[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts. 2021/03/31 19:40:22 fuzzer started 2021/03/31 19:40:23 dialing manager at 10.128.0.163:39503 2021/03/31 19:40:24 syscalls: 3557 2021/03/31 19:40:24 code coverage: enabled 2021/03/31 19:40:24 comparison tracing: enabled 2021/03/31 19:40:24 extra coverage: enabled 2021/03/31 19:40:24 setuid sandbox: enabled 2021/03/31 19:40:24 namespace sandbox: enabled 2021/03/31 19:40:24 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/31 19:40:24 fault injection: enabled 2021/03/31 19:40:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/31 19:40:24 net packet injection: enabled 2021/03/31 19:40:24 net device setup: enabled 2021/03/31 19:40:24 concurrency sanitizer: enabled 2021/03/31 19:40:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/31 19:40:24 USB emulation: enabled 2021/03/31 19:40:24 hci packet injection: enabled 2021/03/31 19:40:24 wifi device emulation: enabled 2021/03/31 19:40:24 802.15.4 emulation: enabled 2021/03/31 19:40:26 suppressing KCSAN reports in functions: 'do_nanosleep' 'blk_mq_sched_dispatch_requests' 'ext4_writepages' '__xa_clear_mark' '__send_signal' 'generic_write_end' 'xas_clear_mark' 'ext4_free_inodes_count' 'ext4_free_inode' 'ext4_mb_regular_allocator' 'do_select' 'wbt_issue' '__process_echoes' 'ext4_alloc_file_blocks' 'n_tty_receive_buf_common' 'expire_timers' 'blk_mq_rq_ctx_init' '__mod_timer' 'blk_mq_dispatch_rq_list' '__ext4_new_inode' 2021/03/31 19:40:26 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/31 19:40:26 fetching corpus: 45, signal 19694/23440 (executing program) 2021/03/31 19:40:26 fetching corpus: 95, signal 31371/36756 (executing program) 2021/03/31 19:40:26 fetching corpus: 144, signal 41605/48519 (executing program) 2021/03/31 19:40:26 fetching corpus: 193, signal 53407/61705 (executing program) 2021/03/31 19:40:26 fetching corpus: 242, signal 59951/69687 (executing program) 2021/03/31 19:40:27 fetching corpus: 292, signal 67541/78633 (executing program) 2021/03/31 19:40:27 fetching corpus: 342, signal 74563/86886 (executing program) 2021/03/31 19:40:27 fetching corpus: 392, signal 79077/92677 (executing program) 2021/03/31 19:40:27 fetching corpus: 442, signal 83731/98578 (executing program) 2021/03/31 19:40:27 fetching corpus: 492, signal 86515/102672 (executing program) 2021/03/31 19:40:27 fetching corpus: 542, signal 92483/109731 (executing program) 2021/03/31 19:40:27 fetching corpus: 592, signal 96491/114896 (executing program) 2021/03/31 19:40:27 fetching corpus: 642, signal 100295/119790 (executing program) 2021/03/31 19:40:27 fetching corpus: 692, signal 103365/123972 (executing program) 2021/03/31 19:40:27 fetching corpus: 742, signal 106311/128050 (executing program) 2021/03/31 19:40:27 fetching corpus: 792, signal 110189/132879 (executing program) 2021/03/31 19:40:27 fetching corpus: 841, signal 115105/138610 (executing program) 2021/03/31 19:40:27 fetching corpus: 891, signal 117896/142419 (executing program) 2021/03/31 19:40:28 fetching corpus: 941, signal 119717/145338 (executing program) 2021/03/31 19:40:28 fetching corpus: 991, signal 124240/150597 (executing program) 2021/03/31 19:40:28 fetching corpus: 1041, signal 126137/153495 (executing program) 2021/03/31 19:40:28 fetching corpus: 1090, signal 128202/156511 (executing program) 2021/03/31 19:40:28 fetching corpus: 1140, signal 130121/159368 (executing program) 2021/03/31 19:40:28 fetching corpus: 1190, signal 134066/163922 (executing program) 2021/03/31 19:40:28 fetching corpus: 1240, signal 136350/166965 (executing program) 2021/03/31 19:40:28 fetching corpus: 1290, signal 139345/170690 (executing program) 2021/03/31 19:40:28 fetching corpus: 1340, signal 142271/174298 (executing program) 2021/03/31 19:40:28 fetching corpus: 1390, signal 143828/176715 (executing program) 2021/03/31 19:40:28 fetching corpus: 1440, signal 146208/179798 (executing program) 2021/03/31 19:40:28 fetching corpus: 1490, signal 148442/182698 (executing program) 2021/03/31 19:40:28 fetching corpus: 1540, signal 150431/185432 (executing program) 2021/03/31 19:40:28 fetching corpus: 1590, signal 153724/189163 (executing program) 2021/03/31 19:40:28 fetching corpus: 1640, signal 157064/192891 (executing program) 2021/03/31 19:40:28 fetching corpus: 1690, signal 158911/195416 (executing program) 2021/03/31 19:40:29 fetching corpus: 1740, signal 160236/197472 (executing program) 2021/03/31 19:40:29 fetching corpus: 1790, signal 162130/199991 (executing program) 2021/03/31 19:40:29 fetching corpus: 1840, signal 164123/202592 (executing program) 2021/03/31 19:40:29 fetching corpus: 1890, signal 165678/204776 (executing program) 2021/03/31 19:40:29 fetching corpus: 1940, signal 167459/207097 (executing program) 2021/03/31 19:40:29 fetching corpus: 1990, signal 169262/209434 (executing program) 2021/03/31 19:40:29 fetching corpus: 2040, signal 172399/212842 (executing program) 2021/03/31 19:40:29 fetching corpus: 2090, signal 175318/215951 (executing program) 2021/03/31 19:40:29 fetching corpus: 2139, signal 177181/218288 (executing program) 2021/03/31 19:40:29 fetching corpus: 2189, signal 178701/220322 (executing program) 2021/03/31 19:40:29 fetching corpus: 2239, signal 180264/222349 (executing program) 2021/03/31 19:40:29 fetching corpus: 2289, signal 182202/224605 (executing program) 2021/03/31 19:40:29 fetching corpus: 2339, signal 184410/227094 (executing program) 2021/03/31 19:40:29 fetching corpus: 2389, signal 186183/229219 (executing program) 2021/03/31 19:40:29 fetching corpus: 2439, signal 187394/230989 (executing program) 2021/03/31 19:40:30 fetching corpus: 2489, signal 188678/232739 (executing program) 2021/03/31 19:40:30 fetching corpus: 2539, signal 190116/234621 (executing program) 2021/03/31 19:40:30 fetching corpus: 2589, signal 191912/236936 (executing program) 2021/03/31 19:40:30 fetching corpus: 2639, signal 193144/238652 (executing program) 2021/03/31 19:40:30 fetching corpus: 2689, signal 194493/240451 (executing program) 2021/03/31 19:40:30 fetching corpus: 2739, signal 195793/242119 (executing program) 2021/03/31 19:40:30 fetching corpus: 2789, signal 197560/244058 (executing program) 2021/03/31 19:40:30 fetching corpus: 2839, signal 198748/245673 (executing program) 2021/03/31 19:40:30 fetching corpus: 2889, signal 199942/247297 (executing program) 2021/03/31 19:40:30 fetching corpus: 2938, signal 201067/248822 (executing program) 2021/03/31 19:40:30 fetching corpus: 2988, signal 202705/250644 (executing program) 2021/03/31 19:40:30 fetching corpus: 3038, signal 205684/253272 (executing program) 2021/03/31 19:40:30 fetching corpus: 3088, signal 207039/254900 (executing program) 2021/03/31 19:40:30 fetching corpus: 3138, signal 208511/256606 (executing program) 2021/03/31 19:40:30 fetching corpus: 3188, signal 209520/257941 (executing program) 2021/03/31 19:40:30 fetching corpus: 3238, signal 210557/259310 (executing program) 2021/03/31 19:40:31 fetching corpus: 3288, signal 212020/260955 (executing program) 2021/03/31 19:40:31 fetching corpus: 3338, signal 213480/262548 (executing program) 2021/03/31 19:40:31 fetching corpus: 3388, signal 214883/264119 (executing program) 2021/03/31 19:40:31 fetching corpus: 3438, signal 215812/265409 (executing program) 2021/03/31 19:40:31 fetching corpus: 3488, signal 216894/266738 (executing program) 2021/03/31 19:40:31 fetching corpus: 3537, signal 217663/267908 (executing program) 2021/03/31 19:40:31 fetching corpus: 3587, signal 219759/269786 (executing program) 2021/03/31 19:40:31 fetching corpus: 3637, signal 221438/271395 (executing program) 2021/03/31 19:40:31 fetching corpus: 3687, signal 222316/272550 (executing program) 2021/03/31 19:40:31 fetching corpus: 3737, signal 223580/273887 (executing program) 2021/03/31 19:40:31 fetching corpus: 3787, signal 225514/275548 (executing program) 2021/03/31 19:40:31 fetching corpus: 3837, signal 227633/277365 (executing program) 2021/03/31 19:40:31 fetching corpus: 3887, signal 228698/278570 (executing program) 2021/03/31 19:40:31 fetching corpus: 3937, signal 229757/279691 (executing program) 2021/03/31 19:40:31 fetching corpus: 3987, signal 231370/281082 (executing program) 2021/03/31 19:40:31 fetching corpus: 4037, signal 232798/282362 (executing program) 2021/03/31 19:40:32 fetching corpus: 4087, signal 233840/283473 (executing program) 2021/03/31 19:40:32 fetching corpus: 4137, signal 234619/284458 (executing program) 2021/03/31 19:40:32 fetching corpus: 4187, signal 235974/285669 (executing program) 2021/03/31 19:40:32 fetching corpus: 4237, signal 236844/286705 (executing program) 2021/03/31 19:40:32 fetching corpus: 4287, signal 238523/288089 (executing program) 2021/03/31 19:40:32 fetching corpus: 4337, signal 239547/289094 (executing program) 2021/03/31 19:40:32 fetching corpus: 4387, signal 240945/290323 (executing program) 2021/03/31 19:40:32 fetching corpus: 4437, signal 242190/291498 (executing program) 2021/03/31 19:40:32 fetching corpus: 4487, signal 242905/292330 (executing program) 2021/03/31 19:40:32 fetching corpus: 4537, signal 243820/293275 (executing program) 2021/03/31 19:40:32 fetching corpus: 4587, signal 244994/294353 (executing program) 2021/03/31 19:40:32 fetching corpus: 4637, signal 246239/295412 (executing program) 2021/03/31 19:40:32 fetching corpus: 4687, signal 247518/296456 (executing program) 2021/03/31 19:40:32 fetching corpus: 4737, signal 248720/297456 (executing program) 2021/03/31 19:40:32 fetching corpus: 4787, signal 249301/298208 (executing program) 2021/03/31 19:40:33 fetching corpus: 4837, signal 250318/299091 (executing program) 2021/03/31 19:40:33 fetching corpus: 4887, signal 252442/300384 (executing program) 2021/03/31 19:40:33 fetching corpus: 4937, signal 253590/301329 (executing program) 2021/03/31 19:40:33 fetching corpus: 4987, signal 254697/302260 (executing program) 2021/03/31 19:40:33 fetching corpus: 5037, signal 255873/303149 (executing program) 2021/03/31 19:40:33 fetching corpus: 5087, signal 256831/304035 (executing program) 2021/03/31 19:40:33 fetching corpus: 5137, signal 258152/304976 (executing program) 2021/03/31 19:40:33 fetching corpus: 5187, signal 260027/306138 (executing program) 2021/03/31 19:40:33 fetching corpus: 5237, signal 261388/307076 (executing program) 2021/03/31 19:40:33 fetching corpus: 5286, signal 262033/307745 (executing program) 2021/03/31 19:40:33 fetching corpus: 5335, signal 262892/308485 (executing program) 2021/03/31 19:40:33 fetching corpus: 5385, signal 263585/309137 (executing program) 2021/03/31 19:40:33 fetching corpus: 5435, signal 264247/309804 (executing program) 2021/03/31 19:40:33 fetching corpus: 5485, signal 265211/310534 (executing program) 2021/03/31 19:40:33 fetching corpus: 5535, signal 266115/311209 (executing program) 2021/03/31 19:40:34 fetching corpus: 5585, signal 266661/311759 (executing program) 2021/03/31 19:40:34 fetching corpus: 5635, signal 267469/312418 (executing program) 2021/03/31 19:40:34 fetching corpus: 5685, signal 268547/313118 (executing program) 2021/03/31 19:40:34 fetching corpus: 5734, signal 269242/313769 (executing program) 2021/03/31 19:40:34 fetching corpus: 5784, signal 270441/314484 (executing program) 2021/03/31 19:40:34 fetching corpus: 5834, signal 271499/315170 (executing program) 2021/03/31 19:40:34 fetching corpus: 5884, signal 272552/315849 (executing program) 2021/03/31 19:40:34 fetching corpus: 5933, signal 274271/316729 (executing program) 2021/03/31 19:40:34 fetching corpus: 5983, signal 275119/317332 (executing program) 2021/03/31 19:40:34 fetching corpus: 6033, signal 275851/317904 (executing program) 2021/03/31 19:40:34 fetching corpus: 6083, signal 276637/318430 (executing program) 2021/03/31 19:40:34 fetching corpus: 6132, signal 277513/318987 (executing program) 2021/03/31 19:40:34 fetching corpus: 6182, signal 278539/319628 (executing program) 2021/03/31 19:40:34 fetching corpus: 6232, signal 279632/320249 (executing program) 2021/03/31 19:40:34 fetching corpus: 6282, signal 280383/320764 (executing program) 2021/03/31 19:40:35 fetching corpus: 6332, signal 281380/321332 (executing program) 2021/03/31 19:40:35 fetching corpus: 6382, signal 282732/321989 (executing program) 2021/03/31 19:40:35 fetching corpus: 6432, signal 284490/322684 (executing program) 2021/03/31 19:40:35 fetching corpus: 6480, signal 285268/323118 (executing program) 2021/03/31 19:40:35 fetching corpus: 6530, signal 286233/323632 (executing program) 2021/03/31 19:40:35 fetching corpus: 6580, signal 286948/324064 (executing program) 2021/03/31 19:40:35 fetching corpus: 6629, signal 287702/324478 (executing program) 2021/03/31 19:40:35 fetching corpus: 6679, signal 288545/324926 (executing program) 2021/03/31 19:40:35 fetching corpus: 6729, signal 289739/325425 (executing program) 2021/03/31 19:40:35 fetching corpus: 6779, signal 290636/325830 (executing program) 2021/03/31 19:40:35 fetching corpus: 6829, signal 291196/326152 (executing program) 2021/03/31 19:40:35 fetching corpus: 6879, signal 292330/326613 (executing program) 2021/03/31 19:40:35 fetching corpus: 6929, signal 293296/327005 (executing program) 2021/03/31 19:40:35 fetching corpus: 6979, signal 294161/327398 (executing program) 2021/03/31 19:40:35 fetching corpus: 7029, signal 295027/327752 (executing program) 2021/03/31 19:40:36 fetching corpus: 7079, signal 295875/328100 (executing program) 2021/03/31 19:40:36 fetching corpus: 7129, signal 296744/328439 (executing program) 2021/03/31 19:40:36 fetching corpus: 7179, signal 297394/328742 (executing program) 2021/03/31 19:40:36 fetching corpus: 7228, signal 298077/329070 (executing program) 2021/03/31 19:40:36 fetching corpus: 7278, signal 298677/329357 (executing program) 2021/03/31 19:40:36 fetching corpus: 7327, signal 299681/329669 (executing program) 2021/03/31 19:40:36 fetching corpus: 7377, signal 301199/330063 (executing program) 2021/03/31 19:40:36 fetching corpus: 7427, signal 301834/330309 (executing program) 2021/03/31 19:40:36 fetching corpus: 7477, signal 302429/330552 (executing program) 2021/03/31 19:40:36 fetching corpus: 7527, signal 303323/330819 (executing program) 2021/03/31 19:40:36 fetching corpus: 7577, signal 303978/331053 (executing program) 2021/03/31 19:40:36 fetching corpus: 7627, signal 304827/331299 (executing program) 2021/03/31 19:40:37 fetching corpus: 7677, signal 305759/331550 (executing program) 2021/03/31 19:40:37 fetching corpus: 7727, signal 306702/331778 (executing program) 2021/03/31 19:40:37 fetching corpus: 7777, signal 307342/331956 (executing program) 2021/03/31 19:40:37 fetching corpus: 7827, signal 307848/332166 (executing program) 2021/03/31 19:40:37 fetching corpus: 7877, signal 308373/332368 (executing program) 2021/03/31 19:40:37 fetching corpus: 7927, signal 309185/332528 (executing program) 2021/03/31 19:40:37 fetching corpus: 7977, signal 309915/332711 (executing program) 2021/03/31 19:40:37 fetching corpus: 8027, signal 310962/332929 (executing program) 2021/03/31 19:40:37 fetching corpus: 8077, signal 311504/333084 (executing program) 2021/03/31 19:40:37 fetching corpus: 8127, signal 311957/333224 (executing program) 2021/03/31 19:40:37 fetching corpus: 8177, signal 312733/333354 (executing program) 2021/03/31 19:40:37 fetching corpus: 8227, signal 313477/333506 (executing program) 2021/03/31 19:40:37 fetching corpus: 8277, signal 314391/333538 (executing program) 2021/03/31 19:40:37 fetching corpus: 8327, signal 315420/333538 (executing program) 2021/03/31 19:40:37 fetching corpus: 8377, signal 316325/333538 (executing program) 2021/03/31 19:40:37 fetching corpus: 8427, signal 316930/333555 (executing program) 2021/03/31 19:40:37 fetching corpus: 8477, signal 317396/333558 (executing program) 2021/03/31 19:40:38 fetching corpus: 8527, signal 318251/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8577, signal 318851/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8626, signal 320064/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8675, signal 320766/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8725, signal 321284/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8775, signal 322070/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8824, signal 322676/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8874, signal 323905/333587 (executing program) 2021/03/31 19:40:38 fetching corpus: 8924, signal 324584/333593 (executing program) 2021/03/31 19:40:38 fetching corpus: 8974, signal 325235/333593 (executing program) 2021/03/31 19:40:38 fetching corpus: 9024, signal 325929/333593 (executing program) 2021/03/31 19:40:38 fetching corpus: 9074, signal 326362/333595 (executing program) 2021/03/31 19:40:38 fetching corpus: 9124, signal 327058/333601 (executing program) 2021/03/31 19:40:38 fetching corpus: 9174, signal 327837/333601 (executing program) 2021/03/31 19:40:38 fetching corpus: 9224, signal 328473/333601 (executing program) 2021/03/31 19:40:39 fetching corpus: 9274, signal 329182/333601 (executing program) 2021/03/31 19:40:39 fetching corpus: 9324, signal 329662/333601 (executing program) 2021/03/31 19:40:39 fetching corpus: 9374, signal 330294/333616 (executing program) 2021/03/31 19:40:39 fetching corpus: 9385, signal 330479/333621 (executing program) 2021/03/31 19:40:39 fetching corpus: 9385, signal 330479/333621 (executing program) 2021/03/31 19:40:40 starting 6 fuzzer processes 19:40:40 executing program 0: syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 19:40:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f0000000040)={'tunl0\x00', 0x0}) 19:40:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 19:40:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="8269a28a24", 0x26}], 0x1}}], 0x1, 0x4000020) 19:40:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84, 0x0, 0x900}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) syzkaller login: [ 50.358966][ T8383] IPVS: ftp: loaded support on port[0] = 21 [ 50.434687][ T8383] chnl_net:caif_netlink_parms(): no params data found [ 50.463636][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.471294][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.480439][ T8383] device bridge_slave_0 entered promiscuous mode [ 50.495392][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.507967][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.515774][ T8383] device bridge_slave_1 entered promiscuous mode [ 50.531683][ T8385] IPVS: ftp: loaded support on port[0] = 21 [ 50.541945][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.554399][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.575168][ T8383] team0: Port device team_slave_0 added [ 50.586578][ T8383] team0: Port device team_slave_1 added [ 50.609167][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.619808][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.655901][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.669106][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.676727][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.714495][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.761822][ T8383] device hsr_slave_0 entered promiscuous mode [ 50.772440][ T8383] device hsr_slave_1 entered promiscuous mode [ 50.789831][ T8387] IPVS: ftp: loaded support on port[0] = 21 [ 50.823735][ T8385] chnl_net:caif_netlink_parms(): no params data found [ 50.903330][ T8383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.945280][ T8389] IPVS: ftp: loaded support on port[0] = 21 [ 50.955021][ T8383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.976282][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.984413][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.992911][ T8385] device bridge_slave_0 entered promiscuous mode [ 51.004147][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 51.013402][ T8383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.024397][ T8383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.033976][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.042799][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.051551][ T8385] device bridge_slave_1 entered promiscuous mode [ 51.106174][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.113520][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.121702][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.129179][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.155346][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.169130][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.184416][ T8391] IPVS: ftp: loaded support on port[0] = 21 [ 51.257265][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.265732][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.274207][ T8387] device bridge_slave_0 entered promiscuous mode [ 51.285103][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.293028][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.301473][ T8387] device bridge_slave_1 entered promiscuous mode [ 51.319214][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.329998][ T8385] team0: Port device team_slave_0 added [ 51.343099][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 51.354867][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.356201][ T8395] IPVS: ftp: loaded support on port[0] = 21 [ 51.363353][ T8385] team0: Port device team_slave_1 added [ 51.375929][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.442168][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.450027][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.478800][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.495913][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.504324][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.532422][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.547691][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.556024][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.565342][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 51.575697][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.583588][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.592223][ T8389] device bridge_slave_0 entered promiscuous mode [ 51.600663][ T8387] team0: Port device team_slave_0 added [ 51.620164][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.627861][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.635498][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.645312][ T8389] device bridge_slave_1 entered promiscuous mode [ 51.657325][ T8387] team0: Port device team_slave_1 added [ 51.677067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.687484][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.705819][ T8385] device hsr_slave_0 entered promiscuous mode [ 51.713240][ T8385] device hsr_slave_1 entered promiscuous mode [ 51.720432][ T8385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.728678][ T8385] Cannot create hsr debugfs directory [ 51.736555][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.746054][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.755801][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.764378][ T8859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.779204][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.789709][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.796969][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.826644][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.839021][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 51.851813][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.861707][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.871195][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.879756][ T8859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.890255][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.900247][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.907940][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.938079][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.982754][ T8387] device hsr_slave_0 entered promiscuous mode [ 51.994276][ T8387] device hsr_slave_1 entered promiscuous mode [ 52.004326][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.014271][ T8387] Cannot create hsr debugfs directory [ 52.033017][ T8395] chnl_net:caif_netlink_parms(): no params data found [ 52.048184][ T8389] team0: Port device team_slave_0 added [ 52.071003][ T8389] team0: Port device team_slave_1 added [ 52.086398][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.119982][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.132629][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.162782][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.178361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.203491][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.211431][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.241282][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.265364][ T8389] device hsr_slave_0 entered promiscuous mode [ 52.272215][ T8389] device hsr_slave_1 entered promiscuous mode [ 52.279399][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.288456][ T8389] Cannot create hsr debugfs directory [ 52.295782][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.307420][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.317178][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.327815][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.339226][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.347041][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.354863][ T8391] device bridge_slave_0 entered promiscuous mode [ 52.369963][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.377777][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.385366][ T8395] device bridge_slave_0 entered promiscuous mode [ 52.396239][ T35] Bluetooth: hci0: command 0x0409 tx timeout [ 52.408194][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.418240][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.426799][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.436939][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.445169][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.453745][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.460895][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.468524][ T8391] device bridge_slave_1 entered promiscuous mode [ 52.477007][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.484044][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.491563][ T8395] device bridge_slave_1 entered promiscuous mode [ 52.508195][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.519542][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.546470][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.554595][ T8395] team0: Port device team_slave_0 added [ 52.560681][ T9129] Bluetooth: hci1: command 0x0409 tx timeout [ 52.577373][ T8395] team0: Port device team_slave_1 added [ 52.588865][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.609598][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.623670][ T8387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.632776][ T8387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.647310][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.654973][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.681156][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.693766][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.700829][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.727333][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.736264][ T3879] Bluetooth: hci2: command 0x0409 tx timeout [ 52.750950][ T8387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.759636][ T8387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.779548][ T8395] device hsr_slave_0 entered promiscuous mode [ 52.787153][ T8395] device hsr_slave_1 entered promiscuous mode [ 52.793765][ T8395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.801626][ T8395] Cannot create hsr debugfs directory [ 52.807934][ T8385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.816365][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.823735][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.833201][ T8391] team0: Port device team_slave_0 added [ 52.848355][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.860541][ T8385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.870433][ T8391] team0: Port device team_slave_1 added [ 52.893208][ T8385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.904245][ T8385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.915251][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.922776][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.955734][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.967261][ T9483] Bluetooth: hci3: command 0x0409 tx timeout [ 52.979622][ T8389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.988791][ T8389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.003894][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.011891][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.039173][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.063944][ T8391] device hsr_slave_0 entered promiscuous mode [ 53.070501][ T8391] device hsr_slave_1 entered promiscuous mode [ 53.078250][ T8391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.085809][ T8391] Cannot create hsr debugfs directory [ 53.107281][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.115806][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.126269][ T8389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.133120][ T9129] Bluetooth: hci4: command 0x0409 tx timeout [ 53.142874][ T8389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.198784][ T8383] device veth0_vlan entered promiscuous mode [ 53.206105][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.214281][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.224005][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.232061][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.243183][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.267265][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.279655][ T9129] Bluetooth: hci5: command 0x0409 tx timeout [ 53.287777][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.298044][ T8383] device veth1_vlan entered promiscuous mode [ 53.305329][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.339673][ T8391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.350510][ T8391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.382022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.391587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.403942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.412935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.429985][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.437604][ T8391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.447489][ T8383] device veth0_macvtap entered promiscuous mode [ 53.454310][ T8391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.474190][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.485264][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.501832][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.509857][ T8383] device veth1_macvtap entered promiscuous mode [ 53.524343][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.539343][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.549374][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.557670][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.565507][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.573813][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.581945][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.591095][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.599357][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.607578][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.615055][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.623350][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.637420][ T8385] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.652833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.661780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.670707][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.678043][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.686439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.694809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.703549][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.710589][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.718416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.727907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.751578][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.761683][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.770931][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.779992][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.788989][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.796125][ T9575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.803995][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.813025][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.821417][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.828499][ T9575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.836616][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.845551][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.854489][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.862995][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.871916][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.880805][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.889432][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.898070][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.906454][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.913490][ T9575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.925472][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.934533][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.943074][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.950279][ T9575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.958251][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.967044][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.975747][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.989981][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.019056][ T8387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.030754][ T8387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.042879][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.051329][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.059627][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.067831][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.076605][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.085204][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.094325][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.103601][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.112251][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.121305][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.130272][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.139150][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.148019][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.156940][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.164006][ T9575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.172220][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.181277][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.189943][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.197003][ T9575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.204681][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.213817][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.222740][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.231265][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.240002][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.248551][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.256885][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.264566][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.272748][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.280736][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.305715][ T8385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.316452][ T8385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.330782][ T8383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.340184][ T8383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.349025][ T8383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.357916][ T8383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.371595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.381687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.390208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.400252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.409103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.418955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.427184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.435445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.444869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.453433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.463081][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.471531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.475987][ T9575] Bluetooth: hci0: command 0x041b tx timeout [ 54.482191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.493566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.503159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.511632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.521489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.530142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.539936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.548278][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.558428][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.566619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.574362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.583925][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.613080][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.620808][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.629414][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.637443][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.651052][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.659303][ T8859] Bluetooth: hci1: command 0x041b tx timeout [ 54.661274][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.695063][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.706006][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.713498][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.722747][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.730641][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.739608][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.760709][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.773513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.794776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.795993][ T9697] Bluetooth: hci2: command 0x041b tx timeout [ 54.814612][ T8387] device veth0_vlan entered promiscuous mode [ 54.825815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.833966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.843551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.852593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.866802][ T3178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.874630][ T3178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.890555][ T8387] device veth1_vlan entered promiscuous mode [ 54.908496][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.923363][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.932352][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.941258][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.965882][ T3178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.974753][ T8385] device veth0_vlan entered promiscuous mode [ 54.981131][ T3178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.989842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.998080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.005971][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.013485][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.021979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.030541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.035850][ T9129] Bluetooth: hci3: command 0x041b tx timeout [ 55.039355][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.052802][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.063216][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.070594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.078753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.101926][ T8387] device veth0_macvtap entered promiscuous mode [ 55.113925][ T8389] device veth0_vlan entered promiscuous mode [ 55.131745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.142078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.151770][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.160785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.169767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.178625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.188940][ T8385] device veth1_vlan entered promiscuous mode [ 55.195952][ T9697] Bluetooth: hci4: command 0x041b tx timeout [ 55.196579][ T8387] device veth1_macvtap entered promiscuous mode [ 55.224159][ T8389] device veth1_vlan entered promiscuous mode [ 55.233318][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.241693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.249944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.258621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.266632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.274237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.283063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.291837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.300983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.311018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.319502][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.326553][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.334538][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.343110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.351513][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.355793][ T9697] Bluetooth: hci5: command 0x041b tx timeout [ 55.358549][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.373472][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.381162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.388878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.402349][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.413927][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.424832][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.433689][ T8395] device veth0_vlan entered promiscuous mode [ 55.442968][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.451539][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.460690][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.470371][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.479340][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.493105][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 55.504049][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.515053][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.530892][ T8395] device veth1_vlan entered promiscuous mode [ 55.545860][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.554186][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.562799][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.571006][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.579664][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.588360][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.597453][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.606587][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.615075][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.623975][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.632516][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.641192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.658689][ T8387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.668834][ T8387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.677998][ T8387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.687195][ T8387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.697954][ T8391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.709147][ T8391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.717656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.726315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.740788][ T8389] device veth0_macvtap entered promiscuous mode [ 55.762405][ T8385] device veth0_macvtap entered promiscuous mode [ 55.769869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.778481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.787510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.797185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.809029][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.817562][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.826270][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.834749][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.846434][ T8389] device veth1_macvtap entered promiscuous mode [ 55.859991][ T8385] device veth1_macvtap entered promiscuous mode [ 55.869013][ T8395] device veth0_macvtap entered promiscuous mode [ 55.881258][ T8395] device veth1_macvtap entered promiscuous mode [ 55.900952][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.912783][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.924518][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.938073][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.949118][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.960069][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.967463][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.975494][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 19:40:47 executing program 0: syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 55.984114][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.992182][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.008867][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.016816][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.046067][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.055156][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.084865][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.114104][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.124097][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.134995][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.146578][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.154929][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.165400][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.175694][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.186235][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.196130][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.207096][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.217873][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.229896][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.240726][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.249836][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.259022][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.271464][ T8389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.281102][ T8389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.290908][ T8389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.300170][ T8389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.311409][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.322050][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.332555][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.343583][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.353619][ T8395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.364456][ T8395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.375719][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.384441][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.395660][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.406111][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.416606][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.426688][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.437555][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.447427][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 56.458006][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.468954][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.483356][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.494392][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.504880][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.515454][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.526357][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.536961][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.546990][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 56.557718][ T8859] Bluetooth: hci0: command 0x040f tx timeout [ 56.558182][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.574961][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.582515][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.591185][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.600501][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.609267][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.618023][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.627269][ T9741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.642178][ T1929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.653590][ T1929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.669439][ T8395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684270][ T8395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.693552][ T8395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.702432][ T8395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.717372][ T8859] Bluetooth: hci1: command 0x040f tx timeout [ 56.725029][ T8385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.734637][ T8385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.743941][ T8385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753184][ T8385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.776684][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.786505][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.796864][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.818160][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.837208][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.850422][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 19:40:48 executing program 0: syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 56.877574][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.887277][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.897292][ T8391] device veth0_vlan entered promiscuous mode [ 56.906907][ T8859] Bluetooth: hci2: command 0x040f tx timeout 19:40:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f0000000040)={'tunl0\x00', 0x0}) [ 56.938141][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.950957][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.974655][ T8391] device veth1_vlan entered promiscuous mode 19:40:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f0000000040)={'tunl0\x00', 0x0}) [ 56.999725][ T1929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.029262][ T1929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.053773][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.062035][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.075912][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.084999][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.095463][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:40:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f0000000040)={'tunl0\x00', 0x0}) [ 57.104699][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.113630][ T3178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.117058][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.126024][ T9129] Bluetooth: hci3: command 0x040f tx timeout [ 57.141913][ T3178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.156282][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.174217][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.191198][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 19:40:49 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) [ 57.199931][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.208535][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.218054][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.232223][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.246241][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.261075][ T8391] device veth0_macvtap entered promiscuous mode [ 57.275965][ T3640] Bluetooth: hci4: command 0x040f tx timeout [ 57.289172][ T3178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.301952][ T8391] device veth1_macvtap entered promiscuous mode 19:40:49 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) [ 57.304128][ T3178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.347570][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.371475][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.396876][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.425531][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.435627][ T9697] Bluetooth: hci5: command 0x040f tx timeout [ 57.446935][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.469940][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490709][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.512661][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.533752][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 57.555666][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.595186][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.623039][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.633426][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.662533][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.682581][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.701216][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.732158][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.768945][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.783846][ T9847] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.801469][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.840927][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.863785][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.890047][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.913787][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.967540][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.979024][ T8391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 57.998357][ T8391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:40:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:49 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) [ 58.021734][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.036337][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.058024][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.100083][ T8391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.114109][ C1] hrtimer: interrupt took 27769 ns [ 58.130520][ T8391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 19:40:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 58.161232][ T8391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.215304][ T8391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.360999][ T3178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.379715][ T3178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.411364][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.420877][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.437880][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.446982][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:40:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="8269a28a24", 0x26}], 0x1}}], 0x1, 0x4000020) [ 58.635665][ T9698] Bluetooth: hci0: command 0x0419 tx timeout 19:40:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:50 executing program 0: syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 19:40:50 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) 19:40:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="8269a28a24", 0x26}], 0x1}}], 0x1, 0x4000020) 19:40:50 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) [ 58.805728][ T8786] Bluetooth: hci1: command 0x0419 tx timeout 19:40:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="8269a28a24", 0x26}], 0x1}}], 0x1, 0x4000020) 19:40:50 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) 19:40:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 19:40:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 58.957003][ T8786] Bluetooth: hci2: command 0x0419 tx timeout 19:40:50 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x0) 19:40:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 19:40:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.195290][ T9698] Bluetooth: hci3: command 0x0419 tx timeout [ 59.355238][ T9698] Bluetooth: hci4: command 0x0419 tx timeout [ 59.515346][ T9698] Bluetooth: hci5: command 0x0419 tx timeout 19:40:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 19:40:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}, {r1}, {r2}], 0x3, 0x1) 19:40:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb980527321e2869d5a278e0c76341fc91aa49822888e0cf56c240d7c7be702d8befbe979d75e85aa775be21ac"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:51 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 19:40:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) readv(r0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 19:40:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}, {r1}, {r2}], 0x3, 0x1) 19:40:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 19:40:51 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 19:40:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}, {r1}, {r2}], 0x3, 0x1) 19:40:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x80045440, 0x0) 19:40:51 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:51 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 19:40:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x80045440, 0x0) 19:40:51 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="ddd8d11e58b9", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "822b2a", 0x30, 0x67, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], "21ee5214ebefb592f5d8fbdab0c0ea805e438e3046128e45862eee06272e37385bf6ec13d562dcef962b81522c39b2ab"}}}}}, 0x0) 19:40:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}, {r1}, {r2}], 0x3, 0x1) 19:40:51 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 19:40:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x80045440, 0x0) 19:40:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="ddd8d11e58b9", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "822b2a", 0x30, 0x67, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], "21ee5214ebefb592f5d8fbdab0c0ea805e438e3046128e45862eee06272e37385bf6ec13d562dcef962b81522c39b2ab"}}}}}, 0x0) 19:40:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="ddd8d11e58b9", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "822b2a", 0x30, 0x67, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], "21ee5214ebefb592f5d8fbdab0c0ea805e438e3046128e45862eee06272e37385bf6ec13d562dcef962b81522c39b2ab"}}}}}, 0x0) 19:40:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x80045440, 0x0) 19:40:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000160007031dfffd946f610500070000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 19:40:52 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="ddd8d11e58b9", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "822b2a", 0x30, 0x67, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], "21ee5214ebefb592f5d8fbdab0c0ea805e438e3046128e45862eee06272e37385bf6ec13d562dcef962b81522c39b2ab"}}}}}, 0x0) 19:40:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1, 0x2000, 0x0, 0x0) 19:40:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x2f0, 0x0, 0x0) 19:40:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) close(r0) 19:40:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000160007031dfffd946f610500070000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 19:40:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x2f0, 0x0, 0x0) 19:40:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x20323159, 0x140, 0x0, 0x0, @stepwise}) 19:40:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1, 0x2000, 0x0, 0x0) 19:40:52 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) migrate_pages(r0, 0x7, 0x0, 0x0) 19:40:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000160007031dfffd946f610500070000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 19:40:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1, 0x2000, 0x0, 0x0) 19:40:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) migrate_pages(r0, 0x7, 0x0, 0x0) 19:40:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x2f0, 0x0, 0x0) 19:40:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x20323159, 0x140, 0x0, 0x0, @stepwise}) 19:40:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) migrate_pages(r0, 0x7, 0x0, 0x0) 19:40:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000160007031dfffd946f610500070000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 19:40:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') preadv(r0, &(0x7f00000017c0), 0x2f0, 0x0, 0x0) 19:40:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1, 0x2000, 0x0, 0x0) 19:40:52 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) migrate_pages(r0, 0x7, 0x0, 0x0) 19:40:53 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x20323159, 0x140, 0x0, 0x0, @stepwise}) 19:40:53 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{'acl'}]}) 19:40:53 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}) 19:40:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0xb, 0x1c}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:40:53 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x20323159, 0x140, 0x0, 0x0, @stepwise}) 19:40:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0xb, 0x1c}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:40:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}) 19:40:53 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{'acl'}]}) 19:40:53 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:53 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:54 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{'acl'}]}) 19:40:54 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0xb, 0x1c}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:40:54 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}) 19:40:54 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0xb, 0x1c}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 19:40:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}) 19:40:54 executing program 0: syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{'acl'}]}) 19:40:54 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:54 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:55 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) unshare(0x2a000400) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) 19:40:55 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000a42, 0x4) 19:40:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000a42, 0x4) 19:40:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) unshare(0x2a000400) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) 19:40:55 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x84b40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xc) 19:40:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) unshare(0x2a000400) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) 19:40:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) 19:40:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000a42, 0x4) 19:40:56 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) 19:40:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x3c) unshare(0x2a000400) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x0, 0x2, @thr={0x0, 0x0}}) 19:40:56 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000a42, 0x4) 19:40:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) 19:40:56 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc008561c, &(0x7f0000000d00)={0x980912, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a213f3b2"}, 0x0, 0x0, @planes=0x0}) 19:40:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) 19:40:56 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:40:56 executing program 1: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:40:56 executing program 3: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 19:40:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) [ 64.559014][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.575800][T10261] input: syz1 as /devices/virtual/input/input5 19:40:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x80, 0x5}, 0x18) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/112, 0xfffffffffffffe49}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f0000000680)=""/232, 0xe0}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x8, &(0x7f00000009c0)=""/78, 0x4e}, 0x20000100) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:40:56 executing program 3: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 64.601170][T10258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.605509][T10261] input: syz1 as /devices/virtual/input/input6 [ 64.620837][T10258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.637187][T10258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.722328][T10283] input: syz1 as /devices/virtual/input/input7 [ 64.774263][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.795753][ T3228] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.802056][ T3228] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.868473][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.883196][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.201134][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.216988][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.228047][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.235830][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.270895][T10303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.285593][T10303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.297204][T10303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.309189][T10272] syz-executor.5 (10272) used greatest stack depth: 9736 bytes left 19:40:57 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) 19:40:57 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 19:40:57 executing program 3: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 19:40:57 executing program 1: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:40:57 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:40:57 executing program 1: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:40:57 executing program 3: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 65.414386][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.421625][T10310] input: syz1 as /devices/virtual/input/input8 [ 65.432017][T10311] input: syz1 as /devices/virtual/input/input9 [ 65.451622][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:40:57 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 19:40:57 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) [ 65.500026][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.525400][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.541788][T10333] input: syz1 as /devices/virtual/input/input10 19:40:57 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) [ 65.587976][T10338] input: syz1 as /devices/virtual/input/input11 19:40:57 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 65.641563][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:57 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 65.687002][T10356] input: syz1 as /devices/virtual/input/input12 [ 65.733139][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.787020][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.801003][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.148113][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.169920][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.197773][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:58 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) 19:40:58 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 66.321273][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.364342][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.376177][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:58 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) 19:40:58 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) 19:40:58 executing program 1: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:40:58 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 66.620046][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.648794][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.657641][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.779662][T10391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.820066][T10391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.833319][T10391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:58 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 66.901722][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.919347][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.931075][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.939390][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.050234][T10419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.064003][T10419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.072909][T10419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:59 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:40:59 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) [ 67.148294][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.159897][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.168738][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:59 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) [ 67.302813][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:40:59 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) r2 = gettid() tkill(r2, 0x16) [ 67.351947][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.372449][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:59 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 67.553298][T10432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.573877][T10432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:40:59 executing program 5: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) [ 67.609892][T10432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.728850][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.757723][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.767165][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:59 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 67.839526][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.856006][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.863782][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.918554][T10471] input: syz1 as /devices/virtual/input/input13 19:40:59 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 68.015339][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:40:59 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000004600), 0x4) [ 68.069414][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.083266][T10480] input: syz1 as /devices/virtual/input/input14 [ 68.086038][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:40:59 executing program 2: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 19:41:00 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000004600), 0x4) 19:41:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x71, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) [ 68.231346][T10491] input: syz1 as /devices/virtual/input/input15 19:41:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:00 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000004600), 0x4) 19:41:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c00000032000505d25a80648c63940d0124fc07981c00410180ffff", 0x1c}], 0x1}, 0x0) 19:41:00 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000004600), 0x4) 19:41:00 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:41:00 executing program 5: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:41:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c00000032000505d25a80648c63940d0124fc07981c00410180ffff", 0x1c}], 0x1}, 0x0) 19:41:00 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) [ 68.460712][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:41:00 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c00000032000505d25a80648c63940d0124fc07981c00410180ffff", 0x1c}], 0x1}, 0x0) [ 68.566240][T10520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.590965][T10520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.627823][T10520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.706370][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 68.793890][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.850098][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.859377][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:41:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x71, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) 19:41:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c00000032000505d25a80648c63940d0124fc07981c00410180ffff", 0x1c}], 0x1}, 0x0) 19:41:01 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:01 executing program 5: r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=r3, @ANYBLOB="14000100000000000008"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) 19:41:01 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x566e, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:41:01 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@string={0x4, 0x3, "f7d8"}}]}) [ 69.282273][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:41:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="1e", &(0x7f0000000140)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="1e", &(0x7f0000000300)=@tcp6}, 0x20) 19:41:01 executing program 3: bpf$ENABLE_STATS(0x20, &(0x7f0000000000)={0x2}, 0xe3) [ 69.342111][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:41:01 executing program 3: bpf$ENABLE_STATS(0x20, &(0x7f0000000000)={0x2}, 0xe3) 19:41:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:01 executing program 3: bpf$ENABLE_STATS(0x20, &(0x7f0000000000)={0x2}, 0xe3) [ 69.390123][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.409520][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.546245][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.602693][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.636117][T10566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.644926][ T9741] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.836689][T10566] syz-executor.1 (10566) used greatest stack depth: 9416 bytes left [ 69.904218][ T9741] usb 5-1: Using ep0 maxpacket: 32 [ 70.034237][ T9741] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:41:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x71, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) 19:41:01 executing program 3: bpf$ENABLE_STATS(0x20, &(0x7f0000000000)={0x2}, 0xe3) 19:41:01 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:01 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:01 executing program 1: syslog(0x4, &(0x7f0000000040), 0x0) [ 70.084558][ T9741] usb 5-1: language id specifier not provided by device, defaulting to English 19:41:02 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) [ 70.214459][ T9741] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40 [ 70.246198][ T9741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.254513][ T9741] usb 5-1: Product: syz [ 70.258905][ T9741] usb 5-1: SerialNumber: syz [ 70.306545][ T9741] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 70.506321][ T7] usb 5-1: USB disconnect, device number 2 [ 71.284178][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.534128][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 71.674468][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 71.725504][ T7] usb 5-1: language id specifier not provided by device, defaulting to English [ 71.854165][ T7] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40 [ 71.863277][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.872009][ T7] usb 5-1: Product: syz [ 71.876522][ T7] usb 5-1: SerialNumber: syz [ 71.926703][ T7] usbhid 5-1:1.0: couldn't find an input interrupt endpoint 19:41:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000005"], 0x28}}, 0x0) recvfrom$l2tp(r0, &(0x7f0000000080)=""/99, 0x63, 0x0, 0x0, 0x0) 19:41:03 executing program 1: syslog(0x4, &(0x7f0000000040), 0x0) 19:41:03 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:03 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:03 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@string={0x4, 0x3, "f7d8"}}]}) 19:41:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x71, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) 19:41:04 executing program 1: syslog(0x4, &(0x7f0000000040), 0x0) [ 72.134182][ T9698] usb 5-1: USB disconnect, device number 3 19:41:04 executing program 2: set_mempolicy(0x1, &(0x7f0000000340)=0x10001, 0x4) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, &(0x7f0000000240)=""/256, 0x100, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) 19:41:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000005"], 0x28}}, 0x0) recvfrom$l2tp(r0, &(0x7f0000000080)=""/99, 0x63, 0x0, 0x0, 0x0) 19:41:04 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x9, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 19:41:04 executing program 1: syslog(0x4, &(0x7f0000000040), 0x0) 19:41:04 executing program 2: set_mempolicy(0x1, &(0x7f0000000340)=0x10001, 0x4) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, &(0x7f0000000240)=""/256, 0x100, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) 19:41:04 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0xe4e, 0x6) fsopen(&(0x7f0000000040)='gfs2\x00', 0x0) 19:41:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000005"], 0x28}}, 0x0) recvfrom$l2tp(r0, &(0x7f0000000080)=""/99, 0x63, 0x0, 0x0, 0x0) 19:41:04 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:41:04 executing program 2: set_mempolicy(0x1, &(0x7f0000000340)=0x10001, 0x4) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, &(0x7f0000000240)=""/256, 0x100, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) [ 72.625265][T10684] loop1: detected capacity change from 0 to 264192 [ 72.632964][T10684] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 72.634632][ T9698] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.894062][ T9698] usb 5-1: Using ep0 maxpacket: 32 [ 73.014060][ T9698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 73.064360][ T9698] usb 5-1: language id specifier not provided by device, defaulting to English [ 73.195325][ T9698] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40 [ 73.204429][ T9698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.212426][ T9698] usb 5-1: Product: syz [ 73.216968][ T9698] usb 5-1: SerialNumber: syz [ 73.256069][ T9698] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 73.461546][ T9129] usb 5-1: USB disconnect, device number 4 19:41:05 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@string={0x4, 0x3, "f7d8"}}]}) 19:41:05 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0xe4e, 0x6) fsopen(&(0x7f0000000040)='gfs2\x00', 0x0) 19:41:05 executing program 2: set_mempolicy(0x1, &(0x7f0000000340)=0x10001, 0x4) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, &(0x7f0000000240)=""/256, 0x100, &(0x7f0000000580)={&(0x7f0000000080)={'sha384-avx2\x00'}}) 19:41:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000005"], 0x28}}, 0x0) recvfrom$l2tp(r0, &(0x7f0000000080)=""/99, 0x63, 0x0, 0x0, 0x0) 19:41:05 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:41:05 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:41:05 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0xe4e, 0x6) fsopen(&(0x7f0000000040)='gfs2\x00', 0x0) 19:41:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:05 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) [ 74.077605][T10715] loop1: detected capacity change from 0 to 264192 19:41:06 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 74.147114][T10715] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 74.169999][T10718] loop0: detected capacity change from 0 to 264192 [ 74.177929][T10718] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:06 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0xe4e, 0x6) fsopen(&(0x7f0000000040)='gfs2\x00', 0x0) [ 74.221521][ T9815] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:06 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 74.386056][T10743] loop3: detected capacity change from 0 to 4096 [ 74.405607][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.475413][T10743] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 74.532987][T10759] loop1: detected capacity change from 0 to 264192 [ 74.538458][T10760] loop3: detected capacity change from 0 to 4096 [ 74.551142][T10760] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 74.565222][T10759] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 74.626024][T10743] loop3: detected capacity change from 0 to 92 [ 74.653214][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 74.653998][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 74.794016][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 74.845505][ T7] usb 5-1: language id specifier not provided by device, defaulting to English [ 74.974189][ T7] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40 [ 74.983814][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.994338][ T7] usb 5-1: Product: syz [ 75.003145][ T7] usb 5-1: SerialNumber: syz [ 75.046185][ T7] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 75.251275][ T7] usb 5-1: USB disconnect, device number 5 19:41:07 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f00000007c0)=@string={0x4, 0x3, "f7d8"}}]}) 19:41:07 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 19:41:07 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:41:07 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB="757070657264e9723d2e2f66696c65302f666d8f29299deebad6d180696c65302c78696e6f3d6175746f2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c72656469726563745f6469723d2e2f66696c65302c6f626a5f747970653d7b405e2c6f626a5f747970653d7569643c2c736d61636b66733d2f6465762f6c6f6f702d636f6e74726f6c002c736d61636b66736465663d29e82c6673636f6e746578743d757365725f752c7375627a5f7573"]) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x4, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, @usage=0x24, 0x0, 0x0, [0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d, [0x0, 0x6]}, {0x0, @struct, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x4}, {0x0}], 0x80800, &(0x7f0000000840)=ANY=[@ANYBLOB="6337a8d6ec8b6d67af187684464dcc8cf89913f7ff7616ada5ee3fdd13ac72d5c4a0421a443f409a617f28da86a1c01a5ed5e91f5777fbea635b6b405632", @ANYBLOB]) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0000, &(0x7f00000005c0)={[], [{@uid_lt={'uid<'}}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000300)) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:41:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) 19:41:07 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 75.889061][T10805] loop3: detected capacity change from 0 to 4096 [ 75.936052][T10805] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 75.954259][T10811] loop0: detected capacity change from 0 to 264192 [ 75.965014][T10812] loop1: detected capacity change from 0 to 264192 19:41:07 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 75.981057][T10811] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 76.003164][T10812] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:41:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:07 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) [ 76.068086][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 76.102819][T10849] loop3: detected capacity change from 0 to 4096 19:41:07 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 76.173939][ T9741] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.175469][T10849] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 19:41:08 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) [ 76.423929][ T9741] usb 5-1: Using ep0 maxpacket: 32 [ 76.544277][ T9741] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 76.614240][ T9741] usb 5-1: language id specifier not provided by device, defaulting to English [ 76.783919][ T9741] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.40 [ 76.804660][ T9741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.814974][ T9741] usb 5-1: Product: syz [ 76.819189][ T9741] usb 5-1: SerialNumber: syz [ 76.886383][ T9741] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 77.096270][ T3640] usb 5-1: USB disconnect, device number 6 19:41:09 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) 19:41:09 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 19:41:09 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 19:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:09 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) 19:41:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:09 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 19:41:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 77.826157][T10945] loop4: detected capacity change from 0 to 4096 [ 77.840190][T10925] loop3: detected capacity change from 0 to 4096 [ 77.850792][T10945] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 19:41:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) [ 77.953909][T10925] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 19:41:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 19:41:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x10000000005, 0x2) write$tcp_mem(r0, &(0x7f00000001c0), 0x20000047) 19:41:09 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000010000104000000000000fe0000000000", @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002"], 0x70}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:41:10 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x22000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000800) r0 = getpid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x3, 0x3b, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000380)=""/59}, &(0x7f0000000500)=0x78) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x8, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0xf8, 0x80, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5caa86b2, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x1) 19:41:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 78.169387][T10962] loop4: detected capacity change from 0 to 4096 19:41:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000010000104000000000000fe0000000000", @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002"], 0x70}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 78.204949][T10962] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 19:41:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x10000000005, 0x2) write$tcp_mem(r0, &(0x7f00000001c0), 0x20000047) [ 78.294540][T10962] loop4: detected capacity change from 0 to 92 [ 78.310800][T10962] tmpfs: Bad value for 'size' 19:41:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000010000104000000000000fe0000000000", @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002"], 0x70}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:41:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 19:41:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f00030004000000000000000000", 0x1c, 0x1000}, {0x0, 0x0, 0x4800}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) fchown(r1, 0xee01, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x102c25, &(0x7f0000000380)={[], [{@measure='measure'}]}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000004c40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r2, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="9fbdf4d692512b4f13aadd66f4db121e32482f332a352fc2c91ee52d6824da74da477b34c8968f8bd6ee709597322a340171c8e27dce6acbb6b4a48e357ca000fc4972c0632b1df986b8d0a1b75deca7ac026785ac1884b039ac8e24a18424a44ad7be822a9b1f2689be574ca51864e9fee633856ee7cb523afa386e4ff045023fb124d6e558b74c68c608cdf89d8b01ce03b45e84091fbf9a08e03224932dd2b03d904e95d7f74421b1fc880c7bdba6c69c173dd8b92eb44be1dbd39a9a6f29e4601b754a197cf93405db0f4925eea1ac29f2e6585d7b5eff", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fe3e44247d675c96c7a5bdbfb51339609cdb35eb5f191a29318a21bb29fe6aac12c1a001febd854d5f24cdabfa8d0b6e87b38db62aae0af3fd435469ca10c77e43e35a1a92d0ad53010dac3e895f9460e89483035a5e069d659cc5b39ba9f9577af97b26f172bf56abeac5fddeef8a43d2d21534d073170c000107f1a1deb239cefaad00342e728bd94ebb5640aa67ddfc36a38a38452dd110a937b26d935e8cdaa117db8ea26d9228ea2df655c80e98", @ANYRES32, @ANYBLOB], 0x8c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xad, 0x4, &(0x7f0000000900)=[{&(0x7f00000016c0), 0x0, 0x9}, {&(0x7f00000006c0), 0x0, 0x3}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5c97}], 0x0, &(0x7f00000003c0)={[{@gid={'gid'}}, {@uid={'uid'}}, {@huge_never='huge=never'}, {@gid={'gid'}}, {@size={'size', 0x3d, [0x0, 0x6d, 0x0]}}, {@size={'size', 0x3d, [0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@audit='audit'}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x2041, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000003280)=[{&(0x7f0000000cc0)=""/111, 0x6f}, {&(0x7f0000000d40)=""/192, 0xc0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/87, 0x57}, {0x0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/88, 0x58}], 0x8, &(0x7f0000003340)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)=""/5, 0x5}], 0x2}}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000003540)=""/165, 0xa5}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x3}, 0x2}, {{&(0x7f0000003740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000037c0)=""/58, 0x3a}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/87, 0x57}, {&(0x7f00000038c0)=""/66, 0x42}, {&(0x7f0000003940)=""/73, 0x49}, {0x0}, {&(0x7f00000049c0)=""/15, 0xf}], 0x7, &(0x7f0000004a80)=""/103, 0x67}}], 0x4, 0x4000, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) pipe2(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 19:41:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x10000000005, 0x2) write$tcp_mem(r0, &(0x7f00000001c0), 0x20000047) 19:41:10 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4661049058af", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @rand_addr=0x64010102}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ee6dad", 0x0, "c0a4fb"}}}}}}, 0x0) 19:41:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x10000000005, 0x2) write$tcp_mem(r0, &(0x7f00000001c0), 0x20000047) 19:41:10 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4661049058af", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @rand_addr=0x64010102}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ee6dad", 0x0, "c0a4fb"}}}}}}, 0x0) 19:41:10 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5102, &(0x7f00000000c0)={"b20e6747734f07e6c73ce106c6dee61525794d05ee604df5a6163c83b39d"}) [ 78.927142][T11010] loop4: detected capacity change from 0 to 4096 [ 79.030606][T11010] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 19:41:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nullb0\x00', 0x0, 0x0) fork() ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) 19:41:11 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) 19:41:11 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4661049058af", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @rand_addr=0x64010102}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ee6dad", 0x0, "c0a4fb"}}}}}}, 0x0) 19:41:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000010000104000000000000fe0000000000", @ANYBLOB="0000000000000000400012800b000100697036746e6c0000300002"], 0x70}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:41:11 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5102, &(0x7f00000000c0)={"b20e6747734f07e6c73ce106c6dee61525794d05ee604df5a6163c83b39d"}) 19:41:11 executing program 3: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 3: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5102, &(0x7f00000000c0)={"b20e6747734f07e6c73ce106c6dee61525794d05ee604df5a6163c83b39d"}) 19:41:11 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4661049058af", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @rand_addr=0x64010102}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ee6dad", 0x0, "c0a4fb"}}}}}}, 0x0) 19:41:11 executing program 0: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) [ 79.357049][T11055] loop1: detected capacity change from 0 to 264192 19:41:11 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5102, &(0x7f00000000c0)={"b20e6747734f07e6c73ce106c6dee61525794d05ee604df5a6163c83b39d"}) 19:41:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nullb0\x00', 0x0, 0x0) fork() ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) 19:41:11 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) 19:41:11 executing program 3: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 0: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 3: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 0: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) 19:41:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nullb0\x00', 0x0, 0x0) fork() ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) [ 79.677726][T11094] loop1: detected capacity change from 0 to 264192 19:41:11 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:41:11 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) [ 79.785234][T11109] loop5: detected capacity change from 0 to 264192 19:41:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nullb0\x00', 0x0, 0x0) fork() ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) 19:41:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xc11]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) 19:41:11 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:41:11 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) 19:41:11 executing program 2: clone(0x80803500, 0x0, &(0x7f0000001100), 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) exit_group(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) poll(&(0x7f0000000200)=[{}, {}, {}], 0x5c, 0x0) [ 80.021104][T11127] loop1: detected capacity change from 0 to 264192 19:41:11 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:41:11 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:41:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) 19:41:12 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) [ 80.227967][T11159] loop5: detected capacity change from 0 to 264192 19:41:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xc11]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) 19:41:12 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x1000000000010e20}], 0x80, &(0x7f00000003c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r0, &(0x7f00000005c0)='./file1\x00', 0x200) 19:41:12 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) [ 80.437290][T11187] loop1: detected capacity change from 0 to 264192 19:41:12 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) [ 80.569960][T11202] loop5: detected capacity change from 0 to 264192 19:41:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) 19:41:12 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 19:41:12 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xc11]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:12 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r0, 0x0, 0x0, 0x3718) lseek(r0, 0x0, 0x4) 19:41:12 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r0, 0x0, 0x0, 0x3718) lseek(r0, 0x0, 0x4) 19:41:12 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 19:41:12 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r0, 0x0, 0x0, 0x3718) lseek(r0, 0x0, 0x4) 19:41:12 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:12 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x4f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)) 19:41:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x2000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xc11]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:12 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 19:41:12 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r0, 0x0, 0x0, 0x3718) lseek(r0, 0x0, 0x4) 19:41:12 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 19:41:12 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@btf_id], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x78) 19:41:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 19:41:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/224, 0x1a, 0xe0, 0x1}, 0x20) 19:41:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0xfffffffffffffffe, 0x87, 0x0, 0x0, 0x0, 0x0) 19:41:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 19:41:13 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@btf_id], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x78) [ 81.383996][ T9129] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.756355][ T9129] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 81.784344][ T9129] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 81.807906][ T9129] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.974217][ T9129] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.990174][ T9129] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 82.007542][ T9129] usb 5-1: Product: syz [ 82.024984][ T9129] usb 5-1: Manufacturer: syz [ 82.044325][ T9129] usb 5-1: SerialNumber: syz [ 82.094714][ T9129] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device [ 82.297225][ T3640] usb 5-1: USB disconnect, device number 7 [ 83.093835][ T9688] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.493921][ T9688] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 83.505477][ T9688] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 83.515543][ T9688] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.714002][ T9688] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.723363][ T9688] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 83.733457][ T9688] usb 5-1: Product: syz [ 83.738016][ T9688] usb 5-1: Manufacturer: syz [ 83.742619][ T9688] usb 5-1: SerialNumber: syz [ 83.795639][ T9688] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device 19:41:15 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0) 19:41:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0xfffffffffffffffe, 0x87, 0x0, 0x0, 0x0, 0x0) 19:41:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 19:41:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/224, 0x1a, 0xe0, 0x1}, 0x20) 19:41:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@btf_id], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x78) [ 83.996234][ T3640] usb 5-1: USB disconnect, device number 8 19:41:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/224, 0x1a, 0xe0, 0x1}, 0x20) 19:41:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0xfffffffffffffffe, 0x87, 0x0, 0x0, 0x0, 0x0) 19:41:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 19:41:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@btf_id], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x78) 19:41:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0) 19:41:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0xfffffffffffffffe, 0x87, 0x0, 0x0, 0x0, 0x0) [ 84.489764][ T3640] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.884084][ T3640] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 84.894571][ T3640] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 84.903530][ T3640] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.083960][ T3640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.093037][ T3640] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 85.101548][ T3640] usb 5-1: Product: syz [ 85.105912][ T3640] usb 5-1: Manufacturer: syz [ 85.110507][ T3640] usb 5-1: SerialNumber: syz [ 85.155393][ T3640] cdc_wdm 5-1:21.0: cdc-wdm0: USB WDM device [ 85.360701][ T9129] usb 5-1: USB disconnect, device number 9 19:41:17 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:17 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0) 19:41:17 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/224, 0x1a, 0xe0, 0x1}, 0x20) 19:41:17 executing program 5: set_mempolicy(0x1, 0x0, 0x0) fanotify_init(0x28, 0x0) 19:41:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0) 19:41:17 executing program 5: set_mempolicy(0x1, 0x0, 0x0) fanotify_init(0x28, 0x0) 19:41:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 19:41:17 executing program 0: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0xffffffffffffffff, 0x0) 19:41:17 executing program 5: set_mempolicy(0x1, 0x0, 0x0) fanotify_init(0x28, 0x0) 19:41:17 executing program 0: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0xffffffffffffffff, 0x0) [ 86.203825][ T9741] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.203827][ T9129] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.223886][ T9688] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.564446][ T9129] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 86.574788][ T9129] usb 3-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 86.584568][ T9129] usb 3-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.604299][ T9741] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 86.614532][ T9688] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 86.624712][ T9688] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 86.634156][ T9741] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 86.643265][ T9741] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.654238][ T9688] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.753900][ T9129] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.763406][ T9129] usb 3-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 86.773212][ T9129] usb 3-1: Product: syz [ 86.777427][ T9129] usb 3-1: Manufacturer: syz [ 86.782916][ T9129] usb 3-1: SerialNumber: syz [ 86.824662][ T9129] cdc_wdm 3-1:21.0: cdc-wdm0: USB WDM device [ 86.855208][ T9741] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.864467][ T9688] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.875580][ T9741] usb 4-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 86.885107][ T9688] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 86.893568][ T9688] usb 5-1: Product: syz [ 86.898317][ T9741] usb 4-1: Product: syz [ 86.902607][ T9741] usb 4-1: Manufacturer: syz [ 86.907863][ T9688] usb 5-1: Manufacturer: syz [ 86.912462][ T9688] usb 5-1: SerialNumber: syz [ 86.917808][ T9741] usb 4-1: SerialNumber: syz [ 86.965858][ T9741] cdc_wdm 4-1:21.0: cdc-wdm1: USB WDM device [ 86.972483][ T9688] cdc_wdm 5-1:21.0: cdc-wdm2: USB WDM device [ 87.037323][ T9129] usb 3-1: USB disconnect, device number 2 [ 87.170579][ T3640] usb 5-1: USB disconnect, device number 10 [ 87.179989][ T9698] usb 4-1: USB disconnect, device number 2 19:41:19 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 19:41:19 executing program 5: set_mempolicy(0x1, 0x0, 0x0) fanotify_init(0x28, 0x0) 19:41:19 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:19 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:19 executing program 0: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0xffffffffffffffff, 0x0) 19:41:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 19:41:19 executing program 0: move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000040)=[0x1], 0xffffffffffffffff, 0x0) 19:41:19 executing program 5: unshare(0x20020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000)="1e"}, 0x20) 19:41:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 19:41:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x48}}, 0x0) 19:41:19 executing program 5: unshare(0x20020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000)="1e"}, 0x20) [ 88.005322][ T9698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.013810][ T9741] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.023813][ T9688] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.363867][ T9698] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 88.374208][ T9698] usb 3-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 88.383289][ T9698] usb 3-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.384071][ T9741] usb 5-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 88.404934][ T9741] usb 5-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 88.415139][ T9741] usb 5-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.454072][ T9688] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 88.465961][ T9688] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 88.476937][ T9688] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.554188][ T9698] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.563432][ T9698] usb 3-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 88.572171][ T9698] usb 3-1: Product: syz [ 88.576462][ T9698] usb 3-1: Manufacturer: syz [ 88.581187][ T9698] usb 3-1: SerialNumber: syz [ 88.624074][ T9741] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.627572][ T9698] cdc_wdm 3-1:21.0: cdc-wdm0: USB WDM device [ 88.635177][ T9741] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 88.655478][ T9741] usb 5-1: Product: syz [ 88.659725][ T9741] usb 5-1: Manufacturer: syz [ 88.666904][ T9688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.676272][ T9741] usb 5-1: SerialNumber: syz [ 88.681600][ T9688] usb 4-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 88.694820][ T9688] usb 4-1: Product: syz [ 88.699061][ T9688] usb 4-1: Manufacturer: syz [ 88.703731][ T9688] usb 4-1: SerialNumber: syz [ 88.734982][ T9741] cdc_wdm 5-1:21.0: cdc-wdm1: USB WDM device [ 88.754878][ T9688] cdc_wdm 4-1:21.0: cdc-wdm2: USB WDM device [ 88.850027][ T9741] usb 3-1: USB disconnect, device number 3 [ 88.942965][ T9688] usb 5-1: USB disconnect, device number 11 [ 88.964722][ T9698] usb 4-1: USB disconnect, device number 3 19:41:21 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qrtr-tun\x00', 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="f7", 0x400000}]) 19:41:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x48}}, 0x0) 19:41:21 executing program 5: unshare(0x20020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000)="1e"}, 0x20) 19:41:21 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:21 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000101ec0109025c000215000000090400000102090000052406000105240000000d240f0300000000000000000006241a00000009058103b5"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xfe84) 19:41:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140006"], 0x38}}, 0x0) 19:41:21 executing program 5: unshare(0x20020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000)="1e"}, 0x20) 19:41:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x48}}, 0x0) 19:41:21 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000002940)={0x0}, 0x10) 19:41:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140006"], 0x38}}, 0x0) [ 89.538513][T11627] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 89.574388][T11632] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 19:41:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x48}}, 0x0) 19:41:21 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qrtr-tun\x00', 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="f7", 0x400000}]) 19:41:21 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000002940)={0x0}, 0x10) 19:41:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 19:41:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140006"], 0x38}}, 0x0) [ 89.674191][T11643] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 89.750554][T11653] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 89.793810][ T9688] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.813839][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.203882][ T9688] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 90.214342][ T7] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 90.224788][ T9688] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 90.234044][ T7] usb 3-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 90.243373][ T7] usb 3-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.254452][ T9688] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.424248][ T9688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.433820][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.442949][ T7] usb 3-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 90.451974][ T9688] usb 4-1: New USB device strings: Mfr=1, Product=1, SerialNumber=236 [ 90.460762][ T7] usb 3-1: Product: syz [ 90.465245][ T9688] usb 4-1: Product: syz [ 90.469420][ T9688] usb 4-1: Manufacturer: syz [ 90.475506][ T7] usb 3-1: Manufacturer: syz [ 90.480303][ T7] usb 3-1: SerialNumber: syz [ 90.485596][ T9688] usb 4-1: SerialNumber: syz [ 90.525991][ T9688] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 90.532411][ T7] cdc_wdm 3-1:21.0: cdc-wdm1: USB WDM device [ 90.734227][ T3640] usb 3-1: USB disconnect, device number 4 [ 90.749335][ T7] usb 4-1: USB disconnect, device number 4 19:41:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000014c0), 0x1000, r0}, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 19:41:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 19:41:23 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qrtr-tun\x00', 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="f7", 0x400000}]) 19:41:23 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000002940)={0x0}, 0x10) 19:41:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140006"], 0x38}}, 0x0) 19:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 19:41:23 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000002940)={0x0}, 0x10) [ 91.315875][T11705] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 19:41:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 19:41:23 executing program 4: unshare(0x400) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:41:23 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qrtr-tun\x00', 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="f7", 0x400000}]) 19:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000014c0), 0x1000, r0}, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 19:41:23 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, 0x0) 19:41:23 executing program 4: unshare(0x400) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 91.559558][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 91.592619][T11729] device veth3 entered promiscuous mode 19:41:23 executing program 4: unshare(0x400) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:41:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000440)=""/71, &(0x7f00000004c0)=0x17) [ 91.617600][T11739] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.648210][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:23 executing program 4: unshare(0x400) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 19:41:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000014c0), 0x1000, r0}, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 19:41:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000440)=""/71, &(0x7f00000004c0)=0x17) 19:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:23 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, 0x0) 19:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) [ 91.891216][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 91.912745][T11761] device veth5 entered promiscuous mode 19:41:23 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, 0x0) 19:41:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000440)=""/71, &(0x7f00000004c0)=0x17) 19:41:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) [ 91.958063][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 91.980109][T11771] device veth7 entered promiscuous mode 19:41:23 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, 0x0, 0x0) 19:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000440)=""/71, &(0x7f00000004c0)=0x17) [ 92.158788][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:41:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000014c0), 0x1000, r0}, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 19:41:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002500)='tmpfs\x00', &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@huge_never='huge=never'}]}) [ 92.211161][T11792] device veth9 entered promiscuous mode 19:41:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002500)='tmpfs\x00', &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@huge_never='huge=never'}]}) 19:41:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) [ 92.296992][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002500)='tmpfs\x00', &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@huge_never='huge=never'}]}) [ 92.378097][T11808] device veth3 entered promiscuous mode [ 92.383783][ C0] ================================================================== [ 92.383807][ C0] BUG: KCSAN: data-race in do_signal_stop / prepare_signal [ 92.383829][ C0] [ 92.383834][ C0] write to 0xffff8881352dc02c of 4 bytes by task 11805 on cpu 1: [ 92.383847][ C0] do_signal_stop+0x562/0x6d0 [ 92.383864][ C0] get_signal+0x9ed/0x1510 [ 92.383880][ C0] arch_do_signal_or_restart+0x2a/0x270 19:41:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002500)='tmpfs\x00', &(0x7f0000002540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@huge_never='huge=never'}]}) [ 92.383900][ C0] exit_to_user_mode_prepare+0x11a/0x1b0 [ 92.383917][ C0] syscall_exit_to_user_mode+0x20/0x40 [ 92.383937][ C0] do_syscall_64+0x45/0x80 [ 92.383952][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.383973][ C0] [ 92.383975][ C0] read to 0xffff8881352dc02c of 4 bytes by interrupt on cpu 0: [ 92.383988][ C0] prepare_signal+0x891/0xdb0 [ 92.384004][ C0] send_sigqueue+0xea/0x430 [ 92.384020][ C0] posix_timer_fn+0xe8/0x210 [ 92.384039][ C0] __run_hrtimer+0x163/0x460 [ 92.384049][ C0] hrtimer_interrupt+0x380/0xaf0 [ 92.384057][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 92.384070][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 92.384080][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 92.384089][ C0] console_unlock+0x8c9/0xb20 [ 92.384098][ C0] vprintk_emit+0x131/0x3e0 [ 92.384107][ C0] vprintk_default+0x22/0x30 [ 92.384116][ C0] vprintk_func+0x11b/0x120 [ 92.384125][ C0] printk+0x62/0x82 [ 92.384133][ C0] __dev_set_promiscuity+0x18c/0x390 [ 92.384143][ C0] __dev_change_flags+0x2c9/0x3f0 [ 92.384152][ C0] rtnl_configure_link+0xc2/0x150 [ 92.384161][ C0] rtnl_newlink+0xec5/0x1310 [ 92.384169][ C0] rtnetlink_rcv_msg+0x728/0x7c0 [ 92.384178][ C0] netlink_rcv_skb+0x13e/0x240 [ 92.384188][ C0] rtnetlink_rcv+0x18/0x20 [ 92.384196][ C0] netlink_unicast+0x5fc/0x6c0 [ 92.384205][ C0] netlink_sendmsg+0x6f8/0x7c0 [ 92.384214][ C0] ____sys_sendmsg+0x360/0x4d0 [ 92.384225][ C0] __sys_sendmsg+0x1ed/0x270 [ 92.384235][ C0] __x64_sys_sendmsg+0x42/0x50 19:41:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) [ 92.384245][ C0] do_syscall_64+0x39/0x80 [ 92.384253][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.384265][ C0] [ 92.384266][ C0] Reported by Kernel Concurrency Sanitizer on: [ 92.384269][ C0] CPU: 0 PID: 11808 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 92.384280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.384285][ C0] ================================================================== 19:41:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b00)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x70) 19:41:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b00)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x70) 19:41:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 19:41:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f000001a700)=""/102386, 0x18ff2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) 19:41:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x20, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1f, 0x1000000080000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x4}}], 0x18}, 0x0) [ 92.918750][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.941784][T11853] device veth5 entered promiscuous mode 19:41:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x20, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1f, 0x1000000080000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x4}}], 0x18}, 0x0) 19:41:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b00)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x70) 19:41:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) 19:41:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x20, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1f, 0x1000000080000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x4}}], 0x18}, 0x0) 19:41:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452f591, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x20, 0x0, 0x0, 0x2, 0x7fffffff, 0x2, 0x86}, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) [ 93.123485][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x20, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1f, 0x1000000080000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x18, 0x29, 0x4}}], 0x18}, 0x0) 19:41:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b00)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x70) [ 93.209612][T11876] device veth7 entered promiscuous mode 19:41:25 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x38}}, 0x0) [ 93.358597][T11907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.365924][T11907] IPv6: NLM_F_CREATE should be set when creating new route [ 93.376534][T11910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.508594][T11904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.590974][T11913] overlayfs: failed to resolve 'file0˜¶ó à¼': -2 [ 93.601137][T11915] overlayfs: filesystem on './bus' not supported as upperdir 19:41:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f000001a700)=""/102386, 0x18ff2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) 19:41:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x38}}, 0x0) 19:41:25 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 93.990237][T11932] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.000967][T11936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 19:41:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x38}}, 0x0) 19:41:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x38}}, 0x0) [ 94.166814][T11947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.191467][T11931] overlayfs: './file0' not a directory 19:41:26 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 94.316715][T11954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 19:41:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 94.559482][T11957] overlayfs: './file0' not a directory 19:41:26 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:26 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f000001a700)=""/102386, 0x18ff2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) 19:41:26 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:26 executing program 5: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 94.921331][T11972] overlayfs: './file0' not a directory 19:41:26 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 95.001786][T11971] overlayfs: './file0' not a directory 19:41:26 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f01c8e38336f08301dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xff, 0x48000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0xfffffffffffffffd, 0x9, 0x7ff, 0x20, 0x5, 0x4, 0x401, 0x81, 0xffffffffffff0001, 0xfffffffffffff506, 0x5, 0x9, 0x8, 0x8, 0xb02], 0x6000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 95.161792][T11979] overlayfs: './file0' not a directory [ 95.192237][T11978] overlayfs: './file0' not a directory 19:41:27 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:27 executing program 4: prctl$PR_SET_TIMERSLACK(0x2f, 0x2) [ 95.351378][T11990] overlayfs: './file0' not a directory 19:41:27 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 95.428969][T11993] overlayfs: './file0' not a directory 19:41:27 executing program 4: prctl$PR_SET_TIMERSLACK(0x2f, 0x2) 19:41:27 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 95.579144][T12006] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.669815][T12007] overlayfs: './file0' not a directory [ 95.747256][T12012] overlayfs: './file0' not a directory 19:41:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f000001a700)=""/102386, 0x18ff2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) 19:41:27 executing program 4: prctl$PR_SET_TIMERSLACK(0x2f, 0x2) 19:41:27 executing program 5: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:27 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000100)="000000000000000011321385994428cf2a4ba0a275ddc06f7a4a9b990db3a57f", 0x20, 0x4e1}, {0x0, 0x0, 0x80000001}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0ea655fd2f4655fd2f4655f000000000000f937de", 0x1d, 0x11080}], 0x0, &(0x7f0000000180)={[{@data_writeback='data=writeback'}]}) [ 95.848892][T12018] overlayfs: './file0' not a directory 19:41:27 executing program 4: prctl$PR_SET_TIMERSLACK(0x2f, 0x2) 19:41:27 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus/file0\x00', 0x40, 0x4) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x108000, &(0x7f0000000b80)=ANY=[@ANYBLOB='huge=within_size,nr_blocks=7\x00\x00\x00,huge=always,huge=advise,uid=', @ANYBLOB="2c736d61636b66736465663d1c377f08e3341338ce424a818af180da0c72bf02da246fd64653b62f5f4b70cdeab7c6f8cbc347054735f204a41a106a08008e9062eb8c6b417975f4c7456f3b8e59ff00ef55e1fb758b631363f60a60c589c4b7a95eea89e5a7bcc937c3667a1641cbca8a6a502c65756964", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="17736d6163ab9a279765663d212d2c00"]) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00fbbd023c7dff33e236237c77cbc01ee407e330f3aae21adeaed2ccc29f7d86eaef376f03a8bc8d24d63a92c66e0e6e1c021aba6c54fffb0f74322937f94d8954f36794d27907fcbe4d10a258ac3e3e5812f76493865e4e23170de2e6d125cd66faf8c63e851d1e95e279871a39805a96afb138aa5f523b0c0a807a462c06afcbaa9845272f198c7aa24a5a247686461ca94a3ae585aee3f6225544b82350c8172bc7a8270080000000000000c32bb8a122f18fc19309ef5a2ef82a0186ec472eae57b0ba8c9e29c401374456f81e7aacc79e81d6c522dd"], 0xbd, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) lsetxattr$security_capability(&(0x7f0000000940)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x60a, 0x37c}, {0x0, 0x7fff}]}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x134, 0x0, 0x601, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x106, 0x1, '\x10\x80\x00l\x14\x04\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14afZa7-\xbf\xf4\xd2\n\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf5\x93\xb6\xaf\xd0 L\xba\x95H\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\x00CR\xf6)bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1d\x17\xe5&\xe7h#\xbc9\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\xbef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04+\x86l\x1e\x83\x1aA\x95\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\xb2@\x1e\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xaa\xe6~\xf45\xd4v7z\xffJ\xdeN\xd5\xb1\xa2t\xacj\xb8h\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty=0x3}]}, 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/{$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:41:27 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x30) [ 95.944003][T12032] loop0: detected capacity change from 0 to 264192 19:41:27 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x30) [ 96.035964][T12032] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 96.075007][T12032] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e01c, mo2=0002] [ 96.100179][T12028] overlayfs: './file0' not a directory [ 96.116325][T12027] overlayfs: './file0' not a directory [ 96.133897][T12032] System zones: 0-2, 18-18, 34-35 19:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x80, 0x4) [ 96.179983][T12032] EXT4-fs error (device loop0): ext4_orphan_get:1412: comm syz-executor.0: bad orphan inode 322048256 19:41:28 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x30) 19:41:28 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) [ 96.258761][T12032] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,,errors=continue. Quota mode: none. [ 96.375915][T12047] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:41:28 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x30) 19:41:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000100)="000000000000000011321385994428cf2a4ba0a275ddc06f7a4a9b990db3a57f", 0x20, 0x4e1}, {0x0, 0x0, 0x80000001}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0ea655fd2f4655fd2f4655f000000000000f937de", 0x1d, 0x11080}], 0x0, &(0x7f0000000180)={[{@data_writeback='data=writeback'}]}) 19:41:28 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x80, 0x4) 19:41:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r3) [ 96.789577][T12083] loop0: detected capacity change from 0 to 264192 [ 96.819910][T12083] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended 19:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x80, 0x4) 19:41:28 executing program 4: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0xffffffff}}) 19:41:28 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r3) [ 96.834249][T12083] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e01c, mo2=0002] 19:41:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x80, 0x4) [ 96.928683][T12083] System zones: 0-2, 18-18, 34-35 19:41:28 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r3) [ 96.952097][T12083] EXT4-fs error (device loop0): ext4_orphan_get:1412: comm syz-executor.0: bad orphan inode 322048256 [ 96.987420][T12083] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,,errors=continue. Quota mode: none. 19:41:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000100)="000000000000000011321385994428cf2a4ba0a275ddc06f7a4a9b990db3a57f", 0x20, 0x4e1}, {0x0, 0x0, 0x80000001}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0ea655fd2f4655fd2f4655f000000000000f937de", 0x1d, 0x11080}], 0x0, &(0x7f0000000180)={[{@data_writeback='data=writeback'}]}) 19:41:28 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r1, r3, 0x0) setns(r4, 0x2000000) 19:41:28 executing program 4: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0xffffffff}}) 19:41:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r3) 19:41:28 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x8}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:41:28 executing program 5: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0}, 0x20) 19:41:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004c00)='/dev/dlm_plock\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xc, 0x0, "9f5f97d9"}, 0x0) 19:41:29 executing program 1: unshare(0x4000400) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "bb583c7d9fc54559a36fc669e481a5a0d170cd21f39af40f610d366f9ea5911cbd145e43cb34e62f4951f5963f408c2efb6e584be0e324fd80e8c9573c1bf89c", "774b7a40b8af6b0a631f0558db2118db1b750599831fc2b99ba1e3e5f2b03aa2"}) 19:41:29 executing program 4: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0xffffffff}}) 19:41:29 executing program 5: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0}, 0x20) 19:41:29 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x8}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:41:29 executing program 5: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0}, 0x20) [ 97.242645][T12125] loop0: detected capacity change from 0 to 264192 [ 97.309515][T12125] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 97.327413][T12125] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e01c, mo2=0002] [ 97.358950][T12125] System zones: 0-2, 18-18, 34-35 19:41:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000100)="000000000000000011321385994428cf2a4ba0a275ddc06f7a4a9b990db3a57f", 0x20, 0x4e1}, {0x0, 0x0, 0x80000001}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0ea655fd2f4655fd2f4655f000000000000f937de", 0x1d, 0x11080}], 0x0, &(0x7f0000000180)={[{@data_writeback='data=writeback'}]}) 19:41:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004c00)='/dev/dlm_plock\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xc, 0x0, "9f5f97d9"}, 0x0) 19:41:29 executing program 4: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0xffffffff}}) 19:41:29 executing program 1: unshare(0x4000400) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "bb583c7d9fc54559a36fc669e481a5a0d170cd21f39af40f610d366f9ea5911cbd145e43cb34e62f4951f5963f408c2efb6e584be0e324fd80e8c9573c1bf89c", "774b7a40b8af6b0a631f0558db2118db1b750599831fc2b99ba1e3e5f2b03aa2"}) 19:41:29 executing program 5: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0}, 0x20) [ 97.397964][T12125] EXT4-fs error (device loop0): ext4_orphan_get:1412: comm syz-executor.0: bad orphan inode 322048256 [ 97.430180][T12125] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,,errors=continue. Quota mode: none. 19:41:29 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x8}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:41:29 executing program 1: unshare(0x4000400) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "bb583c7d9fc54559a36fc669e481a5a0d170cd21f39af40f610d366f9ea5911cbd145e43cb34e62f4951f5963f408c2efb6e584be0e324fd80e8c9573c1bf89c", "774b7a40b8af6b0a631f0558db2118db1b750599831fc2b99ba1e3e5f2b03aa2"}) 19:41:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004c00)='/dev/dlm_plock\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xc, 0x0, "9f5f97d9"}, 0x0) 19:41:29 executing program 5: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1011fe, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001a00)="f1", 0x1}], 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580), 0x10000005c) 19:41:29 executing program 1: unshare(0x4000400) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "bb583c7d9fc54559a36fc669e481a5a0d170cd21f39af40f610d366f9ea5911cbd145e43cb34e62f4951f5963f408c2efb6e584be0e324fd80e8c9573c1bf89c", "774b7a40b8af6b0a631f0558db2118db1b750599831fc2b99ba1e3e5f2b03aa2"}) [ 97.582810][T12160] loop0: detected capacity change from 0 to 264192 [ 97.635761][T12160] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 97.698400][T12160] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e01c, mo2=0002] [ 97.749155][T12160] System zones: 0-2, 18-18, 34-35 [ 97.764142][T12160] EXT4-fs error (device loop0): ext4_orphan_get:1412: comm syz-executor.0: bad orphan inode 322048256 [ 97.794366][T12160] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,,errors=continue. Quota mode: none. 19:41:32 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x8}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:41:32 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r4, 0x8}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:41:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004c00)='/dev/dlm_plock\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xc, 0x0, "9f5f97d9"}, 0x0) 19:41:32 executing program 1: socket$tipc(0x1e, 0x5, 0x0) 19:41:32 executing program 5: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x7, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1011fe, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001a00)="f1", 0x1}], 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000580), 0x10000005c) 19:41:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001767a2bc004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:41:32 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000040)="6c2dd5708764b0a972eddf995f5cfc6d7ed2f04b1cd73d6a5e04fd799e275fcff44e4654e6cc413b49891d563053cccfff95196033b50ef7502a90477bb27d91443596d99caad41b4fa8525edd928c1f21c08642f964459ae9383fde305ce6eef87da04d5b24ab496882186306a19e45ff9e173be2eace48121da010191bbe05f082a571051ad293", 0x88) sendfile(r2, r3, &(0x7f0000000140)=0x4, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="019d1356978b507b111526e44844d8db42d9ff16775fb5907b9efb9eadc13485ab37b27ca02b883832bdacebd53612349981424e27e412919fdabc59fc7ca0283ab20d865c6b81356330696e6c0fbc42d4b263bd1c1ab0d5d38fbce2a6f187408da538ad53df73bd372080f997bfd82bc241c524cad1b58dad947bc659fb909d807e7e9601073ae24710bc63184084"], 0x191) wait4(r0, &(0x7f0000000200), 0x2, &(0x7f00000003c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6f4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(