d694 d393c27d 6481da06 34be2ba0 1bdc6b95 4d22f74d 568ee372 4853f53d [ 953.253066][T18115] 9f20: 23a382a3 1a62ea4e 4fe54cfc c7ee6eb6 8c221bc9 94364016 3d35f48c 5e800f3e [ 953.253978][T18115] 9f40: 8024c880 00000086 00000000 0014c2c8 00000180 80200288 e08a9fa4 e08a9f68 [ 953.255350][T18115] 9f60: 8099ea6c 8099dce4 0006b3f0 ecac8b10 00000000 00000000 20001100 00000086 [ 953.256814][T18115] 9f80: 00000001 00000000 0006b3f4 5e800f3e ffffffff 00000000 00000000 e08a9fa8 [ 953.258048][T18115] 9fa0: 80200060 8099e9f8 00000000 00000000 20001100 00000086 00000000 00000000 [ 953.259342][T18115] 9fc0: 00000000 00000000 0014c2c8 00000180 7ef1c32e 7ef1c32f 003d0f00 76bf90fc [ 953.260685][T18115] 9fe0: 76bf8f08 76bf8ef8 000167f8 00050bc0 60000010 20001100 00000000 00000000 [ 953.261732][T18115] Call trace: [ 953.262393][T18115] [<807e85ac>] (sg_init_one) from [<804c3dd4>] (zswap_decompress+0xbc/0x208) [ 953.263272][T18115] r7:841ce940 r6:dee1e718 r5:853394d8 r4:ff7fbefc [ 953.263975][T18115] [<804c3d18>] (zswap_decompress) from [<804c6a18>] (zswap_load+0x15c/0x198) [ 953.264718][T18115] r9:843ad540 r8:843ad540 r7:843ad544 r6:dee1e718 r5:00000001 r4:853394d8 [ 953.265801][T18115] [<804c68bc>] (zswap_load) from [<804bbbf4>] (swap_read_folio+0xa8/0x498) [ 953.266707][T18115] r9:84247900 r8:83d84800 r7:00000000 r6:e08a9b84 r5:00000001 r4:dee1e718 [ 953.267594][T18115] [<804bbb4c>] (swap_read_folio) from [<804bd614>] (swap_cluster_readahead+0x1c4/0x34c) [ 953.268768][T18115] r10:00000000 r9:00000007 r8:e08a9b83 r7:00000000 r6:00000000 r5:00100cca [ 953.269790][T18115] r4:00000001 [ 953.270204][T18115] [<804bd450>] (swap_cluster_readahead) from [<804bd968>] (swapin_readahead+0x68/0x4a8) [ 953.271780][T18115] r10:e08a9cf0 r9:00000000 r8:00100cca r7:843ef8a0 r6:00000003 r5:00000000 [ 953.273060][T18115] r4:00000001 [ 953.273575][T18115] [<804bd900>] (swapin_readahead) from [<8047f368>] (do_swap_page+0x200/0xcc4) [ 953.274650][T18115] r10:00000000 r9:00000000 r8:84247900 r7:843ef8a0 r6:00000003 r5:00000000 [ 953.275562][T18115] r4:e08a9cf0 [ 953.276324][T18115] [<8047f168>] (do_swap_page) from [<80480c4c>] (handle_mm_fault+0x3d8/0x12b8) [ 953.277607][T18115] r10:00000000 r9:83f54300 r8:20001000 r7:843ef8a0 r6:20001000 r5:83d84800 [ 953.279246][T18115] r4:00000215 [ 953.279625][T18115] [<80480874>] (handle_mm_fault) from [<80215d94>] (do_page_fault+0x148/0x3a8) [ 953.280231][T18115] r10:00000002 r9:83f54300 r8:20001000 r7:00000a07 r6:00000215 r5:20001100 [ 953.280697][T18115] r4:e08a9de8 [ 953.281183][T18115] [<80215c4c>] (do_page_fault) from [<802161dc>] (do_DataAbort+0x38/0xa8) [ 953.281960][T18115] r10:00000180 r9:83d84800 r8:80215c4c r7:e08a9de8 r6:20001100 r5:00000a07 [ 953.282671][T18115] r4:8261d0e0 [ 953.282900][T18115] [<802161a4>] (do_DataAbort) from [<80200ae4>] (__dabt_svc+0x44/0x60) [ 953.284159][T18115] Exception stack(0xe08a9de8 to 0xe08a9e30) [ 953.284922][T18115] 9de0: 20001100 e08a9f1c ffffffa0 ea0a8ff7 10b5d694 d393c27d [ 953.285790][T18115] 9e00: 6481da06 20001100 34be2ba0 1bdc6b95 00000180 e08a9eb4 4d22f74d e08a9e34 [ 953.286949][T18115] 9e20: 568ee372 818490c0 a0000013 ffffffff [ 953.287611][T18115] r8:34be2ba0 r7:e08a9e1c r6:ffffffff r5:a0000013 r4:818490c0 [ 953.288313][T18115] [<807eaa50>] (_copy_to_iter) from [<8099dd84>] (get_random_bytes_user+0xac/0x158) [ 953.289029][T18115] r10:00000180 r9:83d84800 r8:83d84800 r7:e08a9ebc r6:e08a9efc r5:e08a9f70 [ 953.290484][T18115] r4:00000000 [ 953.290995][T18115] [<8099dcd8>] (get_random_bytes_user) from [<8099ea6c>] (sys_getrandom+0x80/0xf8) [ 953.291721][T18115] r8:80200288 r7:00000180 r6:0014c2c8 r5:00000000 r4:00000086 [ 953.292393][T18115] [<8099e9ec>] (sys_getrandom) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 953.293658][T18115] Exception stack(0xe08a9fa8 to 0xe08a9ff0) [ 953.294630][T18115] 9fa0: 00000000 00000000 20001100 00000086 00000000 00000000 [ 953.296215][T18115] 9fc0: 00000000 00000000 0014c2c8 00000180 7ef1c32e 7ef1c32f 003d0f00 76bf90fc [ 953.297926][T18115] 9fe0: 76bf8f08 76bf8ef8 000167f8 00050bc0 [ 953.298672][T18115] r4:00000000 [ 953.299711][T18115] Code: 1a000004 e1822003 e8860094 e89da8f0 (e7f001f2) [ 953.301470][T18115] ---[ end trace 0000000000000000 ]--- [ 953.302729][T18115] Kernel panic - not syncing: Fatal exception [ 953.305608][T18115] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:15:58 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=7eefd53c R03=7eefd534 R04=00000000 R05=7eefd534 R06=00000000 R07=00000109 R08=00000000 R09=00000000 R10=7eefd670 R11=00000735 R12=00000000 R13=dfe1dff8 R14=0007ad28 R15=ffff0008 PSR=20000093 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84255440 R01=00000065 R02=eb355000 R03=eb355018 R04=8285b303 R05=84255440 R06=809946c8 R07=8285b331 R08=8285b2e0 R09=00000052 R10=60000193 R11=e08a97a4 R12=00000002 R13=e08a9798 R14=82750450 R15=809946d8 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000