0780)=ANY=[@ANYBLOB="0e06194ad775a88671cf0c26d16c18f7285ca77f3e344cc76fb9de30290924eb6cc93350ed4ec27d16bc5107ce4e16d2d5a57f18a43f5e58205a064701f5448ffa23d4f8d3", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf250400000008000700ac1414bb14000600ff01000e00000000000000000000000114000600fe8800000000000000000000000001010800040003000000060001002100000008000c00030000003d40c8fc4944072e61ff18b06f22917e6ad44b7542dc26173e8f5f85583c907497225e3a2b79dd374a6329735cfe4319fdcb93e1f219bd4a0df5b235ab5ca2b35c347b"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x804) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdc02, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc800) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x5) prctl$PR_SET_FPEMU(0xa, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r6, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff}) flock(0xffffffffffffffff, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff65, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05540f69a78f293bbe0c4f4818b89c6218541aaee1bf91685fd416aa542f8d14e6e5b9fa411723d10c1a05f532c99034d8b4a4e4a06ea12a6332b33f65e69baf5192e27999f29170906e261a48b734f6f8da9c68d2ed59f63f401eef37346da957ef94f459e8bd0e0c29b02f9719c45dc839fd2f86af49a26046cd6e5ed7dabe71d509a872856a4710696f3dd886de78ed24e4cd25ae0d0514e691f5584058b971265ad341632087ca51405b273d5980450ed8197fc9fcea938696b06f548f8fcb416e8306fb756b454a32237db506b0b8371af60e3affb66f07f7e70028bdda", @ANYRESHEX=r6, @ANYRESDEC, @ANYRESOCT=r4, @ANYRESHEX=r8, @ANYRES32=r7], 0x50}}, 0x20000814) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="d00000000b0601020000000000000000050000070900020073797a32000000000900020073797a310000000008000940000000019c0008800c00078006001d40000200001c000780180014801400028776102c40fe80000000000000000000000000003c1000078009001a0073797a32000000000c00078005000700620000000c00078008000940000000200c000780080006400000feb5100007800c0018400000000000000009100007800c0019400000000000000100100007800900120073797a32000000000c00078008000840", @ANYRES32, @ANYRESDEC], 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x840) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000003a0, 0x0) 11:00:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x101, 0x4, 0x4, 0xe, "f08891df80d60e9f"}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) keyctl$session_to_parent(0x12) 11:00:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x10) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000480), 0xa198) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 11:00:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)=0x0) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x12) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r10}}, 0x20}}, 0x0) 11:00:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a05f001400000000001090224000100000000090400000103ff070009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000080)={0x40, 0x23, 0x68, {0x68, 0xf, "b66e860b88e83a5288adc7055cf19a8bb24225f93eabc16110b10c38dbf1105279cd0803355cda0edf767bc1314f02e76dab9b639eba456cfa066e5c14cd339d9c206f0a3edf5e8473f05b797105765fe99146016d0c0d3c6edf52361f8098b01f0e42dddbb4"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="0003b4288a0d0f03d6e3b1650aa9c3f97c4481f790cfbf2202c4900c45378a71a3cb8c0f777804c21bdae0ad69116a01af426e40320220ebdc851a7e95b0"], &(0x7f0000000440)=ANY=[@ANYBLOB="00222700000093d91734b9c1d45793d7f77b0751e893562b2db5af3c2807b7888402b24c1ba3a2bb202606305118707d6323f195cdb036baae4a8e626c685c21b96235af230cebaa331903589707fa91307b44f4d3f6148b76219429e381b5a450cfaccaba961961cf0ec200097eff85ddacc97c95499b89a8e9d92cd3459e48fb38"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0xe5, 0x1, {0x22, 0x829}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200a18000000404ca1175ebf7b73b5"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x1, 0xf0, "3d6677d45a8b70d5f288508fde5249105bc1b9ee63100fa58ed9a902ae6af9674611455c3478477e293a4d5e3ca10a9d9c26602aea56e99197535baccfd412a03a1859394bbb994b8452a63d391295fb823ac6f4945bd5e99417760222df39b0727c3e44673d66c94c890b25602f70caeafe66d5bd9d879eba950140c7020155ef94393e51741246e1c523e8791504c1f02cea428ffee1cd00f6a9adac1bf95273b8f728698b6fb22d14aa32ed93233c3a2a2546069cd8ce5f9760005d66ddf362a7014bab1a90e0c01904fe173d318e5588bb3ea7d255a3e942779ce37c10fd93fd7fd20e23cbce743e8fbb152af812"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x250400, 0x30, 0x8}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000540)={0x1, 0x2, 0x29, "dee7b0b31f8cac6ec1005cd9413197b289fc5300f6c0f043649aa9a91324b0f36bb18eb8ff35c9bc890b077584406200d0de30a98ab03548d707d76a", 0x22, "340269424c6017a6dbeacc43a3fda64f45d0365a394e9f2dcf101b278b3c89e0ce932860576c99c1269d7f05d913cd6bed8505bd4a5b2270f1b6ae67", 0x28}) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000500)=0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x0, 0x0, 0x24, {0x24, 0x0, "65fac3b3c1ed3a9fc699dc8de25dcaa4040911781822c00f3baddb65fa254770e6d4"}}, 0x0}, 0x0) 11:00:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 399.466605][T13928] bridge1: port 1(bond0) entered blocking state [ 399.484820][T13928] bridge1: port 1(bond0) entered disabled state [ 399.505469][T13928] device bond_slave_0 entered promiscuous mode [ 399.512190][T13928] device bond_slave_1 entered promiscuous mode 11:00:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r3, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r3, 0x10000}, 0x8) keyctl$session_to_parent(0x12) [ 399.582528][T13933] device bond_slave_0 left promiscuous mode [ 399.588774][T13933] device bond_slave_1 left promiscuous mode [ 399.636261][T13933] bridge1: port 1(bond0) entered disabled state 11:00:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:09 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, &(0x7f00000004c0)) 11:00:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000040)={r4, 0x3}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000000)={r4, 0x18}) r5 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000100)=@profile={'changeprofile ', '//-5\x00'}, 0x13) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 399.863506][ T17] usb 1-1: new high-speed USB device number 10 using dummy_hcd 11:00:10 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5251639c05}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:10 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x1, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000100)={0x1c, 0x8000, 0x3}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r2, 0x0, 0x3, &(0x7f0000000000)='.@%', 0xffffffffffffffff}, 0x30) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000140)=ANY=[], 0x6a, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800007, 0x2) socket$inet(0x2, 0x80007, 0xffff8000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 11:00:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="01434430303107004c494e55582020202020202020a7500a8ba9ec534b20202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000280)="e5a5c13a7a964273446754cde612e2abbe48aa379f5c03", 0x17, 0x3}], 0x0, 0x0) restart_syscall() r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000000000001"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @window={0x3, 0x4, 0x4}, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x7, 0x100}, @window={0x3, 0x5, 0x100}], 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x9}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) connect$unix(r4, &(0x7f00000002c0)=@abs={0x2, 0x0, 0x4e21}, 0x6e) [ 400.151597][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 400.293201][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.324470][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.340589][ T17] usb 1-1: New USB device found, idVendor=056a, idProduct=01f0, bcdDevice= 0.40 [ 400.383334][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.417466][ T17] usb 1-1: config 0 descriptor?? [ 401.002973][ T17] usbhid 1-1:0.0: can't add hid device: -71 [ 401.009055][ T17] usbhid: probe of 1-1:0.0 failed with error -71 [ 401.041992][ T17] usb 1-1: USB disconnect, device number 10 [ 401.512872][ T17] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 401.752863][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 401.873097][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.884131][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.895826][ T17] usb 1-1: New USB device found, idVendor=056a, idProduct=01f0, bcdDevice= 0.40 [ 401.906449][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.919571][ T17] usb 1-1: config 0 descriptor?? [ 402.405338][ T17] wacom 0003:056A:01F0.0005: unknown main item tag 0x0 [ 402.412260][ T17] wacom 0003:056A:01F0.0005: item fetching failed at offset 4/5 [ 402.420664][ T17] wacom 0003:056A:01F0.0005: parse failed [ 402.426847][ T17] wacom: probe of 0003:056A:01F0.0005 failed with error -22 [ 402.607924][ T17] usb 1-1: USB disconnect, device number 11 [ 403.382745][ T9231] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 403.622739][ T9231] usb 1-1: Using ep0 maxpacket: 16 [ 403.742891][ T9231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.754000][ T9231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.763865][ T9231] usb 1-1: New USB device found, idVendor=056a, idProduct=01f0, bcdDevice= 0.40 [ 403.772991][ T9231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.787512][ T9231] usb 1-1: config 0 descriptor?? 11:00:14 executing program 3: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) pipe2(&(0x7f00000000c0), 0x84000) openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:00:14 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:14 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:14 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:14 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) write$snddsp(r2, &(0x7f0000000200)="54c5fb804884012d1a1016237be9154807eef8e3489182dc7ebaccf31360b94a0740aa90ea3886e38ffb212fc88df08747aa748dcb6a958f9789b35d9fac705faf6f09df515ff2fddb9fcb246fc987948832a7946c1a96ecef7f9a3c834b93c23c07acaab10f96d39481b2f5a23110bca89a0a635e06fcdab6efa0111d", 0x7d) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xfffffffffffffe98) socket$xdp(0x2c, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 11:00:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="a1"], 0x5) r3 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xfe80000000000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x400c810) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) [ 404.022931][ T9231] usbhid 1-1:0.0: can't add hid device: -71 [ 404.033760][ T9231] usbhid: probe of 1-1:0.0 failed with error -71 [ 404.088055][ T9231] usb 1-1: USB disconnect, device number 12 [ 404.097415][T14029] IPVS: ftp: loaded support on port[0] = 21 11:00:14 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:14 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xfc403d5a7472082f, &(0x7f00000000c0)=0x6, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x60c, 0x801) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x4], 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x4d, 0x7, 0x38}, {0x7, 0x1, 0x2}, {0x6, 0x80, 0x6, 0x9}, {0x1, 0x3, 0x1, 0x1}]}, 0x10) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 404.257297][T14029] lo speed is unknown, defaulting to 1000 11:00:14 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 11:00:14 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 404.772836][ T17] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 404.833406][T14033] IPVS: ftp: loaded support on port[0] = 21 [ 404.897661][T14033] lo speed is unknown, defaulting to 1000 [ 405.038673][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 405.103359][ T376] tipc: TX() has been purged, node left! [ 405.177410][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.193228][ T17] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.402991][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 405.412077][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.430075][ T17] usb 1-1: Product: syz [ 405.435534][ T17] usb 1-1: Manufacturer: syz [ 405.440162][ T17] usb 1-1: SerialNumber: syz [ 405.963790][ T17] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 406.154674][ T12] usb 1-1: USB disconnect, device number 13 [ 406.175288][ T12] usblp0: removed [ 406.932554][ T12] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 407.182549][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 407.302803][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 407.326609][ T12] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 407.542873][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 407.551947][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.560598][ T12] usb 1-1: Product: syz [ 407.564902][ T12] usb 1-1: Manufacturer: syz [ 407.602157][ T12] usb 1-1: can't set config #1, error -71 [ 407.610310][ T12] usb 1-1: USB disconnect, device number 14 11:00:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001b00)=""/217, 0xd9}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000001dc0)=""/193, 0xc1}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@ipx, 0x80, &(0x7f0000001fc0)=[{&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000001980)=""/138, 0x8a}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000001c40)=""/136, 0x88}], 0x8, &(0x7f00000036c0)=""/141, 0x8d}, 0x8}], 0x3, 0x0, 0x0) 11:00:17 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:17 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x40000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @motion_det}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604e96e100182b01fe880000000000000000000000000001fe8000000000000000000000000000aa0000907800000000fea80000000000000000000000000001"], 0x0) 11:00:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r2, 0x5, 0xd, "ae4acc69db1fc42e725b7402db"}, 0x15) keyctl$session_to_parent(0x12) 11:00:17 executing program 0: setrlimit(0x7, &(0x7f00000002c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0x0, 0x6, {{0x0, 0x8, 0x7, 0x4, 0x0, 0x9, 0x100, 0xfffffff8}}}, 0x60) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x5) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm, @sack_perm], 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) sendto$x25(r3, &(0x7f0000000300)="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", 0x1000, 0x20044041, &(0x7f0000000080)={0x9, @remote={[], 0x3}}, 0x12) fanotify_init(0x2, 0x8000) 11:00:17 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresgid(r4, r1, r3) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:18 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000300), 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2009, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/217) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)) bind(0xffffffffffffffff, 0x0, 0x0) 11:00:18 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x803e0000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:18 executing program 4: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/199, 0xc7) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "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"}, 0x100b) keyctl$session_to_parent(0x12) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)=0x8) 11:00:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0xfffffffc, 0x0, 0xdda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:00:18 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:18 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd0070000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)=ANY=[]) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r6, 0x0, r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r10) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)=ANY=[@ANYBLOB='huge=within_size=>^&.!,huge=within_size=,huge=advise=port,smackfsdef=127.0.0.1\x00,fsmagic=0x0000000000006a12,dont_appraise,fowner=', @ANYRESDEC=r10, @ANYBLOB=',smackfsdef=trans=rdma,,appraise,defcontext=system_u,context=unconfined_u,\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @initdev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRES16, @ANYBLOB="06000000000000800000000001000000000000000600000000000000090000001f0000002940402a2624407b2a000000000000000200000000000000020000000000000006000000000000006a0000000000000009000000f8ffffff05000000000000000700000000000000e0ffffffffffffff080000000000000006000000000000000100008000000000ff03000004000000090000000800000001800000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="4c020000ffffffff000000000600000000000000010400000000000000000000a70c000000000000000000000300000000000000050000000000000046000000000000000300000001040000030000000000000002000000000000000000000000000000400000000000000005000000000000000700000000000000010000001cde000008000000f400000027000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2545ccd401000000000000000000000000000000f0f1ffffffffffff0000000040c6000002000000000000000100000000000000fbffffffffffffffffffffff0000000001010000020000370200000000000000030000000000000080000000000000007f000000000000000600000000000000020000000000000000010000ff000000060000000400000009000000d358b47e0d3d567d070723b4689cc5256ad624134ee1abb706cb6363c0ac35b1c0cda276775c470a83af591ea7e5f748da5776ebe14f23cf9a277321ca76296e0c15b64d2d348826f81e773083f57ce3b99f06c8e4ff806accc81314ea2c80c388442ca2005ec8346b4ecbfe2cb030a5001695c303c526b012d94115c02c078e863b58672592a068a7d0c051410847a3e5e8f5b268f2701891a4080f928d717ca6d341680889ce3831f6c5663ab91cc20f4d87e63d2876ddb3c1e470", @ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000203000000000000000300000000000000446e000000000000050000000600000021287d5d4000000004000000000000000100000000000000ffffffff00000000a31b000000000000ffffff7f01000000050000000000000063ffffffffffffffffff0000000000000600000000000000090000000000000000040000000000000008000008000000010000000700000002650000", @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="080000000300000000000000060000000000000000000000ffffff7f0a0000008100000040402c212d00000000000000040800000000008000000000000000000900000000000000060000000000220005000000d41568720000000000000000990d000000000000d1010000000000000000000000000000050000000000000000000100000000004875010005000000070000001f00000008000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r2, @ANYRES64], 0x468) keyctl$session_to_parent(0x12) 11:00:18 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x41, &(0x7f0000000000), 0x14080, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) [ 408.895530][ T29] audit: type=1800 audit(1593514818.973:51): pid=14224 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16364 res=0 11:00:19 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 408.946232][T14224] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 409.019321][ T29] audit: type=1804 audit(1593514819.073:52): pid=14232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/201/file0" dev="sda1" ino=16364 res=1 11:00:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7ff, 0x10000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 11:00:19 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) recvfrom$inet6(r1, &(0x7f0000000180)=""/160, 0xa0, 0x100, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x18000, @ipv4={[], [], @local}}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x6b}], 0x68) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000200080000000d07df2fd08464000000000000000000"], 0x28}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x2, 0x3, "06afe50db107ef35707d80e7e0f491b02ef736fb26ed4d4ca7d083a09777bdac", 0x34324948}) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000340)="ee106d111b1468288ede5d5a16328a5b30884499364946512818304d2b10322bec4229269f28ac5340c73908033da110142673a3a0d7b6a643808fbc7a5644731f233d02461cb304e2bd1d76a0e689ae68c48cb094f6a323f1aac6eced068e1f0c4c23c40dfd184fcf25026f710e588aed90dd0197002fd2ee67947eb5cf0e692487c137d2044c355af69f2c0307063bfcb1a2a4f89c510bd6e758243e0d72bdebe49b93452f364633a30cfc53ba1d", 0xaf) 11:00:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) 11:00:19 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xf00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000748000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f000091b000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000f40000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) preadv(r1, &(0x7f00000017c0), 0x36f, 0x0) 11:00:19 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)}], 0x0, &(0x7f0000000000)=ANY=[]) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x4, &(0x7f0000000040)=@raw=[@exit, @ldst={0x2, 0x1, 0x3, 0x5, 0x7, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xc}, @generic={0x1, 0x7, 0x9, 0x8, 0x6}], &(0x7f0000000180)='GPL\x00', 0x917a, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0xc, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x8, 0x50000000, 0x4}, 0x10}, 0x78) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r1) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x2}, 0x10) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) sendmsg(r0, &(0x7f00000029c0)={&(0x7f00000003c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000440)="d07ebc8fcb294227a3112bbdd8490229cc9d499b8cfab80728552c4949319e7423635740841ddf54d5c716b0f6683b89ea8419229d611f0fd194f0b2cd68fb479d7c5b7c55c6e78a7e96993c6c36dc9cbfab53597411891cb608887e07619741fecb0bf62199f999fa46b491df64a979739c00330237fa8c4d66f9ea52aacbfdccbacf1cf7c10ba7d918b4373fae957c5869f05816948aaeaf483196ac8a5771ecdadaf7f3", 0xa5}, {&(0x7f0000000500)="751f051036b5d886c60db9037e2cd635ea788f7a20461e837728317f078a6aeddbc6", 0x22}, {&(0x7f0000000540)="1e97df7c2de6466fbe092d30e54338e6851c72b2400f8e524bd2fbc8c712031981b2e0f7b8cfbf49162a1c22d1e77690da81c8f639a4411a7243373d1efbe0b1dc8722cd5a498b5400860d460b7d148774ea380b4af20e960d423d0855703c606cad87896c6b4538676571d6b145d07ce97c9b42358c5a", 0x77}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="84a7e3f350b89affdaf1c773f02c288c92ce93a271eaf57aeb8bb45db616e0ca93d5c15ddfadf65f7189f388bf4fd58d5f879e3f40b971a20d1525c3566d65e7a53bd10eaeccf9d7b3015fdc42ab943be46530c9a0905b160c", 0x59}, {&(0x7f0000001840)="fb9ec8de81f8edad9fe4f9436c1e4e52978af940ad32e918026085f9199a0d9931701b23f00333d13a45c1eb2540d639a4d849ef62de2a045b963e4817d6a68bbb68915e4aa5666048a70573b196fad1a52c10340ab85030160d919cb7daf40534769ce645bc4c4b1bad4d4fec5e9497cd17411af4ac223a073210dad614f0842c924f40911073cec1bcc301c549be6c7aed9afd01a5f552037280cf1cfb96ee3a0685d85a36ac7419a2a596b271fdc7dc3de3511ddec1527e7a7698a8182c44db669420e2408c0c99f57543903f8d5c84b7e5f3c3b453cfd15d4df4b932a71f461e", 0xe2}, {&(0x7f0000001940)="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", 0x1000}], 0x7}, 0x0) 11:00:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000000000000611068000000000063012c000000000095000000000000006738c5c87ab69d2120e997d8d257bc71b42a9e016fce361b9ecaf3604edba22989763c3bf71f76dabe71ce05cfbf0bbe628023eccf9dcd1a59bd9c62ff7cec9ec56b1905f7f6eb488d353dedf1dcb2703b314b7a83442c6676eda580fe47175a46839b6417c49d158a3bc99eb9556329acaae35f88a2b672d53e15dce5903812"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x48) 11:00:19 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x143c40, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x38) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000010403120000206e883106000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600270000000000080004"], 0x4c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xc0103, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r2, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r2, 0x101, 0x20, 0x8, 0xffc}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0xffffcad8}, 0x8) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 11:00:20 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 410.001455][T14272] device vxlan0 entered promiscuous mode 11:00:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) 11:00:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4a0c43, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000040)={[{0x7ff, 0x0, 0x0, 0x1, 0x3, 0x80, 0x5, 0xff, 0x6, 0x5, 0x3, 0x2, 0x7}, {0x8, 0x3f, 0x6, 0x2a, 0x64, 0xff, 0x7, 0x4, 0x3a, 0x7, 0x80, 0x8, 0xff}, {0xa92, 0x401, 0x2, 0x0, 0x4, 0x4, 0x2, 0x7, 0xf, 0x1f, 0xf2, 0x6, 0x8}]}) setresgid(r1, r1, r1) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={0xe06b, 0x1, 0x10001, 0x1, &(0x7f00000000c0)=[{0x3ff, 0x2, 0xfd2, 0x80}]}) 11:00:20 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:20 executing program 3: gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12914}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000008e35245cf9aa982406ddddb763a79c5790acd5114e5b14da5c9aa43c7e392a9c51bb00c4be8e83aa8b1a9a89a38a58caebca4c16de01a4032da84e484618c6da0b1da168f9fe77ee5e0a301157d9cfab616352781696b295ae5bd816ca707e2db9eb1a3fa4f3ef5b401ac36104b4", @ANYRES16=r1, @ANYBLOB="00012cbd7000ffdbdf25110000003800038014000600fc01000000000000000000000000000008000500fffbffff060004006f00000008000500ac1414bb060007004e23000008000400050000004c00018008000800740b0000060004000000000014000300ac1414aa000000000000000000000000060004004e210000080006007772720014000300fc0200000000000000000000000000010800060001fcffff080004000700000008000500050000003400038008000500ac1e00010800050004f3577c6e56761f4e240000050008003f000000080001000200000005000800fb000000"], 0xec}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x23) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x200004) 11:00:20 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 410.967433][T14288] device vxlan0 entered promiscuous mode 11:00:21 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x59c635152000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) flock(r3, 0x5) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) setresgid(0x0, r1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="67d62cd489c014453cbe15bc37dabd6148cb2c595322656ecfd3d309fb3f65f6837b2912678c65851be8e43b738f96154f4d569383d458b40c3918b768", @ANYRES16=r6, @ANYBLOB="08002cbd7000ffdbdf250c000000050033000200000008003b0005000000050033000000000008002c0001fcffff"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x200048c0) flock(r4, 0x5) accept4$tipc(r4, &(0x7f0000000300)=@id, &(0x7f0000000140)=0x10, 0x80000) keyctl$join(0x1, 0x0) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r7) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000440)="000003002acf9e5e1dbac27b0426fc0299c40800000000000000c8f35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a15622d328931deb95ef3b4cc5d6d98fcafaece27743a93f4765876ede80ab49c3a4f51ab0124b50c3362201a307df030000000000000000000000000000000001995f600cf786cc4b9e479878608ed78bdcb907ea3ebb622382b20c8b31825d3acbe3d44b20bc1945f131c8d54bc10b03a53c4a03606fbdc0e6065b74dbeddc9ec81ee8bedfa52cbd1fb38", 0xfc9f, r8) keyctl$session_to_parent(0x12) 11:00:21 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1d00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x54200, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc61]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:00:21 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) prctl$PR_GET_SECCOMP(0x15) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 11:00:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={r4, 0xfff, 0xa, [0x35, 0x8, 0x6, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa7]}, &(0x7f0000000200)=0x1c) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000220007031dfffd946f61050002000000054300000000391e421ba3a20400ff7e280000001100ffd613d3475bb65f6400004efb0000000000007e23f7efbf54000000005cc37fcfa3", 0x4c}], 0x1}, 0x0) [ 411.537741][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.576059][T14353] kvm [14345]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 11:00:21 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:21 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:21 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) keyctl$session_to_parent(0x12) [ 411.591116][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:21 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00', 0x0, 0x1}, {@dev, 0x0, 0x0, 0x0, 0x3}}, 0x44) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x5c, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0xa000}, 0x8000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) write$binfmt_misc(r1, &(0x7f0000000300)={'syz0', "7ab1f788db25b0a42d9c8ea7d7d3317fcb89856239"}, 0x19) 11:00:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000780)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001c9e6b4820fc703f99f165d800d3c016081c409a1190a63805", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000a20010072737670360000005400020014000300fc01000000000000000000000000000020000400000000000000000000000000000000000000000000000000000000001400020000000000000000000000ffff000000000800010000000000488306313ea73feff7a29a3851273886abf66ab82f5b684c5aa9f8492f13ce361d148aa89310cb77d9328f82f2def1d831bdc8cef8be25b178ed73b086e66c44000000000000000000"], 0x84}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x33, r2}, {}, {0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x4d5, 0x32}, 0x0, @in=@multicast2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r4, &(0x7f0000000540)="5eb1f8c055201314508feb8e077c67bdcde31cc1815339de34a8b10d73f94c14d77795e9ca6f70be0e108e00e35b1e6921e6a2d2d4fe0383e294a930253a985cfcdfd6ee7c341fc8753c35dc4a60154798905d6ae46528396e687c91a895406a80e8e2dac5938d55140d80a4a4492e59ac3197fb66209a49337a66104a24cb49becfb6238a77afed3f10f7a545520ebf9fffa860e2d0ea37abdddd0bfaeb85de6df0ecdcc34db6f15f8cbfff5021628427f200c5d265dd2772a6a860454e7e55a397906c74d79c5ab181a6ac4d283c6499842cc5ea544e3e8822b57d1fc38460", &(0x7f0000000640)=""/176}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) openat$capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/capi20\x00', 0x10000, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1}, 0x1, 0x42, &(0x7f00000000c0)="c0bbd3c9e00d3da993c650ffdb4bb0cb9b532bfda13e2c30d9e522a84ec4fefadb13c7c6faf2e50bb06eb9a2ee5a23f950639825b9a36302fa9c273279a15963ace7133dc1206f569dd394e7b175eb538c6c7768a73dcfe5c4a74522e34fbbe85161caa0231bf9621b661b1b18b757c229c665c3a8a9210fe0c9ca17a37b2ac3560d31", 0x83, 0x1, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)="fce4cfe721471f45fbe06ca1030f1f0b4e5894a0250103628d03d72ab24518fc414f8035664f1b4602f8e13ca3da4324bd94444c559d2cfc2244aa4bb00fafbf5987b2a5d380b064b4024b83dd52b7d998e718c0c616c3c19c6685f2f7ce5e3cdc6dd6b5ca2586cfd67845255db9d923907eb4b08e035d48c1d2440e476b3c00277bf03f1307b70f202aea2d305d1dec13b1b4651da2a91603b2ab674da7447d"}) 11:00:21 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 4: socket$netlink(0x10, 0x3, 0x0) flock(0xffffffffffffffff, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002e0000082abded00fcdbdf0c00000000", @ANYRES32=r1, @ANYBLOB="1000f1fff1ffe0ff0c000a0008000b000400000008000b008e00000008000b000200000008000b0000000080"], 0x44}, 0x1, 0x0, 0x0, 0x11dc2937aa6099ca}, 0x4008890) flock(r0, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xfffffffffffffe07) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(r7, r2, r7) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000100)={0x1}) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 412.047848][T14395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:00:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e94e4c71ecad2260baf0668a477903e93476b6e9b2"], 0x30}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e6000/0x18000)=nil, 0x0, 0x400000000000, 0x0, 0x0, 0x0) 11:00:22 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 412.108090][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:00:22 executing program 3: perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x2004801, 0x0) 11:00:22 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x6, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0x9c, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "51c4d3eb"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xc89a, 0xcad8, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x7f, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x80, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x235}, @acm={0x4, 0x24, 0x2, 0x2}, @ncm={0x6, 0x24, 0x1a, 0xba07, 0xa}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x0, [0x4, 0x1, 0x7, 0xf, 0x0]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x8, 0xbf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x7, 0xf8}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7f, 0x1, 0xb2, 0xff, 0x80}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0xeb, &(0x7f0000000140)=@string={0xeb, 0x3, "4c8f50540e77abca89992630762e6d8c176a426471fcb2523a5e24c6ea4b9cd60cba0ad6221be8380785008fd0e5d2690b1307921f7c8515a919a2b35747cd5fe0e9b38131287e5091acd401bca33960121bea09a962a651ab34d639cb756c08c0ef32aaf9f46b5f94f74255d71b22c2255788bda5d6b365d453cd93925bcf9942653c57fa2708757200e1a98383dc805dd026be56caee76e7d181502cfec5192f79f0b70cd4b4ab5664dc6823c6de02a35c3ea31701ee37f4c8b8650e4a9aba792cf521aa0584ea33627a68306f5790b6d29cc71c3616c16d0225b9fb97882872e01e06bb3b8fdb55"}}, {0xe5, &(0x7f0000000240)=@string={0xe5, 0x3, "ead4c12aa5bc138631345b26ea9906a139702272924b494ece6ed7c712b0d8987bd79997b8aaec9f21ed5670259f7b789a1e6849f3921d3d39c8e6e3edfc3d9147995fa8ee673a04700626270b7754b7261b9b787e9834bbf70b9c20b6324f38823eb3dca280521dbe12a4e6d5568b310501b7d86a404bfbd3671a6c07432e5d651ab95372149bd2af44b158cb2db6160c5bdef9970e96193bab3f136d2892d02b94b4d2633a52036cb6a58547b35bff517c35c5cdc144486a5b94d1af2f772054918f0d5ef0467299867553358ed7f708ff9e4277091c195d328c640a4143f80b19e3"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1c03aeb250705135bc877714cd400e69172fd2a5cdbd0b986559ddf480186ee68cb78a1c2fe4c4e2c6c470602f0b7e67549463d053fd6279860457956063971fce7723eb99158f6b0a7ba5e3281481c2b758e4b2d22d7db7a80ca9faba2d5626001de0d07f32865af79d9c12914d7f20a137096f572f56807ecaab004b751cf90b3f68a11b1db530027d6e164feb0167ccda14c3156d93ae0df183ea9b09b51c978f5e1e33c3782842831d9210566c34701f4586e0f45fb86912e2af1d345ac2a0584277c531a5514f8669a3f48e165aaf148a1d1c384898bf2718fbfa31fa5835c807a171"]}]}) keyctl$join(0x1, 0x0) syz_emit_ethernet(0x41, &(0x7f00000004c0)={@multicast, @empty, @void, {@mpls_mc={0x8848, {[{0x1ff}, {0x4}], @generic="958ad21acb1b363ca9584f8d41e23f4d3b7b74102670d0b378b581703de0141e14b345c1b11fdc733c9653"}}}}, &(0x7f0000000540)={0x1, 0x2, [0xccb, 0xab3, 0x6a4, 0xad3]}) keyctl$session_to_parent(0x12) 11:00:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x143681, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000400)={0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r8, 0x5) recvfrom(r8, &(0x7f00000004c0)=""/130, 0x82, 0x0, &(0x7f0000000580)=@ipx={0x4, 0x6, 0x72, "23def01b413a", 0x7}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000480)={r7, 0x1, 0x1}) flock(r4, 0x5) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x40010, r4, 0x454fd000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r9, 0x5) read$hidraw(r9, &(0x7f0000000100)=""/170, 0xaa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 11:00:22 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 412.534967][T14434] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 11:00:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xac14140a}, {0x0, 0xe22, 0x8}}}}}, 0x0) 11:00:22 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 412.732304][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd 11:00:22 executing program 3: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:22 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:23 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:23 executing program 3: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 412.992252][ T17] usb 5-1: Using ep0 maxpacket: 16 11:00:23 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x5c01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 413.192597][ T17] usb 5-1: config 1 interface 0 altsetting 156 bulk endpoint 0x3 has invalid maxpacket 64 [ 413.207329][ T17] usb 5-1: config 1 interface 0 altsetting 156 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.242243][ T17] usb 5-1: config 1 interface 0 has no altsetting 0 [ 413.412656][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.421730][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.482223][ T17] usb 5-1: Product: Đ‘ [ 413.486352][ T17] usb 5-1: Manufacturer: 퓪â«ë²¥è˜“ă±â™›é§ªê„†ç€¹çˆ¢ä®’义æ»́Ÿ—뀒飘í»é™êª¸é¿¬î´¡ç–鼥硻áºä¥¨é‹³ă´́ ¹î¦ï³­é„½é¥‡ê¡ŸæŸ®ĐºÙ°âœ¦çœ‹ë”ᬦ碛顾무௷ₜă¶ă¡ăº‚肢ᵒá¾î¤å›•ă†‹Ä…äªï­‹æŸ“æ°äŒ‡å´®á©¥å¹á‘²í›ä’¯å¢±â·‹á¶å¬Œï§àº—ᦖꬻጿ⡭킒é«í´ă©£Í’뙬薥ë‡ï½›ç±‘́”µ́‡ä¡„孪톔⾯â·é…”à¶ï牆è™åµè¸µïŸ—（äॷᤜă‰æ’Œä„ᤋ [ 413.536724][ T17] usb 5-1: SerialNumber: ጠ[ 413.573209][T14424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.912611][ T17] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 413.922874][ T17] usb 5-1: USB disconnect, device number 6 11:00:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x112704, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:00:24 executing program 3: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:24 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:24 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x17b8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x1788, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_ACT={0x1748, 0x6, [@m_police={0x1608, 0x10, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1520, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff7df}, @TCA_POLICE_RATE={0x404, 0x2, [0x1f, 0x63, 0xfffffeff, 0x9ff, 0x29d6, 0xffffffff, 0x1, 0x85a6, 0x80, 0x3, 0x2, 0xfffffbe8, 0x1f, 0xffffffff, 0xffffe35b, 0x9, 0x6, 0x100, 0x9afd, 0x3f, 0x90000000, 0x8, 0x4, 0x8, 0x8, 0x5, 0xa84b, 0x10000, 0x3a, 0xc77, 0x6, 0x9c24, 0x10001, 0x1f, 0x6, 0x9, 0xfffffff9, 0x3, 0x40, 0x101, 0x5, 0x315, 0x80, 0x80000000, 0x4, 0x2, 0x1000, 0x100, 0x101, 0x2, 0x3, 0x8, 0x40, 0x52, 0x18f0, 0x5, 0x0, 0x7, 0x5, 0x9, 0x3, 0x0, 0xe496, 0x97e, 0x5, 0x7, 0xb57e, 0x7, 0x6, 0x7, 0x4, 0x3, 0x9, 0xff, 0xfffffffa, 0xfffffc01, 0x6, 0x8001, 0x1b, 0x6, 0xc8f, 0x8, 0x8001, 0x101, 0x1, 0x4, 0x80, 0x434, 0xc36, 0xf65a, 0x3f, 0x10001, 0x6, 0x1000, 0x6, 0x80, 0x0, 0x1f, 0x3, 0x10001, 0x35, 0x1f5c, 0x7, 0xf03, 0x4, 0x0, 0xfffffffe, 0x2, 0x0, 0x8000, 0x3, 0xffffff7b, 0xe8da, 0x0, 0x50000000, 0x0, 0x3, 0x1000, 0x4, 0xffffffff, 0x1ff, 0x8, 0x40, 0x8001, 0x2, 0x0, 0x978, 0x555, 0x5, 0x9, 0x9, 0x3, 0x0, 0xc24, 0x10, 0x3, 0x93, 0x101, 0x4, 0x1, 0x8, 0x7f, 0x4, 0x4, 0x80000001, 0xf0d8, 0x9, 0x7f, 0x1f, 0xdf, 0x80, 0xffffff12, 0xfffffffd, 0x42, 0x1ff, 0x3ff, 0x0, 0x4, 0x20, 0x4, 0x2, 0xfffffff9, 0x1, 0x1f, 0xa4b, 0xfffffffa, 0x8, 0x0, 0x81, 0x7, 0x8, 0xee, 0x6939, 0x93bd, 0xfffffc01, 0x6, 0x450, 0x4, 0x9, 0x9, 0xf03, 0xff, 0x3, 0x8, 0x1000, 0xfffffffd, 0x6, 0x20, 0xffffff81, 0xff, 0x2, 0x10000, 0x800, 0x3, 0x400, 0x100, 0x2, 0xfc000000, 0x7, 0x49, 0x1, 0x4, 0x8, 0x81, 0x2, 0x81, 0x7fffffff, 0x6, 0xfffffffd, 0x0, 0x2, 0x7ff, 0x81, 0x7fff, 0x3, 0x6, 0x6, 0x9, 0x4, 0x5, 0x7, 0x7f, 0x7ff, 0x9, 0x53, 0x2, 0x8000, 0x4, 0xaf8, 0x9, 0x5, 0x81, 0x6, 0x3, 0x4, 0x4, 0x3, 0x20, 0x9, 0x9, 0x8, 0x7, 0x261, 0x6, 0x5459655c, 0x6, 0xb0, 0x0, 0x401, 0x2, 0x7, 0x80000001, 0x2, 0x3, 0x84cd, 0xe1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x100, 0x9, 0x5, 0xac18, 0x98e, 0x5, 0x3, 0x5, 0x22, 0x100, 0x6, 0x2, 0x0, 0x5, 0xff, 0x800, 0x8, 0x7, 0x6, 0x7, 0x80000001, 0x8, 0x2, 0x0, 0x6, 0x4, 0x3, 0x0, 0x7, 0x0, 0x2, 0x1, 0x10001, 0xfffff1d3, 0x2, 0x1, 0x8, 0x4, 0x0, 0x8, 0x5, 0x8c55, 0x1, 0x264646d5, 0x6, 0x8, 0x7fffffff, 0x7, 0x4, 0x100, 0x3, 0x8001, 0x9, 0x8, 0x3, 0x6, 0x8, 0x80000001, 0x3ff, 0xffff48fd, 0x7ff, 0x3, 0x2, 0x1, 0x7, 0x3, 0xf, 0x5, 0x8, 0x4, 0x800, 0x6, 0x357f, 0x68c96b6, 0x8, 0x7ff, 0x7, 0x40, 0x6, 0xa40, 0x1, 0x3, 0x65, 0x2, 0x80000001, 0x9, 0x101, 0x9, 0x3, 0xffffffff, 0x4, 0x3ff, 0x5, 0x50000000, 0x4, 0x5, 0x4, 0x6, 0xfffffff9, 0x3, 0x6, 0x3, 0x200, 0x0, 0x2, 0x7fff, 0x1, 0x9, 0x800, 0x6, 0x2, 0x80000000, 0x8000, 0x1, 0x40, 0x3fe, 0x9, 0x5, 0x4, 0xfffffe00, 0xfffffffa, 0x3, 0x3, 0x65, 0x8001, 0x81, 0x3, 0x4, 0x2f8d, 0xde, 0x2, 0x9, 0x1, 0x101, 0x7, 0x80000000, 0xfffffffc, 0x8, 0x156d, 0x3f, 0x5, 0x41ad, 0x9, 0x1f, 0xb26, 0x2, 0x4, 0x1, 0x1, 0x6, 0x7fffffff, 0x6, 0xae3e, 0xa4c5, 0xce, 0x1ff, 0x0, 0x2, 0x8d8, 0x10001, 0x8, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0x9, 0xf2, 0xfff, 0x24, 0x2, 0x2a4, 0x0, 0x4, 0x2fff, 0x79, 0x5, 0x1, 0xfff, 0x2, 0x7, 0x2, 0x10000, 0x800, 0x101, 0x6, 0xd4, 0x7, 0x10000, 0x80000000, 0x8, 0x3, 0x7, 0x5, 0x9, 0x4, 0x2, 0x7f, 0x0, 0x1, 0x1, 0x10001, 0xfffffffc, 0xfffff3f3, 0x1, 0x64f1ee91, 0xb6, 0x20, 0x2, 0x1, 0x2, 0x0, 0x20, 0x470, 0x1, 0x3, 0x8062, 0x40, 0x8, 0x7, 0x3ff, 0xfffffffb, 0x0, 0x8, 0xcd, 0xf20, 0x10, 0x1ff, 0x100, 0x9, 0x7, 0x7, 0x0, 0x9, 0x9aca, 0x100, 0x1, 0x1, 0xb09, 0x1, 0x1ff, 0xd12, 0x4, 0x1000, 0x4, 0x0, 0x2, 0x5b, 0x1ff, 0x6, 0xb667, 0xfffffe00, 0xc1, 0x7]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xde}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x2, 0x2, 0x1000, 0x9, 0x6, 0x10001, 0x7e46, 0x85c, 0x8, 0x4, 0x3, 0x3f, 0x1, 0x80, 0x8, 0x8, 0x1, 0x8, 0x4, 0x455, 0x5651, 0xfc, 0x2, 0x7fff, 0x7, 0x9, 0x0, 0xfe7, 0x1, 0x10000, 0x2, 0x7, 0x0, 0x9, 0x9, 0x200, 0x5, 0x78b, 0x1, 0x1c0000, 0x1ff, 0x5, 0xff, 0x6, 0x2, 0x5, 0x7, 0x4b, 0x6, 0x9, 0xa1e, 0x1, 0x5, 0x61a1, 0x8, 0x5, 0x1f, 0x400, 0x94, 0x4, 0x0, 0xaa, 0x80000001, 0x3ff, 0xfffffffb, 0x5, 0x0, 0x3, 0x7, 0x7fff, 0x377d, 0x734c, 0x401, 0x36, 0x9, 0xfffff000, 0xfffffffa, 0x0, 0x7ff, 0x4, 0x2, 0x4, 0x4, 0xfff, 0x39, 0x7, 0x10000, 0xffffffff, 0x59ae46ac, 0x7, 0x7fff, 0x0, 0x8001, 0x800, 0x8, 0x6, 0x3, 0x14c5fcd6, 0x4, 0x7, 0x1, 0x19, 0x80000000, 0x7, 0x3, 0x80, 0x748, 0x1, 0x8000, 0x0, 0x100, 0x3, 0x40000, 0x94d, 0x0, 0x8, 0x7f, 0x8, 0x7, 0xffff, 0x3, 0x5, 0x1, 0x1f, 0x1ff, 0x9, 0x2, 0x0, 0x3e6, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x241, 0x42, 0x4b41, 0x51ea, 0x90, 0x9, 0x9, 0x9, 0x8, 0x4, 0x6, 0x7, 0x8, 0x2, 0x0, 0x9, 0x1, 0x3f, 0x3, 0x7, 0x3, 0x4, 0x7, 0x4, 0x6, 0xffffffff, 0xff, 0x4, 0x81, 0x10001, 0x3453, 0x3, 0x8001, 0x0, 0x27ff, 0x0, 0x101, 0x800, 0x7fff, 0x3, 0x9, 0x5, 0x7, 0x1ff, 0x8, 0xe3b0, 0x8, 0x10000, 0x6, 0x3, 0x0, 0x20, 0x1, 0x8, 0x3, 0x8, 0xa1, 0x5f, 0x8000, 0x13, 0x69, 0x3ff, 0x100, 0x8000, 0x6, 0x400, 0x9, 0x0, 0x10001, 0xfffffffb, 0x9, 0x8, 0x0, 0xe, 0x6a9, 0x72, 0xcd, 0x6, 0x3, 0x401, 0x0, 0x3, 0xb96e, 0xbd1, 0x9, 0x4, 0xd4a, 0x4, 0x6403, 0x8, 0x4, 0x1000, 0x5, 0x9, 0x0, 0x4769d139, 0x3, 0x7, 0x38000000, 0x800, 0x3c5, 0x5, 0x7, 0x5, 0x57, 0x5, 0x2, 0x323, 0xe4, 0x0, 0xff, 0x9, 0x3, 0x2, 0x3ad, 0x5, 0xff, 0x1, 0x67eb91e6, 0x3f, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x4, 0x5, 0x1, {0xa2, 0x2, 0xfffa, 0x1, 0x3, 0xffff}, {0x2, 0x1, 0xfb7b, 0x4, 0x1, 0x1000}, 0x9, 0xffffffff, 0xb6}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x6, 0x3f, 0xffffffff, 0x1, 0x80, 0x0, 0x20, 0x200, 0x7146, 0x80000000, 0xff, 0x0, 0x8, 0x3ff, 0xffffffa2, 0x2000000, 0xffffa7b9, 0x4a38, 0x8, 0x0, 0x1, 0x1000, 0x6, 0x1ff, 0x7, 0x2, 0x4, 0x2, 0x800, 0xb706, 0x7, 0x9653, 0x800, 0xb280, 0x1, 0x2, 0x1, 0xca, 0xc4, 0x8, 0x80, 0x0, 0x0, 0xd91, 0x0, 0xaf1e, 0x0, 0x8, 0x3, 0xfffff184, 0x1, 0x1, 0x8, 0xb19, 0x1, 0x4, 0xfffffff7, 0xb38, 0x9, 0xffffffff, 0x3, 0x7fffffff, 0x5, 0x4, 0x2, 0x2, 0x395, 0x3, 0x0, 0xffff, 0x9, 0x81, 0x9, 0x200, 0x5e5, 0x101, 0x17a5, 0x0, 0xffffff00, 0x5, 0x4, 0xbfe, 0x81, 0x6, 0x9, 0x3, 0x3f, 0x8000, 0x7, 0x8, 0x7ff, 0xf7, 0xc4c, 0xc97, 0x7fffffff, 0x8202, 0xfffffffa, 0x5, 0x1, 0x3cc, 0xfffffe47, 0x4, 0x10001, 0x0, 0x6, 0x9, 0x7, 0x6, 0x9, 0x7fffffff, 0x7, 0x7, 0x7fffffff, 0x6, 0x9, 0x6, 0x6, 0x2, 0xffffffff, 0x8000, 0x14ec, 0x2, 0x80000001, 0x9, 0x7fffffff, 0x10001, 0x3475f6ce, 0x4, 0x81, 0x7, 0x2, 0x77731c7f, 0x5, 0x4, 0x0, 0xc5d2, 0x10000, 0x7ff, 0x6f, 0x4, 0x1, 0x1, 0x0, 0x3, 0xd83, 0x86e, 0x2, 0x7, 0xed, 0x3ff, 0x101, 0x82, 0x7a0, 0x3f, 0x2, 0x1, 0x3, 0x3ff, 0x101, 0x202000, 0x87c, 0x10000, 0xa, 0x1, 0x7, 0x4, 0x200, 0x80000001, 0x8001, 0x7, 0x1, 0x0, 0xfff, 0x7, 0x401, 0x5, 0x3f, 0x1, 0x6, 0x0, 0x6, 0x7, 0x8, 0x6, 0x6, 0x0, 0x9, 0xdfe, 0xfd3b, 0x8, 0xb66, 0x40, 0xc7ee, 0x3f, 0x101, 0x10000, 0x0, 0x8, 0xffff, 0x1, 0x8, 0x8, 0x1, 0x1, 0x5, 0x6, 0x1fc7, 0x8, 0xfffffffd, 0x5541672f, 0x5, 0x100, 0x8001, 0x1ff, 0x2, 0x7, 0xffffff80, 0x4, 0xa, 0x400, 0xfffff801, 0x101, 0xfdd3, 0x1, 0x40, 0x6, 0x200, 0x0, 0x5, 0x8, 0x1, 0xfffffe01, 0x7, 0x2, 0x0, 0x1, 0x7, 0x9, 0x1, 0x8, 0x69, 0x16, 0xb506120, 0x7f, 0x2, 0x5, 0x80000001, 0xffff8000, 0xfffffff9, 0x5, 0x7, 0x3, 0x101, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x3ff, 0x2, 0xd2, {0x7f, 0x0, 0x4, 0x5, 0x8, 0x4}, {0xff, 0x2, 0x44, 0xd5, 0x87}, 0x8, 0x48e8, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff001}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x8, 0x1, 0x0, 0xe9b, 0x1a36, 0xd6, 0x7fff, 0x8, 0x353, 0xfff, 0x9, 0x18, 0x1, 0x40, 0x0, 0x7ca0, 0x100, 0x33, 0x2, 0x1d800000, 0xc430, 0x7f, 0xa19b, 0x8, 0x4, 0x7f, 0xfffffffd, 0xfffffff9, 0x8001, 0x9, 0xffffffff, 0xfff, 0x2, 0x5, 0x15, 0x81, 0x401, 0x5, 0x8, 0x1ca, 0x35897e33, 0x0, 0x90d2, 0x2, 0x5, 0x2, 0x5, 0x6, 0xff, 0x0, 0x10000, 0x80000000, 0x4, 0x5, 0x1, 0x8, 0x7, 0x1, 0x173, 0x9, 0x1b000, 0x401, 0x2, 0x1, 0x3, 0x6, 0x1, 0x5d9, 0x7, 0x5, 0x7fff, 0xcd9, 0x2, 0xffffffff, 0xfffffffb, 0x3, 0x944a, 0x9, 0x8, 0x2, 0x101, 0x2, 0x7fffffff, 0x8001, 0x0, 0x7fff, 0x20, 0xbdd, 0x42d, 0x7, 0x7f, 0x5, 0x9, 0x2, 0x80000000, 0x3, 0x9, 0xfbe, 0x5, 0x1, 0x1, 0x0, 0x9ba, 0x401, 0xc9f, 0x1, 0xffffff9f, 0xffffffc1, 0x0, 0x5, 0x5102, 0x10000, 0x2eb33325, 0x720e, 0x2, 0x80000000, 0x8, 0x6, 0x2, 0x200, 0x8001, 0x85, 0xfffffffa, 0x3, 0x401, 0x9b7, 0x4, 0x0, 0x8, 0x7, 0x5, 0x50746335, 0x5, 0x5, 0x0, 0x7, 0x1a, 0x1f, 0x4, 0x9, 0xffff, 0x2, 0x6cd, 0x5, 0xffffca3a, 0x66, 0x80, 0x2, 0x800, 0x1ff, 0x9ce, 0x9, 0x9, 0x6, 0xfff, 0x4, 0x2, 0x2, 0xaff, 0x7, 0x80, 0x0, 0x8000, 0x9, 0xf6b5, 0x10001, 0x7fff, 0x1, 0x1ff, 0x8, 0x96b, 0x7, 0x45, 0x5, 0x6, 0x4, 0x0, 0x8, 0x8, 0x7, 0x2e, 0x8, 0x8, 0x7, 0x1, 0x8000, 0x3f, 0x6, 0x5, 0x9, 0x2, 0xb, 0x9, 0x9, 0x8, 0x9, 0x1, 0x1, 0x5, 0x8, 0x6a64, 0x2, 0x6, 0x7a, 0x0, 0x3, 0x7, 0x81, 0x5, 0x7e, 0x2a28, 0x7, 0xeb7, 0x3, 0x1fffc00, 0x9, 0x101, 0x0, 0x32c4da77, 0x23b, 0x2, 0xffff, 0x89, 0x40100000, 0x1, 0x5, 0x7ff, 0x41d4, 0x7, 0x101, 0x0, 0x0, 0x1, 0x20, 0x5ef, 0x2, 0xeeda, 0x33c00000, 0x9, 0x0, 0x9, 0x6, 0x1, 0x3, 0x1, 0x8, 0x3f, 0xa6e6, 0x7, 0x401, 0x3, 0x8000, 0x0, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5962, 0xffffffffffffffff, 0x7fffffff, 0x14, 0x8, {0x2, 0x1, 0x5, 0x400, 0x2, 0x5}, {0x7f, 0x0, 0x1, 0x6bf9, 0x7, 0x8}, 0x219, 0xe9, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf229}]]}, {0xc0, 0x6, "4697fa5c1620119a51045822cc92cc7b55030833bd2e3edbd1613c9d28b8f44b94367219f8f1230d2279357f227388e53ebecd830ad6063628ec6dc6715e5015a9b3847b57db1677a52bca91655f5753c0c72c07bcd3566589e69077849f5c84974123707440b0975cf9bab21b1fd4eb414a670fa640b71b4e5f4070c57a4780a71773f858f4562b3f40352b2cfe6ae30eb03a7fc00d1a0ebe0af0e2425599f093021fa66d8dc1edb71ef62c8fcf70308782e65d3640fa3dc491c6c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x13c, 0x1d, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4c216f7f74b17784d39b27cf3a3a0a59"}, @TCA_CT_PARMS={0x18, 0x1, {0xbab, 0x9, 0x4, 0x6, 0x4}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xbf, 0x6, "8d5e73f056b79f5a29ecdd9c931e1a619722b01336214ae38bb2451bc43efa8807b10077793c17b953f5fa10519a7032ebad2f4317c37d4ff23d87060702ff99ba81105ccdc6cca703972999325179c3719087f2f3687ac91e27e902b538baf2239bf8033c3e33468d6d894ccba1ae1b5e92977de0563c611d7c66134dcb7348209824d856cc76249a2619c2fc5d47557ed1b3b17dfaaf6fa356f242c469ff418af2ccdec79caa26597cb1ab7ecc5139bd4d6cefe76e49ef144f94"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x17b8}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004a00)={&(0x7f00000044c0)={0x504, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x35}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x6000}, 0x40080c0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private=0xa010100}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x7c, "e4fbf7e00dbdc24cc0e62eedd3e29a11654c8a60c641f9c495e774b7babd53252ed2f9345147de615b44106827715f584807683d06e873826c84c2c66e5ce53440d61d6da3da4166f904d0f525e84ad25f8f12d17ebe5e1e34e7cd47a7a7e6c8ff4ca91a5efa069c8de061e8bca5504fabb88db288a514c772f23ccd"}, &(0x7f0000000000)=0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) 11:00:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r4, 0x0, r6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresgid(0x0, r7, r6) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r8, 0x5) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='tunl0\x00') keyctl$session_to_parent(0x12) 11:00:24 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 414.574401][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:24 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:24 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5423b6022eb599"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r2, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) 11:00:24 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x20, 0xc8, 0x60, 0x6, 0x0, 0xdc, 0x9348e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2000116, 0x0, @perf_config_ext={0x70, 0xa7}, 0x8000, 0x1, 0x1, 0x3, 0x3f, 0x5}, r0, 0x4, r2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U-', 0x7fffffff}, 0x16, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c00f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x44}], 0x1, 0x8, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x3654]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0xc45) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:00:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:24 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000040)={0x0, 0x3, 0x8000}) r1 = socket$inet6(0xa, 0x2, 0x0) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 11:00:25 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/45, 0x2d) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x43, 0x8d, &(0x7f0000000180)=""/141) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) bind$isdn_base(r3, &(0x7f0000000000)={0x22, 0xec, 0x5, 0x0, 0x1}, 0x6) 11:00:25 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe6ccea3951000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 415.339608][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffc, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab42402", 0x67}], 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008880) 11:00:25 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xf00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:25 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:25 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x1}, {@empty}}, 0x71) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) accept4$inet(r3, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) 11:00:25 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 415.662259][ T17] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 415.691729][T14567] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 415.703548][ T7508] XFS (loop2): SB sanity check failed [ 415.710130][ T7508] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x388/0x480, xfs_sb block 0xffffffffffffffff [ 415.873471][ T29] audit: type=1804 audit(1593514825.954:53): pid=14575 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir396937262/syzkaller.QSKo3l/141/bus" dev="sda1" ino=16365 res=1 [ 415.907640][ T7508] XFS (loop2): Unmount and run xfs_repair [ 415.923112][ T7508] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 415.961403][ T7508] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 415.989518][ T7508] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 416.020651][ T7508] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 416.042473][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.067192][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.077678][ T7508] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 416.106962][ T7508] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 416.118646][ T17] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.148742][ T7508] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 416.160472][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.188172][ T7508] 00000060: 00 00 03 5a b4 24 02 00 00 00 00 00 00 00 00 00 ...Z.$.......... [ 416.202346][ T17] usb 5-1: config 0 descriptor?? [ 416.227156][ T7508] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 416.250635][T14561] XFS (loop2): SB validate failed with error -117. [ 416.443486][ T29] audit: type=1804 audit(1593514826.524:54): pid=14576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir396937262/syzkaller.QSKo3l/141/bus" dev="sda1" ino=16365 res=1 [ 416.557371][ T29] audit: type=1804 audit(1593514826.554:55): pid=14567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir396937262/syzkaller.QSKo3l/141/file0/bus" dev="loop3" ino=139 res=1 [ 416.614648][ T376] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 416.792188][ T17] usbhid 5-1:0.0: can't add hid device: -71 [ 416.798540][ T17] usbhid: probe of 5-1:0.0 failed with error -71 [ 416.826121][ T17] usb 5-1: USB disconnect, device number 7 11:00:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x141, 0x10}, 0x18) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000003200ffff00000000000000000000001334000100300007000b00adf46d6972726564000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x48}}, 0x0) 11:00:27 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0xd}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000880)={0x1, 0x0, {0x3f, 0x9, 0x80000000, 0xd46}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200d7d0000007d043d681bad47e8584d72c9a0cb4923f64c77b8115399fe4d109366019e80ceb7628f8bbc73134079099559fda1623aa0459c2943fbaf824ef36cb8168d74d230c458cb7b2baf910e35c3f232a1dd9a0dbacfebf54f4a40e7a7fdb7d59c6c6f58818c0ce38c9b687403fc9c9859e3affd21b1f1578372dffb4a4eec04"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "77982ab8f62b58a5a7240ea222b54e50"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x3, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x60, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0x7fff043, 0xf000, 0x0, [0xc0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0xff, 0x3f, "ae86bb2d", "31cf71ff"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x40, 0x8, 0x9, 0x1, 0x51}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0x17, 0x42, "8e1ddbe9ecab6cdef37648fabb24491e366d9b1e5880dd2773435b71bc86bc46a8c570e9d53e458eede6a8ed176fd2430af7b6cd43de66322ec68850dd9c5504135c"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0xfffffffffffffffd, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x22}, &(0x7f0000000580)={0x40, 0xb, 0x2, "54b4"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="0332e4e63be7"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cb1d"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:00:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200000000000000000000000800190000000000", 0x24) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0xb75d, &(0x7f00000000c0)=0x2) 11:00:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 417.156367][T14625] tc_dump_action: action bad kind 11:00:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="edec4468aac7bd0537665bcb9c2a825a470225") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) 11:00:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x154, r2, 0x409, 0x0, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x7}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x154}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x2c0, r2, 0x602, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x268, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @local, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x44}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "01e6af1f743dd07214937866c6c03d3c45595086975aef34a9a6e5093547d37a"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x81}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 11:00:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1d00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 417.452094][ T17] usb 4-1: new high-speed USB device number 25 using dummy_hcd 11:00:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r1, &(0x7f0000000100)="ff100000214d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd5d8, @loopback={0x0, 0xac141403}}, 0x1c) 11:00:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 417.812338][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.858484][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.909454][ T17] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.950133][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.997043][ T17] usb 4-1: config 0 descriptor?? [ 418.503477][ T17] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 418.603651][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input8 [ 418.727170][ T17] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 418.806695][ T17] usb 4-1: USB disconnect, device number 25 [ 419.582020][ T9231] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 420.018491][ T9231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.035159][ T9231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.053165][ T9231] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.071137][ T9231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.086986][ T9231] usb 4-1: config 0 descriptor?? 11:00:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fffaf6", 0x17}], 0x2a00482, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1ad, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3800}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 11:00:30 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:30 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x29, 0x1, 0x0, &(0x7f0000000200)) 11:00:30 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 420.362014][ T9231] usbhid 4-1:0.0: can't add hid device: -71 [ 420.373563][ T9231] usbhid: probe of 4-1:0.0 failed with error -71 [ 420.421236][ T9231] usb 4-1: USB disconnect, device number 26 11:00:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff007f0000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fee9fffffb840000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x200000f0, &(0x7f00000004c0)="b95b03b7000300ffe09e40f086dd1fff0600000020000b0177fbac141412ec000001c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 11:00:30 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x0, 0x2, 0x2}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x20c080, 0x0) 11:00:30 executing program 0: socket$can_j1939(0x1d, 0x2, 0x7) flock(0xffffffffffffffff, 0x5) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x727, 0x0, 0x0, {}, [{0xfffffee3, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/241) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) sendfile(r5, r2, 0x0, 0x10000c000) 11:00:30 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630677fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [], @remote}, r1}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 420.926536][ T29] audit: type=1804 audit(1593514831.004:56): pid=14745 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195897667/syzkaller.W032Xs/145/cgroup.controllers" dev="sda1" ino=16051 res=1 [ 420.930816][T14745] QAT: Invalid ioctl [ 420.986926][T14748] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 11:00:31 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:31 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:31 executing program 2: sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r4, 0x8}, 0x8) 11:00:31 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6101000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 421.234735][T14748] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 421.275347][T14748] File: /root/syzkaller-testdir195897667/syzkaller.W032Xs/145/cgroup.controllers PID: 14748 Comm: syz-executor.0 11:00:31 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x23c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000040), 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03000000c80e00000080000000000000387152c359e5f0f9065346a31f9edd9d00ed9adf7aff022089aec7f86568ac8383d3024d6074531356d790910802087d5fafb1b5a25596ec60fef5c5166c5120327e5ea99b17e8a89a897bfbd25f318c7e0a70ef3d73eda829a120db5cd70e5c7fdc0ad0ee5988d066c4bf9c0d18f1348a229df8984fe3d340e5e6b571c0fcfebb523316cddff5b1d93b7e9a237801e6279c7e5a51e8cab007227160aa4deb8bc35e8635a6ea093e9554c096646366248a1cafb54b72e74fa0aec4c0c5d961c605a19d2280ddae04a4efe01330882c856189e44e9b826ceb28a844e88a8fb6fd08a412", @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYBLOB="030000c001000000040000c0080600000e9bb1d88c10b0d1891fd42829d21a6f1b255657509b7df2595b01f566aee142972f49a3cbaa22d437bdec1f9400558aa75b66ceb8cf5e5185127fbe6f1cf397"], 0x80}, 0x1, 0x0, 0x0, 0x8440}, 0x4042) getsockname$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x231, 0xf2002) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000440)={0x2, @raw_data="17c30892170267712767ec25b3114caba4764a4bd4f1d939b6b26cad7ac15ed9d4a24d5fc69026b7286ae3359062356f2c591709276ab71bae2e08a93c20cc6becc5f14bd818d9472c4ca61534ef435f44b98866e10374f705154a8297483b1425eedb67a32114983f4d170efcdf01d5a923b652924b6e5018b9ac0c32f1196445d220b5023f51556e5dfce25b360deebd7ec24bb364102b6b1488d17831ced824c7137a969ca156bd47d2870ad3a5abce8f31f0bf7dcc71fb74f5aa3efd5c805b3705433e1aaeb5"}) ftruncate(r1, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:00:31 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 11:00:31 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:31 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 421.789168][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.851312][T14785] bridge1: port 1(syz_tun) entered blocking state [ 421.878576][T14785] bridge1: port 1(syz_tun) entered disabled state 11:00:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x100, 0x29, 0x7, 0x3f, 0x1ff}) creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000040)=""/57) 11:00:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 421.914918][T14785] device syz_tun entered promiscuous mode [ 421.944652][T14781] bridge1: port 1(syz_tun) entered blocking state [ 421.951160][T14781] bridge1: port 1(syz_tun) entered forwarding state [ 421.996628][T14781] bond0: (slave bridge1): Enslaving as an active interface with an up link 11:00:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x484, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x454, 0x2, [@TCA_FLOW_POLICE={0x450, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x5}}}]}]}}]}, 0x484}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) 11:00:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 422.287817][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:00:32 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffdfd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000800000010000000000050000000000100000338458822674"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000380)) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x567002, 0x21) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f00000001c0)) pipe(&(0x7f0000000000)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:00:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:32 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = socket(0x36, 0x3, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0xb08, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040850}, 0x80d4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x97, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0xfffffffffffffd84, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x78}}, 0x4000) keyctl$session_to_parent(0x12) 11:00:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:32 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x6a, 0xd0, 0x6, 0x22, 0x225, 0x5, 0x2be, 0x8}, "b982fd01a8dcaac1919d9010bcd7ae9cd65ceb2f769f2c66fdeb3b25932c77e8ae090bfcb2f68d93fc4dc1a166afa35e0fa0b239e450c6a72105", [[], [], [], []]}, 0x45a) r1 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r1, &(0x7f00000001c0), &(0x7f0000000380)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') socket$inet6(0xa, 0x3, 0x5) read(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) open$dir(0x0, 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '~\x7f\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fallocate(r2, 0x11, 0x7, 0x10000) sendfile(r2, r3, 0x0, 0x11f08) 11:00:33 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 422.432753][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.021065][ T29] audit: type=1804 audit(1593514833.094:57): pid=14835 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195897667/syzkaller.W032Xs/150/file0" dev="sda1" ino=16162 res=1 [ 423.043438][ T29] audit: type=1804 audit(1593514833.124:58): pid=14832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir195897667/syzkaller.W032Xs/150/file0" dev="sda1" ino=16162 res=1 11:00:33 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) ioctl$RTC_AIE_ON(r3, 0x7001) 11:00:33 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:33 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) ioctl$RTC_AIE_ON(r3, 0x7001) 11:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x44) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) read$fb(r6, &(0x7f0000000140)=""/46, 0x2e) [ 423.668278][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:33 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:33 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) ioctl$RTC_AIE_ON(r3, 0x7001) 11:00:33 executing program 4: socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e2c, @local}, 0x200, 0x0, 0x0, 0x0, 0x82, 0x0, 0xffffffff, 0x7, 0xff}) 11:00:34 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) ioctl$RTC_AIE_ON(r3, 0x7001) 11:00:34 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) r4 = pidfd_getfd(r2, r3, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x280, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x6, 0x1ff, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 11:00:34 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:34 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 424.215554][T14877] Unknown ioctl 1075861082 [ 424.250812][T14877] Unknown ioctl 1075861082 11:00:34 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10400, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) flock(r2, 0x5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1d, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:34 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 424.439958][T14854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r2, r2], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f00000001c0)={@void, @val, @mpls={[{0x7}, {}, {0x7f}, {0x3, 0x0, 0x1}, {0x101}, {0x401, 0x0, 0x1}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x88640000, {{}, 0x5700}}, {0x2c}}}}}, 0x7a) [ 424.552944][T14900] 9pnet: Insufficient options for proto=fd 11:00:34 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:34 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8001, 0x1d) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0x2, 0x2}, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000080)=0x101, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) keyctl$session_to_parent(0x12) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x1212, 0xfffffffd, 0xffff, {0x6, 0x5c14}, 0xfffffff7, 0x1}) [ 424.728577][T14907] 9pnet: Insufficient options for proto=fd 11:00:34 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)=0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000140)) flock(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 424.932388][T14915] 9pnet: Insufficient options for proto=fd 11:00:35 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000280)=0x9) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:35 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000280)=0x9) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x240602, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:35 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:35 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000280)=0x9) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:35 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:35 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:35 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:36 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000013c0)=""/54, 0x36}, {&(0x7f0000001400)=""/253, 0xfd}, {&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/168, 0xa8}, {&(0x7f0000001680)=""/147, 0x93}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/219, 0xdb}], 0x9}, 0x200}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001a00)=""/173, 0xad}, {&(0x7f0000001ac0)=""/242, 0xf2}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000002c00)=""/130, 0x82}, 0x6}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/231, 0xe7}], 0x1}, 0x5}, {{&(0x7f0000002e80)=@qipcrtr, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f00)=""/17, 0x11}, {&(0x7f0000002f40)=""/252, 0xfc}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/18, 0x12}, {&(0x7f00000031c0)=""/169, 0xa9}, {&(0x7f0000003280)=""/42, 0x2a}, {&(0x7f00000032c0)=""/37, 0x25}, {&(0x7f0000003300)=""/132, 0x84}], 0x9, &(0x7f0000003480)=""/87, 0x57}, 0x9}, {{&(0x7f0000003500)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a40)=""/145, 0x91}, 0x7}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b00)=""/218, 0xda}], 0x1}, 0x5}], 0x6, 0x100, &(0x7f0000003e00)={r2, r3+60000000}) sendmsg$AUDIT_GET(r4, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x10, 0x3e8, 0x110, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4}, 0x44000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r6 = open(&(0x7f0000000080)='./file0\x00', 0xa00, 0x23) futex(&(0x7f00000001c0)=0x1, 0x8d, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x2, 0x1) flock(0xffffffffffffffff, 0x5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000004780)=ANY=[@ANYBLOB="0701020729010000640100000080000095010000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c422382d25292aff630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000152a5e620f973bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000830a3840f44f7aa2ba1ab647ebe4cfb16c71f3ff4586ac0b8865f78d35128f626ee6dedf5b6de264093135f00e2d11d0b24c80ebc588fa8822e3d3fa0b8ef5decdc3c09c435735d1398a1627880ad1fd7f73ce4e9d123c0cde0e6d34a17821122923a23977fd10cef08ff2a5bb282e6b19fa8876b2d16153d14ec7dbbd0f9ec9fa4a2b7bcc3ff2ba06db47b2795976caafbb09c522e0e11b52e53666a8866812f7a900eb8eebf465938def56d6e87e86cfa4b0c0ea71b69bb811a4f7dd6db18fddffa4c9e1801df1ce372419cbb9ca3653f23fe750b19a76f7ae94333f34946127c73e2edd22d08ed8b696c02b07bbee119eb529418f81841d30405e221ff1ef21933444d4386e57e37"], 0x720) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/62}) flock(r7, 0x5) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f00000035c0)={0x0, 0x400, 0x79, [], &(0x7f0000003580)=0xd6}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000036c0)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) 11:00:36 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) pipe(&(0x7f0000000080)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:36 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:36 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200280, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 426.091815][T14948] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 426.099929][T14948] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.219798][T14948] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:00:36 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 426.263005][T14948] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:36 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8decc1e05eb3f0000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000013c0)=""/54, 0x36}, {&(0x7f0000001400)=""/253, 0xfd}, {&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/168, 0xa8}, {&(0x7f0000001680)=""/147, 0x93}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/219, 0xdb}], 0x9}, 0x200}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001a00)=""/173, 0xad}, {&(0x7f0000001ac0)=""/242, 0xf2}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000002c00)=""/130, 0x82}, 0x6}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/231, 0xe7}], 0x1}, 0x5}, {{&(0x7f0000002e80)=@qipcrtr, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f00)=""/17, 0x11}, {&(0x7f0000002f40)=""/252, 0xfc}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/18, 0x12}, {&(0x7f00000031c0)=""/169, 0xa9}, {&(0x7f0000003280)=""/42, 0x2a}, {&(0x7f00000032c0)=""/37, 0x25}, {&(0x7f0000003300)=""/132, 0x84}], 0x9, &(0x7f0000003480)=""/87, 0x57}, 0x9}, {{&(0x7f0000003500)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a40)=""/145, 0x91}, 0x7}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003b00)=""/218, 0xda}], 0x1}, 0x5}], 0x6, 0x100, &(0x7f0000003e00)={r2, r3+60000000}) sendmsg$AUDIT_GET(r4, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x10, 0x3e8, 0x110, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4}, 0x44000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r6 = open(&(0x7f0000000080)='./file0\x00', 0xa00, 0x23) futex(&(0x7f00000001c0)=0x1, 0x8d, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x2, 0x1) flock(0xffffffffffffffff, 0x5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000004780)=ANY=[@ANYBLOB="0701020729010000640100000080000095010000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c422382d25292aff630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000152a5e620f973bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000830a3840f44f7aa2ba1ab647ebe4cfb16c71f3ff4586ac0b8865f78d35128f626ee6dedf5b6de264093135f00e2d11d0b24c80ebc588fa8822e3d3fa0b8ef5decdc3c09c435735d1398a1627880ad1fd7f73ce4e9d123c0cde0e6d34a17821122923a23977fd10cef08ff2a5bb282e6b19fa8876b2d16153d14ec7dbbd0f9ec9fa4a2b7bcc3ff2ba06db47b2795976caafbb09c522e0e11b52e53666a8866812f7a900eb8eebf465938def56d6e87e86cfa4b0c0ea71b69bb811a4f7dd6db18fddffa4c9e1801df1ce372419cbb9ca3653f23fe750b19a76f7ae94333f34946127c73e2edd22d08ed8b696c02b07bbee119eb529418f81841d30405e221ff1ef21933444d4386e57e37"], 0x720) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/62}) flock(r7, 0x5) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f00000035c0)={0x0, 0x400, 0x79, [], &(0x7f0000003580)=0xd6}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000036c0)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) 11:00:36 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:36 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 426.436161][T14964] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 426.444932][T14964] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:36 executing program 2: chdir(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) geteuid() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000180)='./file0\x00', 0xc, 0x6, &(0x7f00000014c0)=[{&(0x7f00000001c0)="cb901827a8482441ad46358aa66c7c355e4a5b7bda0c45b15a3b7f75f5e2d793422c8b77bfd74cb362ce87141c3d890830e381316a38235e11a090eb0eed8f488a3506e2d2f3de171cc568d3413bbd4d", 0x50, 0x1}, {&(0x7f0000000240)="73b52d399824e09a30eecca1415e69f36318989e3457afbc9513d4ddfa234ec593dfc22c20612eece4da3a45573bce7f659adc41ac43e6d1afbe75928a37ee49ae3c897ec3c93cb701ac6fc6ab16d8288c165bbe6d3c", 0x56, 0xf1}, {&(0x7f0000000300)="25b8af751afe5102b5ac0ed03b011ac0e28eee0a35c6e676d3d391fea1252f6dbd9ba1844515a205206a5052f084e5e6e8c7800a7d9842621246557329698e7cb41e930abd8aa4be0dca10a1b31be49023cafe4738ab1495b5356e5bbf9ee08994c9c569a59d957d8703307c754dc8454af236f849460acdba319a796c76b673f4f5e1e6e9", 0x85, 0xd2c}, {&(0x7f00000003c0)="fcd6c3c9183417ba47ee2ee9bd3cee1b38b4b672165a2cd82ff6aa0899d47665e3e61b385b76d8c5988a8ddba8de4a229e67c02c0a95ec2dd43a3c9919769c86c74641ff99245c4617be089a07253d0f1897e8acfed3e6667d5180ca649b8a6249fc30223a1d6b50a7e517c2addb979394f98503fa630ff3eac497f2633777a8acba501b1f16afee55e3ba20856954802a6af57039b057f52fc292d758d90424da2b238af13f60af13c885ba0d729f3564bea398085c928e002a4735900cdccf196fbb376ffcada23419e4b8102e0427c31614455ab41ef783876376484b084c8b4444844abf89e8129ffc48be4951cd286bf154eb637a4f1bfdb77ff7a43229dc5c07070ce9b466fd060c7651e3e76862bdaed5f0f084e34b6015d732e17d9b616e3f5cdf938f8b228b728415de85d0a1635b111b330a1bf124014db3f592adf0257cdc6a949e1c10566ba6d23cd5ad2757314fec296ce77c1ea0db8ee53d5ad4806b29e7bc200bf379c68c320d26e0d5ff296abb5ffd068096b2b9040b448bf6ad9223375112cb88fe9875ed87853d3c8c7d7d3b81449cd22f1d0077c137d4e6c446361c7c9629a5ed37256290c74dd316b5a14dbb7c18b0c0374c66244ac7c17b196106448b9327c7ed11f8bd910188c8e4d536c0fe624e42e91fb92beee6b6b121490b412bf2ca1586049c78b8c5e82dc98a99edc4aa5262f2eccda4303a95a8766fed2dc58c967171e1e98521e7487066c591b1a8c2310da7bf9235730a336005e68105863a18babcd575126a116527d7e4fa7410168f5208e7d1dd24cfc3d75ca4572500c44c8b9d6ec3696986a3d20c66d00097ca95aab717d43058d184ea20498303e4b4d5ab075e177d01760e8af28183149450029d815f61a8720ac6f13885e0932496910e725b984f2ee3f2b6da9cb9247ee606c598b2eb890e4c837d8b16a198c75c5bdbca2526b4d04f6cce71450903e3137a25b89cc0ecf211490439f0bfb90b23fec882e428fdb7dfc0467e13c415377658bfb951486f663ebcd8e403ebe6ae534609626f880eab1850ab225af962375bb45decdfdea09c93f10cb7bacaf99cd773d81d005e6cd994f839417ecc7fbcc6b6dda601edc6543a5603a8d6c13f53dcdc15c5b7ee965d372147a6609b9ffc09c27b3105207e5ef656aaab22a4845c22b68b9bc73123ab4c3bb42c4807d1751cc2030b9413f69346e3abd9184f856794d0a12108fabb99ba8f32c0113908e72f14eb82393f951962e54de7d214129fb7dc7422963ee779136d220253b8ebae16ba935b25512afc1f086f93443158408e3c726c6aefc03635a4b4cd78400e7f447afbb7590a640ea5d0d7f858022a0fd78c41b2eaa9e7cdc811726ef44fbcc08cbab08286f06c88ad8c5269b665d6e1c075f134a6d8ceaca2cb39551f8430828183640ada31c0e392dd97e23ed7908cdc48ec824f6fa6ee70a9a6ad057546124d97ab258324a9339a10119b47c25713e48da3ee9ebe7fc7dd023bd8de96bfa2a21fc5357fe3dc7d13e84291b2a1c792c61e4880cd7dd94347231f35450f682eaf85a877686b615d40f5b1241976cd5d0b8d34e5f51a34dddbb64a706bcaf84898a27861b33d6ec6cc1b95194116bf42ffead0c0f84baaa77e89bd32e14625292f0ae45cf47463b73cebcac75979b9b0faa258021f8fbab0a0f115d56444c822d639f38a419b4892ba20c5fd507c24c255ef825aced60cdb1d30c3587b6c977a11750ea114931cf194b949f84f877452519b2c0b1ad51e507b6466ef23dae3bde8860da4202fe61b301f5750f7b84c8dde5d4d89318f02104f614eddec41bba306020189433b61b73774e3976cbe816a10161a8f4d80db88f4e18f255f5cf9ce6ca347f4370e25bd84b6e63ec4c54513e9ac8235be8e8ef4cebf0b9d8a15d92247230b275e6e1a6c3453dbdaff3fac40a188a2a8d6d545f6567a3630f099339314e93335d2bb6f6f34de5e2032aa1dd424ae67304f4a9aa5e713c2f5b4e112c8047b1bd5e176aaa0fd2935dfd665a348dfbaa5ab8e181fb0f2f11712ce2befd572feaeec15162200934cca2e25eaac5df3785afc84fd340222ede0d636586354d74071bb9964ef6ec06b17956d8e0c4e568697a4e0fb0c305fb6bc9db03a368b0de4f7525c44d23d59ebf8ab207b1b72f95bf27893e1661cc0e4eccf9005379007da14a694959ea7e02659a6df1650922f48b4eb322a0829c9aae3d7e7297e0e25c098a180ba098815474b458a363eba435dd7edcd06bbc789bd0b06c3f447c7964db65c667e7221d266a149741aa1b56a34a65b96045d8a16db01e0504651fad84dad26cc7f09e00667157df248ad1721b8d8d1f452834c716fb73db7f14dc0f3eae3e7132cc8ae8e29a474977b73d9e74dfbe952babaf1c41d5e7bee3f9453cd88320e17ef7560a5a41531899c88fb62a6e4a3074af4feb7debd35f81d3244ff6cda0e3af3c3001eb80622ecf69b623ea8016a07440b6df87d9df9dc92b73b583be38b1843b2481b297d15166aea312d65e616e117f5732e6ec05cf0e89ef1acede53313db73213c85e23d4bb5c78c808934e37ca071bbd8a37fd413769162073de9c97e4e1c9ce313a3325e5b7cd0a951cbb2779e0a85ed7b366e206ef427405101f71db422ebe7e00e03be10812624e3d7e8eb688ec18221438d8b30bea8b76cbdea96f8bc94fff9736e9fd2b16110f2ddfba7a807fdc1958d75daec1619ba68ad10e01910070258ae7b02fd04366c761fa176a221966d99c72f89719dbbfdf3745a586d26ef449ff85dba9b7f36db703108e35de5cbdadbd405cbbc2f9de496dcb65e76b928dd15feefe015f256f2679c2a59d498ab14e0aebb03ffbf9fde597ee3e0b1e509972e5c745f7fda97f6fee771a338f4a53a333c4c41053f5d30db52fc2d041889bff99ce6469c46926a07ea6a3148de960e1d5b1896af099fcdf145cd476c0f3126f039ec6320c5e8e89fe2cac48b7e7b539fb0536d95e78ab4a0a328f74adc6370e52656ea3be1ee8332c995d984d0e2cfd3b09e08f6a08900388a6c7e8a106ee8dbc723a3dcc2edf06c57ef149f22853fe2d05a971ee1d622a9945db5b1311c440ddb17ab19a75a7792567a169be199c50e5f71704ac49a8423d2861fe8c3f3fc0ee33b4a2a2608efa34e0b5eb5f73cca458048a40c9557838996fe87ec3dec33ef58c74d78d35055bc68d109e2c22b979453b5e02dd6e641d64eaf56218326d4b855463677d8a6ecda43d09d9aa3a926f5a94bb3f3d2a820280cff60199899494f65c6e8ca00a204147f5a462102cf677d2e950379e045fe4416245df449fd4e153f480f31114847cf5b4c1253da07afc4e9157f1b5b1d23cc2bfb0d77d49aa5d0b5c6be58c614f09bb7853fecbd0ad23141163f882d8edc6866dd704ca50d67b111fb54d0832113341c070def45e81267b0db9a353eca2bda35d63e303c0598e2142fb614ee8a28ee5c0bfbc0361e987b7cfc86a040e7ac788a732f3886c879d3111e82f270e97e5c0bbeefaea94514409b6e6b08d2de74ac8de5041b4af6363eb31f1b556ea64a60843ea68eeaff82c06433b464928db802cd48ea19e9c583451055b3e564425c6177c55177b7f0c09be8deb7d432d59a61349b3ec489e7491f5364e7332aae195131ef5c46e572751e5430821767e538e0cbded0ff49dfe5656c0fabf6d0d3ac9a6e6ff9f69f5dddfcd04248ced1f0a2c5b23cfef75c71350c3949945ab3521b0b3dce33021d0ecde21cf6ccfdb5f6f04397e58958767d036e1788b3861a9795c6d398264fe3b42ac3caa7ab5d6f5112580263731c206cd84b5413fb5f1d27690ea4fa62bdac90a5483682c49d9ea32bcc165355d824a703bfd26638688ec31a750e63f7ff1b569b2a721a14237b702109c88948ff1d9220dc633f4b2ef6c34acc9ca28426a089d806984b3dfc2b904fdebd3aefd7ab2e0d5ed8104c5bbf09200f7ce4e3cbb3aed3e3b7819f7780e9662fe797ad146bb4ffa3d73209dddd2179e86d93503501542dca67f7707c8aad37af50b8db9a321961cee6a2a95568bca2a0b1d4c0922be174381b4d3d81dc11a9fb49c4907c1d7416324307b92074becae59650d7a1a18367df58ec3c6702d37b280a9ee8cb9c675d33a805c0cda0ba0a6f9ddd068b27ddfa32031b0293cb18dcabea318d6f4c32ca6a0bd9d9bda5b6206ea514b74d24d031c261d42f577d41f49409b272365851605b0ff4da8ab28e3ee351564013e2f6d845d612ee65f66a2c81537fb09d0d8208ad26c6ea98448fa43e10d6788ee830fad1b8fe748af8229d80a3dbd3c12c386ced354f5f2c87547eace9b9fa25f643aa895a5fb08d426b82aa82ab1c69932d81e40139731060ff4572edd74657597ff49b12433bdbbc52ce07cd71ae9a2c3792e1e9834ddf23d50ebbedf647c599b5dac6019a073ce321be6fe89ceea957af27858dce32a1c4387221c09a3c486ddd10ff11fadbebf60f20fe80d4146089eba2ba433f2067161b25ac1766e4ce3d1185b2632a1c27b2d89ad54e6ddd506b0c436742ae11d26678b24a1be3272dcd2a2f9aad53a8abad477bd3aba30b13bf5adc6a0bf62ee2a9994c31633cb48f4426337d51dcf29081a2d2d5c8daaeb691e665f0ce899808fd8b30001979ce93523845d355d12359e956e8a7a284f399fbc17b4ee5b35e92b26130427b05997f51d181a370faecfecfb32095ff3f911fcdf9027cef92c73e515de1900d7aab38bf2f57f3fe165cef8082080efb36d763e97a5c58da5d71329f071e6aa952984e24053e2b2d277f796f73b3ccf6ddcef2f4a713b3d64ef5c64503303a53cb68a1572b92df062d46b38a2a685ab96eafa7fc6c81e8311ad8b90d70f78d91d10916b5b7b50ab2b4bcab154dcb7565f30117e79fe06b550d8085e454784caa0e000832e0445fb47f30eee41074fc0fab6044a2e35d72a266741d6a772c11238245ac9726393456485d31b625c156cf4b0851f6a259db8212a9924a8c126fb3cf66d6948c19690bd01c6421d9371a31a6e91bc51ca251ad2e8ec9100ac58dbb59d2176a2c84dc22140bdcd3a6f639f5ed3cf1d1b22c91984a849e8d0d9671eb40527415a63fd88eddf7bda97edf340fbd17b9bac7dc7db9e9afa17f25c019e474c5bf94e34c14574fe76a543d87c2457c14c48790f2747a8c5307cded1f9d86f103c4369e306d1287db3832c8adb3e67035fcced91093187a3da7b2d09c5632ffc50926f007932c6df6940bdb77c5ff3f6b354d48989f8dff93df802309b96cadb99bccc266e2055c4963a7a2c461e998b858b75965d22ee721f427573135974bf3cd22b2e26e6c7e526b2c8a76ade638e2ce9739e07d7477b0744cdbd1d9bdb31a45627b55bc069f3a5b6be46160dc9120d2e2d7f35b181da383dcd42452fe59d4b646f5b750a455da3b108cdd7031c66d9172469690d251f6b5761fd75976aa7c811704307e6d8ada06415fe35f4c9af6e35b7b960d6127e6f548d97ef8aede5069f1009b324edd4398f867cc629dd70ec0810f3231c8b5e29acc847f02c8defc66960934636e678b23baed831edc1710d0be381b1fffd9c62c961359bb2d92a8f52c25cd0eaa756abe29bade988c0963ae838349e2f19e9f959b29462118978e903a8c74c5c70d78035233f0ff963b9fad42df753c30fb238f67d7dd172d51390f834a386cff749aac1e8fb2eaa346f2f039a49b1489443760db2418077eef4e98854d4392313022c5c1185137ccbecb01e543e7", 0x1000, 0x100000001}, {&(0x7f00000013c0)="6fdd9a52b22737a7da480b88", 0xc, 0x9}, {&(0x7f0000001400)="769aa36759b6197244b33d9e00f2767304b7ab7bedd83082acda3775a7a57efb722370e0b391161d249254ce972fb2708b7074e4a2de7e8b07cf80f4b09f97f9168694524860dca653a3bdf488bc6fef78ec05ec5545d392b540c2be75ef04d0cd19c39accadf3061931515f6e5f2f8c2676fd11aafcf7976faa75486878454b63bd09a387f85917e9e4ead3c30d51c8f792d097a032d908f3d223ec8c9e", 0x9e, 0x2f1bb946}], 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1}, 0x0) [ 426.495147][T14966] 9pnet: Insufficient options for proto=fd 11:00:36 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:36 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 426.614663][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.622714][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.649370][T14972] device bridge0 entered promiscuous mode [ 426.690771][T14976] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 426.756410][T14979] 9pnet: Insufficient options for proto=fd [ 426.827906][T14980] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:37 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 426.878264][T14980] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.886243][T14980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.896129][T14980] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.904366][T14980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.074184][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.081522][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.102767][T14984] 9pnet: Insufficient options for proto=fd [ 427.110729][T14980] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 11:00:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:37 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:37 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:37 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 427.639792][T14972] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.667285][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.674533][T14972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.681999][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.689136][T14972] bridge0: port 1(bridge_slave_0) entered forwarding state 11:00:37 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:38 executing program 2: chdir(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) geteuid() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000180)='./file0\x00', 0xc, 0x6, &(0x7f00000014c0)=[{&(0x7f00000001c0)="cb901827a8482441ad46358aa66c7c355e4a5b7bda0c45b15a3b7f75f5e2d793422c8b77bfd74cb362ce87141c3d890830e381316a38235e11a090eb0eed8f488a3506e2d2f3de171cc568d3413bbd4d", 0x50, 0x1}, {&(0x7f0000000240)="73b52d399824e09a30eecca1415e69f36318989e3457afbc9513d4ddfa234ec593dfc22c20612eece4da3a45573bce7f659adc41ac43e6d1afbe75928a37ee49ae3c897ec3c93cb701ac6fc6ab16d8288c165bbe6d3c", 0x56, 0xf1}, {&(0x7f0000000300)="25b8af751afe5102b5ac0ed03b011ac0e28eee0a35c6e676d3d391fea1252f6dbd9ba1844515a205206a5052f084e5e6e8c7800a7d9842621246557329698e7cb41e930abd8aa4be0dca10a1b31be49023cafe4738ab1495b5356e5bbf9ee08994c9c569a59d957d8703307c754dc8454af236f849460acdba319a796c76b673f4f5e1e6e9", 0x85, 0xd2c}, {&(0x7f00000003c0)="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", 0x1000, 0x100000001}, {&(0x7f00000013c0)="6fdd9a52b22737a7da480b88", 0xc, 0x9}, {&(0x7f0000001400)="769aa36759b6197244b33d9e00f2767304b7ab7bedd83082acda3775a7a57efb722370e0b391161d249254ce972fb2708b7074e4a2de7e8b07cf80f4b09f97f9168694524860dca653a3bdf488bc6fef78ec05ec5545d392b540c2be75ef04d0cd19c39accadf3061931515f6e5f2f8c2676fd11aafcf7976faa75486878454b63bd09a387f85917e9e4ead3c30d51c8f792d097a032d908f3d223ec8c9e", 0x9e, 0x2f1bb946}], 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1}, 0x0) 11:00:38 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 428.025561][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.032811][T15010] bridge0: port 1(bridge_slave_0) entered disabled state 11:00:38 executing program 0: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 428.103732][T15015] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 11:00:38 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 428.292775][T15015] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:38 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 428.363267][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.371160][T15015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.381068][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.389028][T15015] bridge0: port 1(bridge_slave_0) entered forwarding state 11:00:38 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 428.538930][T15025] 9pnet: Insufficient options for proto=fd 11:00:38 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 428.642048][T15015] syz-executor.2 (15015) used greatest stack depth: 22496 bytes left 11:00:38 executing program 2: chdir(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) geteuid() sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000180)='./file0\x00', 0xc, 0x6, &(0x7f00000014c0)=[{&(0x7f00000001c0)="cb901827a8482441ad46358aa66c7c355e4a5b7bda0c45b15a3b7f75f5e2d793422c8b77bfd74cb362ce87141c3d890830e381316a38235e11a090eb0eed8f488a3506e2d2f3de171cc568d3413bbd4d", 0x50, 0x1}, {&(0x7f0000000240)="73b52d399824e09a30eecca1415e69f36318989e3457afbc9513d4ddfa234ec593dfc22c20612eece4da3a45573bce7f659adc41ac43e6d1afbe75928a37ee49ae3c897ec3c93cb701ac6fc6ab16d8288c165bbe6d3c", 0x56, 0xf1}, {&(0x7f0000000300)="25b8af751afe5102b5ac0ed03b011ac0e28eee0a35c6e676d3d391fea1252f6dbd9ba1844515a205206a5052f084e5e6e8c7800a7d9842621246557329698e7cb41e930abd8aa4be0dca10a1b31be49023cafe4738ab1495b5356e5bbf9ee08994c9c569a59d957d8703307c754dc8454af236f849460acdba319a796c76b673f4f5e1e6e9", 0x85, 0xd2c}, {&(0x7f00000003c0)="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", 0x1000, 0x100000001}, {&(0x7f00000013c0)="6fdd9a52b22737a7da480b88", 0xc, 0x9}, {&(0x7f0000001400)="769aa36759b6197244b33d9e00f2767304b7ab7bedd83082acda3775a7a57efb722370e0b391161d249254ce972fb2708b7074e4a2de7e8b07cf80f4b09f97f9168694524860dca653a3bdf488bc6fef78ec05ec5545d392b540c2be75ef04d0cd19c39accadf3061931515f6e5f2f8c2676fd11aafcf7976faa75486878454b63bd09a387f85917e9e4ead3c30d51c8f792d097a032d908f3d223ec8c9e", 0x9e, 0x2f1bb946}], 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1}, 0x0) [ 428.780376][T15032] 9pnet: Insufficient options for proto=fd [ 428.814164][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.821511][T15033] bridge0: port 1(bridge_slave_0) entered disabled state 11:00:38 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 428.889645][T15034] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 428.982441][T15038] 9pnet: Insufficient options for proto=fd 11:00:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 429.162629][T15034] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.189858][T15034] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.197543][T15034] bridge0: port 2(bridge_slave_1) entered forwarding state 11:00:39 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 429.206816][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.214573][T15034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.276244][T15043] 9pnet: Insufficient options for proto=fd 11:00:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x360, 0x9403, 0x0, 0x360, 0x2c0, 0x468, 0x3d8, 0x3d8, 0x468, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private0, @private0, [], [], 'xfrm0\x00', 'lo\x00'}, 0x0, 0x338, 0x360, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x8000, [0x7fffffff, 0xffffffe0], 0xff, 0x2, 0x3, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @local}, @private0, @private2, @private2, @dev={0xfe, 0x80, [], 0x21}, @mcast1, @empty, @remote, @private2={0xfc, 0x2, [], 0x1}, @private0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}], 0xf}}, @common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4=@multicast2, [0xff000000, 0x0, 0x0, 0xff000000], @ipv4=@remote, [0xff000000, 0xffffff00, 0x807fffff, 0xff000000], 0x4d6, 0x3501, 0x3c, 0x1, 0xb, 0xa}, {@ipv4=@private=0xa010100, [0xffffff00, 0xff000000, 0xff], @ipv6=@dev={0xfe, 0x80, [], 0x12}, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d6, 0x34ff, 0x6, 0x0, 0x11, 0x8}, {@ipv6=@loopback, [0x0, 0x0, 0xffffffff, 0xff0000ff], @ipv6=@dev={0xfe, 0x80, [], 0x32}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x25c71df6, 0x3502, 0x1d, 0x0, 0x10, 0x18}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0xff, 0x0, 0xff000000], 0x4d3, 0x34ff, 0x73, 0x0, 0x1}], 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x80, 0xfffffffc], 0x81, 0x2, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) [ 429.487237][T15050] 9pnet: Insufficient options for proto=fd 11:00:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x20200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:39 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 429.604247][T15052] xt_policy: neither incoming nor outgoing policy selected 11:00:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1918ffd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) sendto$llc(r0, &(0x7f0000000100)="5de61d16a5877da71cad01140c1e135c93a65b9716b0fcc456f4c508acfec1b5f01ba20e6bc96a220159fb6a253736d27d5fef25dc2d8340dd866ccaa911873da86bffba4b3c199f892c7e8bbbaad2f3cd2f1481464a7ae05d3fbbb9b0a76174027efc1f6e465a5074842318b8fb43a9ea339973cf537123794dc86a78dbd640afa5a2e93136ebcb1660e06e50cd218b66d62d08b84b4a4f944e7d27f07753c248f25cd0cbe1e0cb3aad617a780c13b8a920f606055446cae8d8072d96d1a4e91b62a7187edc049fa8599e9cf6027d0ed61953be059249f12eb54ffb14104f63cf64c3775ddfc8206b91dd9960be42ea", 0xf0, 0x4000000, &(0x7f0000000000)={0x1a, 0x104, 0x3, 0x0, 0x0, 0xff, @remote}, 0x10) [ 429.674226][T15059] 9pnet: Insufficient options for proto=fd 11:00:39 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:39 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@initdev}, &(0x7f00000000c0)=0x22) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, 0x7, {{0x7}}}, 0x60) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f00000001c0)=0x1000000403, 0x8080fffffffe) r6 = socket(0x2, 0x803, 0xff) flock(0xffffffffffffffff, 0x5) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x10, 0x4, 0x8}, 0x7}}, 0x18) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r7 = dup(r6) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) 11:00:40 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 430.021164][ T29] audit: type=1804 audit(1593514840.095:59): pid=15074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/226/bus" dev="sda1" ino=16379 res=1 11:00:40 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:40 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x12}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:40 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:40 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:40 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:40 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 430.800321][ T29] audit: type=1804 audit(1593514840.875:60): pid=15096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/226/bus" dev="sda1" ino=16379 res=1 11:00:40 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:41 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) [ 430.933424][ T29] audit: type=1804 audit(1593514840.925:61): pid=15096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/226/bus" dev="sda1" ino=16379 res=1 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:41 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 11:00:41 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 11:00:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x3, 0x266183) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="006fad4ac2c206e53f070c000031082a9070be8083f20000990000000000000800"], 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)=0x2) syz_usb_ep_write(r0, 0x0, 0x55, &(0x7f0000000400)="000000a6bdd5e93f00000015b0c3c8713aefe3c7b2b9e707949460118035266f4bced6f0263fe4e5380a19c6bc2eb2716fa5b3dcb3ed927b7ab5224a64e34b1bee4f011f1aab323795c66d94de8385b07266b20d09") r2 = syz_open_dev$sg(&(0x7f0000001980)='/dev/sg#\x00', 0x5b, 0x8000) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000180)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)={0x5c, 0x16, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="a08a5f7e8e978257d64662aa345d54326b48eb319994b5f9179fff45f0d3bab6e770808817d07535162bdade9742094cb067fc63b707653722d0eb7d320c3b278ee7caf5b7551ec15a"]}, 0x5c}, {&(0x7f0000002d40)=ANY=[@ANYBLOB="301000001b0000042cbd7000fddbdf04000000001c0000000000000000000000000000000000000008000c0021bdcdbcd242d39fb83aa8c7c4e23fb4b84a6ceb7b86e860758022f8232bdb57e8a9ea6e5ba84f58eb46c442620028efb9452d8d6355b550719412d1bb160b855ba339812523343095567353c46014a5f2f263d25d4c400e9749e280cfe595bb4738cd9bb2c33b8cc36f032eaebb9c21e243643cdaa2f780641498562a36768c8175baa4b66e79b0336fc55933b52fd75f09ec2a92b48c63530ad3e65a0696b5a8600f18ab2b514c4d8d5fd78a307d840049e4c1ed", @ANYRES32, @ANYBLOB="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"], 0x1030}, {&(0x7f0000001c80)={0xec, 0x2a, 0x1, 0x70bd28, 0x25dfdbfd, "", [@nested={0xa6, 0x5b, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @fd=r1}, @generic="318d7180b8bb947646adace6526803cf620b3ce83051a5c1ab73ddbcc9c5bae7f31ef6cb5729477229d3a88a627592eafa70dacfd7bc3c709c8d90a7e2a34e31d56677d7bbb32c00622dc825128c1af0ead4d562a57c414ce8e517ba5a750a33c5af5a543be62881c691597a8467428d7a461d4e6cbbae07182cb3efd3101744c4d251c0d8316c31a5aa4113db2607ed4e4c3ed118707ad546d0"]}, @typed={0x0, 0x3, 0x0, 0x0, @binary="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"}]}, 0xec}, {&(0x7f0000000280)=ANY=[@ANYBLOB="600100004100000826bd7000ffdbdf25040081007100208008004000", @ANYRES32, @ANYBLOB='\b\x00:\x00', @ANYRES32=0x0, @ANYBLOB="08005400ac1414aa79664a76a9c1ee33bddb384c71a37fcadbf1f762c31ea7a489b8578fc5a4a9c5cb96d3dd5c5c7e8814c70ec7d19050ea1095a55cbf70eb37c7c05f768507923da6c4103d42cac583c34051c2b5080087007f000000000000d50028809a0f7a3dc3e612fb8673054734afac245a8a9511c2bc71ca82270a0e9a017ac8d869a6caeecf62d7da89aa094566c9221e8738e72583a3c76678635095e6704bc87315591562e3191c66b1455e7cb8fbe01b3df88b42d67b1904a858b7681cfe7899d55144192f718788d5bdb815b6e2532a71279f49bac2e6019932cb98f1ec675be7ed1f9a6d316e84020658ff08000a00", @ANYRES32=0x0, @ANYBLOB="95e0c666fb2eda0a35c27a9ecc4833f6c9edf4b4bdf1ab90555edd24d630cc649edf145c7c5810e964f4c721c35927cf25501b4c82816b8fe6ff00"/70], 0x160}, {&(0x7f0000001580)={0x3e4, 0x3f, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x281, 0x32, 0x0, 0x1, [@generic="3d699abf4eb44a1660098e57564c4a1ddb2470cff0e3f9d4f6921bea4dc5da24499ed30b8a7b911bc13c7eb4860547dd8fda3dc22006768e8096c2c2d159f1da85a3950001855792d4476f407e71da34f6d28a4f6785774b3b004d26db133c2a71f6c1897302655175088455c9464c4c06a3afd895db717a1690beddffe9d87eb64def7fb705cc31db646beb2a429a38f9c9c99c5ed101c0e8ca7d94a9d7b5fc1b623ee2b3", @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x3b}, @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @generic="c39f092e2fc7416f870821706db26e44ed34636bd6f300137c15900d5910c79254f5453e6fcc548e62d0a7a7d93cc2b753d34aa8144b825fa330cfbf43ac9961903b012a027a75fa044d6a5f48702f2ef62634666f07d85d9876f5b058a8047062ab46031c989b74d42f333c485a93feaa32e50b3b1964aced2b9f1e8fd32d2f1dee7e5531181e98040394f5f6ec7cffe45e23e72d4fd66ddb5254d3f5434da7632477bafee1c8ea5c9d2af91b91313a98add3bca5a15fbc9f622b09cc52ee1340192ac9d9a1d178c3", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x98, 0x2b, 0x0, 0x0, @binary="fd9b991844d356b6cc23100bff69903839f9713a1630732f26096e6c2bea018f8a16774e344c2c7646c6e639cf59af8bffc206c5e5f472d76cf1d2d854dddbb3fd4033a0f112c67ab849276813aa851d2bcbe26e407898aa92d1983bad4519058a2f923d8c2181bcffe9ad43e14a8fb3f056e43630350f1adb74beed916102ae445acff3f84d9d52ffe3dcb9a08b4a6b0f1dd08a"}, @typed={0x8, 0x23, 0x0, 0x0, @fd}, @generic="4b0549828d6e590f88f231254bf66e23dbafafedeee265b472b4c0531ab004778783dc00c9c873aa5ea72c4ab69552990c8eea6d8f26bd1de026e2789771a1a1c4acab1efe1bc1cdac864a5c45c62080d7b7ab"]}, @nested={0x14e, 0x19, 0x0, 0x1, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@mcast2}, @generic="81cc82efb5081d5af7e8c590ebf07d8ba3fc913b0ea583e07767aab0ffc9ed7885ffd4631e45fe9b6ce3287ee40b8f", @generic="894d2005a60e89a731212f4a5331a98d33a0d0fd2246eb57cf8bf662eb6c502ef1795921e0ab0e3e3168353a7ca139a07516db9f2284c77347b932cf3379b6358f9106bc909583f8263ff0312947f952bf147621fa0c2a7e88e86c93e107422578751f4aa8b39450546713a0aa62d81feae6e2e0ae6e8be0bb2a497e70935b4741e90e5fdb3b59561b378b8ecdb36921866743222f0cf298c53c9b33a2af4178bbe4fd1dea265e167b2fbe55edea9e50a6c1e28109", @typed={0x4, 0xe}, @generic="8e12a7fa8191e2f4b618c1f73d40cc62c2394a31d19ee19803af626aca2af3c75f8ce22f7f777fa187006b282cbca049ea3c185652583dc17be1", @typed={0x8, 0x86, 0x0, 0x0, @fd}, @typed={0xa, 0x2e, 0x0, 0x0, @str=':%@^\\\x00'}]}]}, 0x3e4}], 0x5, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0xfffffffffffffe3f, 0x1, 0x2, {r3, r5, r6}}}], 0x38}, 0x0) 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 11:00:41 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:42 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 431.949389][T15134] 9pnet: Insufficient options for proto=fd [ 432.031387][ T17] usb 4-1: new high-speed USB device number 27 using dummy_hcd 11:00:42 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 432.077355][T15137] 9pnet: Insufficient options for proto=fd [ 432.271345][ T17] usb 4-1: Using ep0 maxpacket: 16 [ 432.391575][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.418396][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.474887][ T17] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.504173][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.542908][ T17] usb 4-1: config 0 descriptor?? [ 433.441415][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 433.447486][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 433.472885][ T17] usb 4-1: USB disconnect, device number 27 11:00:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\xef\xffZ\xff\x00\x00\x00\x00\x00\x00\x00'}, 0x30) mkdir(&(0x7f0000000080)='./file0\x00', 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/det\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hostfs\x00', 0x10080, &(0x7f0000000280)='&\x00') 11:00:43 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:43 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:43 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x15c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:43 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005deefd83c4573b48d242ac528ffffff40ec00a5c91300ffeb00100010356d1001dd3fc2bc8ba1be4364b0c2498d", 0x24}]}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x1, &(0x7f00000001c0)=0x2) r2 = dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 433.636013][T15175] 9pnet: Insufficient options for proto=fd 11:00:43 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc61]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r6, 0x0, r8) r9 = request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='/dev/kvm\x00', r6) keyctl$search(0xa, r3, &(0x7f0000000140)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, r9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000000100000000000000000000000000063a64bb7db174"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:00:43 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) [ 433.818917][T15181] 9pnet: Insufficient options for proto=fd 11:00:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019500)=""/102388, 0x18ff4}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@bridge_getneigh={0x5c, 0x1e, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x100}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2ff}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10001}, @IFLA_BROADCAST={0xa}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40c50) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x140, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:00:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pkey_alloc(0x0, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2001, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2, 0x10, r1, 0x82000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, 0x0, 0x8, 0x70bd27, 0x8, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c7237ce}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf246}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c61cb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1acd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8113}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6935dd9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f550d6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2404b25c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd835f8a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd727}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x867f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ca9e297}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c7a0006}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c6a9815}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37a2d7c4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ccb8cdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5876}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6818}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a736a21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a4b48cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x638a36b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x266a89af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c206b62}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004000) flock(r2, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x800, 0x3, 0x9, 0x536, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x2, 0x6, 0x20000, 0x4, r3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setresgid(0x0, r4, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140)=0x8, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 433.996772][T15190] 9pnet: Insufficient options for proto=fd 11:00:44 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}], 0x6b}}) 11:00:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(r3, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) flock(0xffffffffffffffff, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="7c8c8d03e1031cf040dc15e5ead7e7ac65685360d8382333b314e46e68cd7ad964f90431eed10f2925997de8ed7721e4836ae361e6c5c5205523753870cd8387f22c6a6e33bcc4cd71e3f58e1bbd9495e334c1e22d06e58d219ecbf0aaf82afc62be8b8c0f1e80f65e4842e094", @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000010040859c9fa17d6deeafffa7bfd406e4d3130002000000000002000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x160, 0x80}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r8, 0x5) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000080)={{0x9, 0x4}}, 0x10) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) [ 434.134622][T15198] kvm [15183]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 11:00:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x140e, 0x25aa47003b8dce11, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x4c6cfc752fd8e30a) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:44 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 434.215521][T15204] 9pnet: Insufficient options for proto=fd 11:00:44 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:44 executing program 0 (fault-call:3 fault-nth:0): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r3, &(0x7f0000001580)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="ee5c23d6d3fd0ac41fcd2b873c67ae79169eff195bed2e34ec7bd0f5b9a991a334bddc71c5519b6dabb193caa13b5e60e7669ee6897a2caed6e626409a64752e78539824a273e324abdffccea0745f2151c6724deface32de10a800a2cc04eed4cc23ba0179760b8f0cb18632b7311484db4314a5df5e6bd074c2bc226e219ffd261fea3a7bb211c985b00d0c4cab529c9c4e1272bfd46e611ba068d6bd131da81d8de0ed934838975cc0ea678a15fbdca7f439d5ca70311259b3f86d14e14b836dfdcc94acec229dd4bf3622d2921bf50", 0xd1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYRES32=r1], 0x13b0}, 0x4008044) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000001c0)={0x2, 0x54, 0x401, 0xd43f}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) keyctl$session_to_parent(0x12) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x800) write$cgroup_int(r6, &(0x7f0000000040)=0x8000, 0x12) 11:00:44 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 434.570217][T15223] FAULT_INJECTION: forcing a failure. [ 434.570217][T15223] name failslab, interval 1, probability 0, space 0, times 0 [ 434.590449][T15223] CPU: 1 PID: 15223 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 434.600375][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.610437][T15223] Call Trace: [ 434.613740][T15223] dump_stack+0x18f/0x20d [ 434.618095][T15223] should_fail.cold+0x5/0x14 [ 434.622744][T15223] ? strndup_user+0x70/0xe0 [ 434.627262][T15223] ? strndup_user+0x70/0xe0 [ 434.631773][T15223] should_failslab+0x5/0xf [ 434.636200][T15223] __kmalloc_track_caller+0x370/0x4d0 [ 434.641590][T15223] memdup_user+0x22/0xd0 [ 434.645845][T15223] strndup_user+0x70/0xe0 [ 434.650250][T15223] __x64_sys_mount+0xe6/0x230 [ 434.654947][T15223] do_syscall_64+0x60/0xe0 [ 434.659383][T15223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 434.665312][T15223] RIP: 0033:0x45cb19 [ 434.669203][T15223] Code: Bad RIP value. [ 434.673268][T15223] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.681775][T15223] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 434.689752][T15223] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 434.697729][T15223] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 434.705706][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 434.713685][T15223] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:44 executing program 2: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="080000100000000000005315b27d711f01000000"], 0x300) 11:00:44 executing program 0 (fault-call:3 fault-nth:1): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 434.900346][T15236] FAULT_INJECTION: forcing a failure. [ 434.900346][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 434.913195][T15236] CPU: 1 PID: 15236 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 434.923098][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.933161][T15236] Call Trace: [ 434.936470][T15236] dump_stack+0x18f/0x20d [ 434.940827][T15236] should_fail.cold+0x5/0x14 [ 434.945564][T15236] should_failslab+0x5/0xf [ 434.950003][T15236] kmem_cache_alloc_trace+0x350/0x480 [ 434.955402][T15236] copy_mount_options+0x53/0x160 [ 434.960362][T15236] __x64_sys_mount+0x15b/0x230 [ 434.965144][T15236] do_syscall_64+0x60/0xe0 [ 434.969587][T15236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 434.975489][T15236] RIP: 0033:0x45cb19 [ 434.979385][T15236] Code: Bad RIP value. [ 434.983455][T15236] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.991878][T15236] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 434.999870][T15236] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 435.007867][T15236] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 435.015846][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 435.023829][T15236] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:47 executing program 3: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) flistxattr(r1, &(0x7f0000000000)=""/7, 0x7) 11:00:47 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000000c0)={0x57, 0x0, 0x70, {0x1, 0x5}, {0x7bde, 0x8}, @period={0x5d, 0x7, 0x9, 0x4, 0x0, {0x6, 0x9, 0xd97c, 0xf843}, 0x7, &(0x7f0000000080)=[0x7, 0x8, 0x4, 0x6, 0x7, 0x0, 0x5]}}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400501, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000040)={0x7, 'veth1_vlan\x00', {0xeb}, 0x79}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) setresgid(0x0, r4, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:47 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x5) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000240)={{}, {0x0, 0xea60}}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1954) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x100000, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x4}) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./bus/file0\x00', 0x0, 0x0) 11:00:47 executing program 0 (fault-call:3 fault-nth:2): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:47 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:47 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 437.009934][T15256] FAULT_INJECTION: forcing a failure. [ 437.009934][T15256] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 437.023258][T15256] CPU: 1 PID: 15256 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 437.033155][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.043308][T15256] Call Trace: [ 437.046619][T15256] dump_stack+0x18f/0x20d [ 437.050973][T15256] should_fail.cold+0x5/0x14 [ 437.055631][T15256] __alloc_pages_nodemask+0x177/0x700 [ 437.061029][T15256] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 437.067820][T15256] ? find_held_lock+0x2d/0x110 [ 437.072610][T15256] cache_grow_begin+0x89/0x440 [ 437.077392][T15256] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 437.082871][T15256] cache_alloc_refill+0x27b/0x340 [ 437.088085][T15256] ? lockdep_hardirqs_off+0x66/0xa0 [ 437.093309][T15256] kmem_cache_alloc_trace+0x3e4/0x480 [ 437.098717][T15256] copy_mount_options+0x53/0x160 [ 437.103680][T15256] __x64_sys_mount+0x15b/0x230 [ 437.108554][T15256] do_syscall_64+0x60/0xe0 [ 437.112991][T15256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 437.118900][T15256] RIP: 0033:0x45cb19 [ 437.122798][T15256] Code: Bad RIP value. [ 437.126871][T15256] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.135297][T15256] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 437.143283][T15256] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 437.151275][T15256] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 437.159264][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 437.167248][T15256] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 [ 437.196813][ T29] audit: type=1804 audit(1593514847.275:62): pid=15267 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/231/bus" dev="sda1" ino=16367 res=1 11:00:47 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x12}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 437.291795][ T29] audit: type=1804 audit(1593514847.275:63): pid=15267 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/231/bus" dev="sda1" ino=16367 res=1 11:00:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) keyctl$session_to_parent(0x12) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x18200, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x48}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 11:00:47 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 437.326118][ T29] audit: type=1804 audit(1593514847.335:64): pid=15255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/231/bus" dev="sda1" ino=16367 res=1 [ 437.416295][ T29] audit: type=1804 audit(1593514847.355:65): pid=15255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/231/bus" dev="sda1" ino=16367 res=1 11:00:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7990}, 0x2, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$FICLONE(r0, 0x40049409, r1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 11:00:47 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) lookup_dcookie(0x4, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$TIOCSBRK(r4, 0x5427) keyctl$session_to_parent(0x12) [ 437.540383][ T29] audit: type=1804 audit(1593514847.475:66): pid=15271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433924593/syzkaller.WLYV39/231/bus" dev="sda1" ino=16367 res=1 11:00:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000003ca9b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000"], 0x58) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000002c0)={0x5, 0x5, 0xe80, 0xfffffffc, 0x3f, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x7fff, 0x100}) ioctl$KVM_NMI(r4, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 438.196018][ T29] audit: type=1800 audit(1593514848.275:67): pid=15290 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16358 res=0 11:00:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) flock(0xffffffffffffffff, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@dev}}, {{@in6=@private0}}}, &(0x7f0000000100)=0xe8) keyctl$session_to_parent(0x12) 11:00:48 executing program 0 (fault-call:3 fault-nth:3): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:48 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:48 executing program 3: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x20}, 0x1) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x2, 0x3, 0x218, 0xe8, 0xe8, 0x0, 0x0, 0xe8, 0x180, 0x180, 0x180, 0x180, 0x180, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000a00004c"], 0x20}}, 0x0) 11:00:48 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 438.345372][T15312] xt_NFQUEUE: number of total queues is 0 [ 438.353059][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 438.368248][T15312] xt_NFQUEUE: number of total queues is 0 11:00:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) socket$caif_stream(0x25, 0x1, 0x5) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 438.393368][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 438.396852][T15317] FAULT_INJECTION: forcing a failure. [ 438.396852][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 438.465182][T15317] CPU: 1 PID: 15317 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 438.475114][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.485186][T15317] Call Trace: [ 438.488501][T15317] dump_stack+0x18f/0x20d [ 438.492852][T15317] should_fail.cold+0x5/0x14 [ 438.497460][T15317] should_failslab+0x5/0xf [ 438.501896][T15317] kmem_cache_alloc+0x3be/0x550 [ 438.506761][T15317] ? find_held_lock+0x2d/0x110 [ 438.511547][T15317] getname_flags.part.0+0x50/0x4f0 [ 438.516671][T15317] ? __might_fault+0xef/0x1d0 [ 438.521367][T15317] user_path_at_empty+0xa1/0x100 [ 438.526320][T15317] do_mount+0x13d/0x1df0 [ 438.530586][T15317] ? copy_mount_string+0x40/0x40 [ 438.535538][T15317] ? __might_fault+0x190/0x1d0 [ 438.540411][T15317] ? _copy_from_user+0x138/0x190 [ 438.545373][T15317] __x64_sys_mount+0x18f/0x230 [ 438.550162][T15317] do_syscall_64+0x60/0xe0 [ 438.554594][T15317] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 438.560491][T15317] RIP: 0033:0x45cb19 [ 438.564389][T15317] Code: Bad RIP value. [ 438.568459][T15317] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.576886][T15317] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 438.584878][T15317] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 438.592859][T15317] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 438.600925][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 11:00:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) write$hidraw(r2, &(0x7f0000000080)="3528385124d2dc2b9c45a4b99d227dae9f65f561117df2bf935bb299a1306838a919b3339a3100e4da7892d4072365f1c833b4e5886ed527e3738ff946b6d4b7823e09d445c768837ac38ab62cba94547d6a2144ea142a6088c3eb77a9e1ddcbf943296c381681fe1168e1d872b0f14c1c87fddf179d52eef87adecaf651523340538d5869273b1cee3f945210c966bdc5fc6159b01533ba916b3b4bfd422e4d81b9aa31e491d9954513a0cb6bc6cf5da087c9969159972e6758f22d3306232a1dd71d75a7d3c949dd97a0cb14948e0069c960d71bb34b8a51bd66fc2e781e0ff71e4eec9180ef7616f3baecec1550a578804f6cf0c3955b1c2131dc6e54", 0xfe) accept4$tipc(r3, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000500000000090000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028006001900000000003ddb38a5a37cce7ff42b0af3a04eced81d91cf455943683a22ee95ff6c4036f7d7308dcbb0cb67ba"], 0x3c}}, 0x0) [ 438.608907][T15317] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:48 executing program 3: setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xb}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="e61abf3e1442d77670180625d92b087c", 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000001c0)={'team0\x00', 0x140}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc606c0017400c000000051a82c137153e6709020f8003001700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000180)={0xfffffffa, 0x5, 0x4}) 11:00:48 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 438.922388][T15339] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 11:00:49 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:49 executing program 0 (fault-call:3 fault-nth:4): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:49 executing program 2: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x1f}, @in6={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, [], 0x1e}, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, [], 0x16}, 0xffff7fff}], 0x64) pipe(&(0x7f0000000080)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) fanotify_init(0x0, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x4c4) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6da3103a}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x224482, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000002c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x6b8]}, 0x8, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES64, @ANYRESDEC], 0x3d) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x0) [ 438.989336][T15339] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.122781][T15339] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 439.146882][T15339] netlink: 131494 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.149990][ T29] audit: type=1800 audit(1593514849.225:68): pid=15357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16367 res=0 [ 439.167162][T15358] FAULT_INJECTION: forcing a failure. [ 439.167162][T15358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.188646][T15358] CPU: 0 PID: 15358 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 439.198543][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.208610][T15358] Call Trace: [ 439.211928][T15358] dump_stack+0x18f/0x20d [ 439.216291][T15358] should_fail.cold+0x5/0x14 11:00:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x20, "f34c46f3dd307bc9a8da22401df497502581f95fd089bf0ac1235aaf4b49283f", 0x80, 0x5, 0x4, 0x10, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xef1b, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) [ 439.220904][T15358] __alloc_pages_nodemask+0x177/0x700 [ 439.226299][T15358] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 439.233084][T15358] ? find_held_lock+0x2d/0x110 [ 439.237873][T15358] cache_grow_begin+0x89/0x440 [ 439.242655][T15358] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 439.248141][T15358] cache_alloc_refill+0x27b/0x340 [ 439.253185][T15358] ? lockdep_hardirqs_off+0x66/0xa0 [ 439.258402][T15358] kmem_cache_alloc+0x4b7/0x550 [ 439.263263][T15358] ? find_held_lock+0x2d/0x110 [ 439.268043][T15358] getname_flags.part.0+0x50/0x4f0 [ 439.273182][T15358] ? __might_fault+0xef/0x1d0 [ 439.277875][T15358] user_path_at_empty+0xa1/0x100 [ 439.282830][T15358] do_mount+0x13d/0x1df0 [ 439.287103][T15358] ? copy_mount_string+0x40/0x40 [ 439.292338][T15358] ? __might_fault+0x190/0x1d0 [ 439.297115][T15358] ? _copy_from_user+0x138/0x190 [ 439.302073][T15358] __x64_sys_mount+0x18f/0x230 [ 439.306856][T15358] do_syscall_64+0x60/0xe0 [ 439.311287][T15358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 439.317184][T15358] RIP: 0033:0x45cb19 [ 439.321076][T15358] Code: Bad RIP value. [ 439.325146][T15358] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.333569][T15358] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 439.341554][T15358] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 439.349538][T15358] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 439.357516][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 439.357527][T15358] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:49 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 439.403111][T15360] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 439.435195][T15360] minix_free_inode: bit 1 already cleared 11:00:49 executing program 0 (fault-call:3 fault-nth:5): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:49 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) r4 = gettid() ptrace$setopts(0x4200, r4, 0x0, 0x5) tkill(r4, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000480)) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x301, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x444}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x40, 0x21, 0x81, {0x81, 0x21, "79fa98de107a73f9555dc6fd2c7f7f5bf4097d3e93a846c7de5da69749915bc25a35065c10d90537d4b945d27d73756bc6f0ed26715b5173adcf9024f1fc0e54c0fb28fb544e00dc74bdd5a4639390689646fb59e77772361d6f5d42a487480ca406983ca7f328fa5e428baf8a335fbcfbcd1fe3d6996e687e796fa400a24d"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0xb, "850477b1"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x86d}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0x42, "3345aa2a524a64f1d1672ebec5956a3f4ba69c06d65ffe759621cfa6e946ab2a25474fbae4fe23efdf7b1ebd0b5cd31cb7e216bdacd70834ea14e86445aadf6d04a4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x1, 0x90, "b5067332724e1c60560ce32c031ccc2af04bcfb3a489628c061280fe64ae880cc8b2932cc7018fb0e94feb12f0f929d55ade42b5248a9dffe53e105a8094a6cf172c517c35663ec6178beed12157b044447a79e8ce8af6e64061ec86c94511b527c5d9f0ff0d0ec375d0a65c6872926130c480be64cf58cc7fe4ca243030f02902e5e00cf6fa66b7493d6b3143bc4692"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}}) ptrace$cont(0x7, r4, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r4, r2, r3}, 0xc) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) keyctl$join(0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000004c0)) keyctl$session_to_parent(0x12) 11:00:49 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xffffffffffffff39) [ 439.665954][T15386] FAULT_INJECTION: forcing a failure. [ 439.665954][T15386] name failslab, interval 1, probability 0, space 0, times 0 [ 439.699727][T15386] CPU: 1 PID: 15386 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 439.709664][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.719742][T15386] Call Trace: [ 439.723069][T15386] dump_stack+0x18f/0x20d [ 439.727426][T15386] should_fail.cold+0x5/0x14 [ 439.732099][T15386] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 439.737505][T15386] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 439.742896][T15386] should_failslab+0x5/0xf [ 439.747330][T15386] __kmalloc+0x372/0x4d0 [ 439.751649][T15386] ? __d_path+0x160/0x160 [ 439.756075][T15386] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 439.761648][T15386] tomoyo_encode2.part.0+0xe9/0x3a0 [ 439.766874][T15386] tomoyo_encode+0x28/0x50 [ 439.771315][T15386] tomoyo_realpath_from_path+0x186/0x620 [ 439.776975][T15386] tomoyo_mount_acl+0x14e/0x840 [ 439.781852][T15386] ? __lock_acquire+0xc1e/0x56e0 [ 439.786818][T15386] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 439.792401][T15386] ? lockdep_hardirqs_off+0x66/0xa0 [ 439.797682][T15386] ? trace_hardirqs_off+0x27/0x210 [ 439.803459][T15386] ? putname+0xe1/0x120 [ 439.807642][T15386] ? tomoyo_domain+0xb9/0x150 [ 439.812394][T15386] ? tomoyo_profile+0x42/0x50 [ 439.817096][T15386] tomoyo_mount_permission+0x151/0x3f0 [ 439.822577][T15386] ? tomoyo_mount_permission+0xfa/0x3f0 [ 439.828138][T15386] ? tomoyo_mount_acl+0x840/0x840 [ 439.833261][T15386] security_sb_mount+0x66/0xc0 [ 439.838059][T15386] do_mount+0x1bf/0x1df0 [ 439.842419][T15386] ? copy_mount_string+0x40/0x40 [ 439.847385][T15386] ? _copy_from_user+0x138/0x190 [ 439.852351][T15386] __x64_sys_mount+0x18f/0x230 [ 439.857139][T15386] do_syscall_64+0x60/0xe0 11:00:49 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x782e, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c28646bce6e99d, @perf_bp={0x0, 0x4}, 0x0, 0xb02, 0x0, 0x0, 0x0, 0xfffffffe}, r1, 0x0, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x400) shmctl$IPC_INFO(0x0, 0x3, 0x0) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [ 439.861597][T15386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 439.867519][T15386] RIP: 0033:0x45cb19 [ 439.871416][T15386] Code: Bad RIP value. [ 439.875486][T15386] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.883904][T15386] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 439.891885][T15386] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 439.899968][T15386] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 439.907968][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 439.915951][T15386] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:00:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)=0x4) ioctl$TUNSETPERSIST(r1, 0x400454cc, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='erspan0\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) futimesat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}}) 11:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r5, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r5, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r5, 0x7, 0x84, "c3912d7b91445a66e4e4800059351759294b4833a09e689d6d97f109e271632c52e3561e42ede1d8d40bffed4e53ec9baed869962ebbfc9ab73419cb7d6b8a60c7b18aaf143ac2999f1a200a6aecca78b6c15eda027616fb8c4968e4a972151e317fd764d16b39f3c26bccf9e4a1dc184e3695b6fb4cb79a3d8992af523ff11e396638a8"}, 0x8c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={r4, @in={{0x2, 0x4e22, @broadcast}}, [0x3, 0x0, 0x1, 0x0, 0x6, 0x9, 0x5, 0x6, 0x4, 0x0, 0x20, 0xfffffffffffffffe, 0x1f, 0x6, 0x7]}, &(0x7f0000000100)=0x100) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0xa, &(0x7f0000000200)=0x3ff, 0x4) [ 440.172650][T15400] tap0: tun_chr_ioctl cmd 1074025676 [ 440.193008][T15400] tap0: owner set to 0 [ 440.205104][T15399] input: syz1 as /devices/virtual/input/input9 11:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000737670360000005400020014000300fc018f295d1b00000000000000000083e700c81362e02bff70c85df8762f5c020000000020000400000000000000000000eeff000000000000000000000014000200"/102], 0x84}}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x28c100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x6, 0x28e, r2, 0x200000, [], r5, r7, 0x3, 0x0, 0x2}, 0x40) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 440.331100][T15416] tap0: tun_chr_ioctl cmd 1074025676 11:00:50 executing program 0 (fault-call:3 fault-nth:6): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 440.351308][T15416] tap0: owner set to 0 [ 440.362228][T15386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.405420][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:00:50 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x591101, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x12, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0xffffffff, 0xffffff9f, 0x9, 0x80000000}}) flock(r2, 0x5) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x2}, 0x10) ioctl(r0, 0xc0984124, &(0x7f0000000040)) [ 440.490648][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:00:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', 'bond\x00'}, &(0x7f0000000100)=""/144, 0x90) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 11:00:50 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x161}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 440.565475][T15439] FAULT_INJECTION: forcing a failure. [ 440.565475][T15439] name failslab, interval 1, probability 0, space 0, times 0 [ 440.652480][T15439] CPU: 0 PID: 15439 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 440.662410][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.672479][T15439] Call Trace: [ 440.675791][T15439] dump_stack+0x18f/0x20d [ 440.680146][T15439] should_fail.cold+0x5/0x14 [ 440.684757][T15439] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 440.690154][T15439] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 440.695548][T15439] should_failslab+0x5/0xf 11:00:50 executing program 3: syz_open_procfs(0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) [ 440.700003][T15439] __kmalloc+0x372/0x4d0 [ 440.704792][T15439] tomoyo_encode2.part.0+0xe9/0x3a0 [ 440.710016][T15439] tomoyo_encode+0x28/0x50 [ 440.714455][T15439] tomoyo_mount_acl+0x325/0x840 [ 440.719327][T15439] ? __lock_acquire+0xc1e/0x56e0 [ 440.724291][T15439] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 440.729866][T15439] ? lockdep_hardirqs_off+0x66/0xa0 [ 440.735088][T15439] ? trace_hardirqs_off+0x27/0x210 [ 440.740239][T15439] ? putname+0xe1/0x120 [ 440.744413][T15439] ? tomoyo_domain+0xb9/0x150 [ 440.749115][T15439] ? tomoyo_profile+0x42/0x50 [ 440.753813][T15439] tomoyo_mount_permission+0x151/0x3f0 [ 440.759288][T15439] ? tomoyo_mount_permission+0xfa/0x3f0 [ 440.764853][T15439] ? tomoyo_mount_acl+0x840/0x840 [ 440.769918][T15439] security_sb_mount+0x66/0xc0 [ 440.774718][T15439] do_mount+0x1bf/0x1df0 [ 440.778994][T15439] ? copy_mount_string+0x40/0x40 [ 440.783960][T15439] ? _copy_from_user+0x138/0x190 [ 440.788928][T15439] __x64_sys_mount+0x18f/0x230 [ 440.793718][T15439] do_syscall_64+0x60/0xe0 [ 440.798162][T15439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 440.804070][T15439] RIP: 0033:0x45cb19 [ 440.807970][T15439] Code: Bad RIP value. [ 440.812047][T15439] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.820508][T15439] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 440.828497][T15439] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 440.836488][T15439] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 440.844474][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 440.852460][T15439] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r2, 0x0, r4) setresgid(r4, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:51 executing program 0 (fault-call:3 fault-nth:7): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x100, "d27758"}, 0x6) keyctl$session_to_parent(0x12) 11:00:51 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x38180, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x0, 0x3f, 0x4, 0x1, 0x5, 0x100, 0x7fff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x402401, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x3, 0x3, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0xe0000000000, 0x0, 0x1, 0xffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000200)={r2, 0xfffffffffffffffc}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x1b, 0x1}, 0x7) accept4$rose(0xffffffffffffffff, &(0x7f0000000340)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @default, @rose, @bcast, @null]}, &(0x7f0000000380)=0x40, 0x800) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f00000003c0)=0x80000001) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS3\x00', 0x48800, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L+', 0x3}, 0x16, 0x7) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x121000, 0x0) fremovexattr(r6, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00') r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x182d00, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000580)) socketpair(0x11, 0x6, 0xfffffffa, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000600)) syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0xacb2, 0x1, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000, 0x5}], 0x2, &(0x7f0000001700)={[{@uid={'uid'}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0xd9]}}, {@gid={'gid', 0x3d, r3}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x31, 0x39, 0x70, 0x37, 0x2d, 0x35, 0x35, 0x6b, 0x35]}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'trusted.overlay.nlink\x00'}}, {@obj_user={'obj_user'}}, {@fowner_lt={'fowner<'}}, {@appraise_type='appraise_type=imasig'}]}) [ 441.055354][T15497] FAULT_INJECTION: forcing a failure. [ 441.055354][T15497] name failslab, interval 1, probability 0, space 0, times 0 [ 441.068367][T15497] CPU: 0 PID: 15497 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 441.070962][ T2650] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 441.078261][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.078269][T15497] Call Trace: [ 441.078295][T15497] dump_stack+0x18f/0x20d [ 441.078319][T15497] should_fail.cold+0x5/0x14 [ 441.108417][T15497] should_failslab+0x5/0xf [ 441.112859][T15497] kmem_cache_alloc_trace+0x350/0x480 [ 441.118258][T15497] alloc_fs_context+0x57/0x880 [ 441.123051][T15497] do_mount+0x11cb/0x1df0 [ 441.127419][T15497] ? copy_mount_string+0x40/0x40 [ 441.132389][T15497] ? _copy_from_user+0x138/0x190 [ 441.137365][T15497] __x64_sys_mount+0x18f/0x230 [ 441.142151][T15497] do_syscall_64+0x60/0xe0 [ 441.146622][T15497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 11:00:51 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 441.152527][T15497] RIP: 0033:0x45cb19 [ 441.156418][T15497] Code: Bad RIP value. [ 441.160491][T15497] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.168909][T15497] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 441.176936][T15497] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 441.184919][T15497] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 441.193162][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 441.201144][T15497] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:51 executing program 0 (fault-call:3 fault-nth:8): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 441.305218][T15505] tmpfs: Bad value for 'mpol' 11:00:51 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040)=0x7fffffff, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x6) r2 = open(&(0x7f0000000540)='./file0\x00', 0x2080, 0x84) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000580)) getsockname$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @default, @default, @null, @remote, @bcast, @bcast, @bcast]}, &(0x7f0000000140)=0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180)) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x111001, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121280) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)='E', 0x1, 0xb82}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 441.396451][ T2650] usb 4-1: device descriptor read/64, error 18 [ 441.431960][T15516] FAULT_INJECTION: forcing a failure. [ 441.431960][T15516] name failslab, interval 1, probability 0, space 0, times 0 [ 441.475753][T15516] CPU: 0 PID: 15516 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 441.485681][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.495831][T15516] Call Trace: [ 441.499148][T15516] dump_stack+0x18f/0x20d [ 441.503506][T15516] should_fail.cold+0x5/0x14 [ 441.508103][T15516] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 441.513490][T15516] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 441.518876][T15516] should_failslab+0x5/0xf [ 441.523317][T15516] __kmalloc+0x372/0x4d0 [ 441.527577][T15516] ? __d_path+0x160/0x160 [ 441.531928][T15516] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 441.537496][T15516] tomoyo_encode2.part.0+0xe9/0x3a0 [ 441.542717][T15516] tomoyo_encode+0x28/0x50 [ 441.547152][T15516] tomoyo_realpath_from_path+0x186/0x620 [ 441.552817][T15516] tomoyo_mount_acl+0x14e/0x840 [ 441.557688][T15516] ? __lock_acquire+0xc1e/0x56e0 [ 441.562650][T15516] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 441.568223][T15516] ? lockdep_hardirqs_off+0x66/0xa0 [ 441.573552][T15516] ? trace_hardirqs_off+0x27/0x210 [ 441.578703][T15516] ? putname+0xe1/0x120 [ 441.582876][T15516] ? tomoyo_domain+0xb9/0x150 [ 441.587742][T15516] ? tomoyo_profile+0x42/0x50 [ 441.592438][T15516] tomoyo_mount_permission+0x151/0x3f0 [ 441.597908][T15516] ? tomoyo_mount_permission+0xfa/0x3f0 [ 441.603470][T15516] ? tomoyo_mount_acl+0x840/0x840 [ 441.608528][T15516] security_sb_mount+0x66/0xc0 [ 441.613309][T15516] do_mount+0x1bf/0x1df0 [ 441.617577][T15516] ? copy_mount_string+0x40/0x40 [ 441.622533][T15516] ? _copy_from_user+0x138/0x190 [ 441.627492][T15516] __x64_sys_mount+0x18f/0x230 [ 441.632270][T15516] do_syscall_64+0x60/0xe0 [ 441.636702][T15516] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 441.642604][T15516] RIP: 0033:0x45cb19 [ 441.646495][T15516] Code: Bad RIP value. [ 441.650565][T15516] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.658989][T15516] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 441.666971][T15516] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 441.674954][T15516] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 441.682932][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 441.690948][T15516] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 [ 441.757043][T15525] FAT-fs (loop2): bogus number of reserved sectors [ 441.791528][ T2650] usb 4-1: device descriptor read/64, error 18 11:00:51 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) recvmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x3, &(0x7f00000003c0)=""/244, 0xf4}, 0x40002100) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000500)=@bpq0='bpq0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000540)={0x100, 0xfffc, 0x4, 0x6, 0x13, "09fa56f43baea062"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) linkat(r4, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='./file0\x00', 0x1000) [ 441.805444][T15525] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 441.828658][T15525] FAT-fs (loop2): Can't find a valid FAT filesystem [ 442.033221][T15516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 442.080928][ T2650] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 442.350884][ T2650] usb 4-1: device descriptor read/64, error 18 [ 442.740886][ T2650] usb 4-1: device descriptor read/64, error 18 [ 442.861164][ T2650] usb usb4-port1: attempt power cycle [ 443.570752][ T2650] usb 4-1: new high-speed USB device number 30 using dummy_hcd 11:00:53 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x2000000000001000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close(r0) 11:00:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) recvfrom$l2tp6(r2, &(0x7f00000000c0)=""/4096, 0x1000, 0x40000040, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000000)) keyctl$session_to_parent(0x12) 11:00:53 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:53 executing program 0 (fault-call:3 fault-nth:9): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:53 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 443.790846][ T2650] usb 4-1: device descriptor read/8, error -71 [ 443.883118][T15556] FAULT_INJECTION: forcing a failure. [ 443.883118][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 443.931035][T15556] CPU: 0 PID: 15556 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 443.941106][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.951172][T15556] Call Trace: [ 443.954485][T15556] dump_stack+0x18f/0x20d [ 443.958846][T15556] should_fail.cold+0x5/0x14 [ 443.963457][T15556] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 443.968853][T15556] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 443.974243][T15556] should_failslab+0x5/0xf [ 443.978682][T15556] __kmalloc+0x372/0x4d0 [ 443.982952][T15556] tomoyo_encode2.part.0+0xe9/0x3a0 [ 443.988172][T15556] tomoyo_encode+0x28/0x50 [ 443.992604][T15556] tomoyo_mount_acl+0x325/0x840 [ 443.997473][T15556] ? __lock_acquire+0xc1e/0x56e0 [ 444.002440][T15556] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 444.008014][T15556] ? lockdep_hardirqs_off+0x66/0xa0 [ 444.013230][T15556] ? trace_hardirqs_off+0x27/0x210 [ 444.018387][T15556] ? putname+0xe1/0x120 [ 444.020816][ T2650] usb 4-1: device descriptor read/8, error -71 [ 444.022554][T15556] ? tomoyo_domain+0xb9/0x150 [ 444.022587][T15556] ? tomoyo_profile+0x42/0x50 [ 444.022606][T15556] tomoyo_mount_permission+0x151/0x3f0 [ 444.043616][T15556] ? tomoyo_mount_permission+0xfa/0x3f0 [ 444.049185][T15556] ? tomoyo_mount_acl+0x840/0x840 [ 444.054247][T15556] security_sb_mount+0x66/0xc0 [ 444.059031][T15556] do_mount+0x1bf/0x1df0 [ 444.063303][T15556] ? copy_mount_string+0x40/0x40 [ 444.068274][T15556] ? _copy_from_user+0x138/0x190 [ 444.073245][T15556] __x64_sys_mount+0x18f/0x230 [ 444.078026][T15556] do_syscall_64+0x60/0xe0 [ 444.082465][T15556] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.088364][T15556] RIP: 0033:0x45cb19 [ 444.092266][T15556] Code: Bad RIP value. [ 444.096336][T15556] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.104758][T15556] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 444.112836][T15556] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 444.120821][T15556] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 11:00:54 executing program 3: r0 = timerfd_create(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x2f, 0x18, 0x30, 0x39, 0x0, 0x8, 0x44010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x8, @perf_config_ext={0x0, 0x8001}, 0xc00, 0x6, 0x81, 0x5, 0x4d, 0x2, 0x57e}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x250000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) flock(r2, 0x5) flock(0xffffffffffffffff, 0x5) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) [ 444.128808][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 444.136800][T15556] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = dup2(0xffffffffffffffff, r2) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f0000000080)) setresgid(0x0, r1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40140, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000040)=0x7, 0x4) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:54 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff007fffff0180c2000000ffffffffffff0000e0000000500100008801000073747000000000000000000000000000000000000000000000000000000000004800000000000000020000000200006e8700ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7053aba0fd6ffff00004e234e21040071ac9b8cff7f382803000500070000080100736e6174000000f6ffffffffffffc86cb1cc1d400028000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa0f00e0fdffffff00000000736e6174000000000000000000000001000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff0000000003000000400000000011746e616d3000000000000000000000006772657461703000000000000000000076657468315f346f5f626f6e64000000626f6e6430000000000000000000000052a1927247ea470000006a72dd4b319d0000ff3400000000e80000005001000088010000697036000000000c0000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe80000000000000ffea0000000000aa000000ff10000000ffffffff000000000700ffffff000000ffffffff00000000093b03044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e61740000000000000000000000000000000000000000000000000000001010efffffffffffffa9aaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000a30000000000000000000000d20000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000001c00000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bde3fa0000ffffffffffffffff01df3ef100ffffff0000c0000000c00000000801000068656c70657200000000000000000000000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468345f746f5f626f6e64000000aaaaaaaaaa11ff0200ffffffffffffffffffffff00ffffff0000b033e28bbc000000e800000071756f746100000008000000000000000000000000000000000000000000000018000000000000000000000000000000010000000000000007000000000000006165706c79000000000000000000000000000000000000000000000000aaaaaaaaaabb0000feffffff0000adcc00000000000000000000000000942fbac20aaeefd543aa75485a06a3141401f17fc7e5bff0a22edeb591ae59d52abe8a033d3fa9726eced69929713b089f75040ffcddf265f9de774c37114c08a122436f47fa57cfb8"]}, 0x651) 11:00:54 executing program 0 (fault-call:3 fault-nth:10): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 444.315279][T15577] FAULT_INJECTION: forcing a failure. [ 444.315279][T15577] name failslab, interval 1, probability 0, space 0, times 0 [ 444.335668][T15577] CPU: 1 PID: 15577 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 444.346635][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.357045][T15577] Call Trace: [ 444.360363][T15577] dump_stack+0x18f/0x20d [ 444.364896][T15577] should_fail.cold+0x5/0x14 [ 444.369529][T15577] should_failslab+0x5/0xf [ 444.373965][T15577] kmem_cache_alloc_trace+0x350/0x480 [ 444.379455][T15577] v9fs_mount+0x5a/0x970 [ 444.383812][T15577] ? v9fs_write_inode+0x60/0x60 [ 444.388683][T15577] legacy_get_tree+0x105/0x220 [ 444.393472][T15577] vfs_get_tree+0x89/0x2f0 [ 444.398344][T15577] do_mount+0x14c5/0x1df0 [ 444.402699][T15577] ? copy_mount_string+0x40/0x40 [ 444.407663][T15577] ? _copy_from_user+0x138/0x190 [ 444.412624][T15577] __x64_sys_mount+0x18f/0x230 [ 444.417405][T15577] do_syscall_64+0x60/0xe0 [ 444.421856][T15577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.427758][T15577] RIP: 0033:0x45cb19 [ 444.431651][T15577] Code: Bad RIP value. [ 444.435723][T15577] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.444264][T15577] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 444.452245][T15577] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 11:00:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000200)=""/241, 0x14000, 0x800, 0x5, 0x1}, 0x20) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x82402, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000300)}) 11:00:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000cab000)=0xc) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 444.460228][T15577] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 444.468209][T15577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 444.476425][T15577] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 [ 444.638949][T15584] input: syz1 as /devices/virtual/input/input10 11:00:54 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:54 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:54 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0xff, 0x4) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000300)={0xf000000, 0x5, 0x0, r3, 0x0, &(0x7f00000002c0)={0x990a7a, 0x4, [], @string=&(0x7f00000000c0)=0xff}}) r5 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) flock(r6, 0x5) r7 = accept4$phonet_pipe(r6, 0x0, &(0x7f00000001c0), 0xc1000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setresgid(0x0, r8, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1}, &(0x7f0000000240)=0x8) keyctl$join(0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'netpci0\x00', {0x2}, 0x45c}) keyctl$session_to_parent(0x12) 11:00:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0x1000, 0xfffffff9, {0x77359400}, {0x2, 0x1, 0x3f, 0x0, 0x20, 0x9, "17c75fc0"}, 0x0, 0x3, @offset=0x7, 0x1, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[r2, r0, r0, r3, r0, r5]}, 0x6) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="24000000220007031dfffd946f61050002000000054300000000391e421ba3a20400ff7e280000001100ffd613d3475bb65f6400004efb0000000000007e23f7efbf54000000005cc37fcfa3", 0x4c}], 0x1}, 0x0) 11:00:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) lseek(r0, 0x11c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10002, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) [ 444.936263][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 11:00:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:55 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x891) r0 = dup(0xffffffffffffffff) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./bus\x00', 0x1, 0x8, &(0x7f0000002940)=[{&(0x7f0000000480)="e98333158e29168d9abb9568c7a669842e0a902e8a6ae5c4dfc1e99977036cec9a92161136656b4643274eeed734c21b4541f567b057bb8699e2ff5369b539fef7154a3fa9ca3d7658b0307ab3cbc6f63495953f90f86bd66d3c845c86bd422031f6f7fc62cb44e52f4d328edca2820bac9616906af163fd32b583f65bc7c2bc0300c989bf770e192e2f0ad0d13efc93d39ee18d3cff383f564a8c1943484891e8a0fba394b14907ffbca30bb99a947d84f1be7fb0957939549df69267f521dfdf8195a7a8c1a47046e76948d1a1283561eb0295c0fca76d3bb195b6a757d97b81f170bfc2b95e5c67f5c90e3e86e93fa02d4076344ca49ed4f70e7feeca72e7526ff51bff76707019be49fbac6b29941c4bd1b554ef09e0219df7c0844cbc01d6bd413b695087d6388253ff641c0038cc1722bb24602bca7bb450f0598926c82582d2f25f084ebc3326a2f3612a9a013fb8cefce2a83cbd4cd77a9c19ccdcd1b7712f8d6c820bfe50c4844f09ef27473207bd68c47999c122c7c8b468702658d604cffa4f7a7a4f08fd38e75dcda682051dd3fc0c18f392b06ee9ca86b506416a42bbc15ef9a5007813e5fa21130eb83595da8205b8824b934b04e933da1fc99e5d7c69e0eb3541164df14dc293a421408436fcd11fd675c37b34c33a00443dd259fb2dbd5a6a1d53d95a43e17e2efba0fca7d7d3cfbe21b75b0c342d8242609ac3ab58fdcc1b2895349b24e0b7e8f2e224345a60bf1ca8a893fdba04e0f9a3306f81b31d5769d06d0f5d4f7625e01edf11fcd700c62ed54e3b6b0308d1e092b40678c544765f0619c02023c56e7a8f29bb9814f5618dd02f151393684e39848473ce5d25f935d679e140414382510adb47a0baf75147eac03a5efb5276dbc1da4919f3cd30c0dce871b6a0e82a8b6b99cb6c7f520b0014320750a19c96cb9d984f5c7cc74a8e4b43e1e99d954dab3ad600814bb9c9d0133dfc706cb8643440af2c913c4d499eb198c6dae08cb5e6cb5fb5ede65b43e867f699444d15854fa721090df573e03805a4ce4c0501369317dcb4e6372cf59ac067dff39d8b2a10179c9c9f3b891dd7bdde5b67c6cfc1ffc75258425bee770670c58cc603190297c87478cbdd1c042f639012dbce5c2c165a8e320442afc4c4a48102c605a650a1621050d0bf905f2296cb184aa989f11080bff57cac11e91534fd283f0fed3855ccfe1fd6978b65d1a78f7811bfff92e255d05628224c2fda567470a1c48eff8427c81d83090a7e287f6c1339c21753afa8d9fc043d53f9fa3b9038610f290ff2b1ed6cbdcc88a1c7343ad5fab2cc37970b56664c3f240308da22bd7d026a711e63ac068deecec5c821d7c24b7a5bdfac67476c9456b6e60ac179617a4251b20dbcd02fb03d61d593f1652e80a21abc0755c4f4061a0e6673e9748e98d2bb0878fe5a97754531d2f612d34dda15b19ae345ac761ea5f40b686b09e2449aa0ee8b9e25cec2234723b81cbeb7da8996be23d74daa749dfcf379f3dfc5d616cfa06ae8b48a60c19d1ae2187edc45a783d54b425eb827a38e4f80daf1d84d772bcc52aa436b4d7a792d12ab68984c20c7d62b37f132793757a70e7a3a8d3315a0f83512c451094579b6ff4766d2c018e96e1e6339c4f483cf385477bbd8174293f7e564ae52c149b4b3ff14fcb15b277da49e1c6c8581b22d1572f64a4e69630005bb1c7e24c472385ada82bc62ffc085bb7cfaaa4cc0844015af895b35bd9ef037a186b06060628676c2f3322f01636ddc1da7883daf034862e9c6f8b6d01d38e5599fa42070ce659db2b6ca5e2c2d1f66424ffedce32f0f01e6340e44b99279e5da92723eb36bef92bd0131e3c3d04f86baeb5313b51d67308bafb60304ef0ee66644e15ba0e87e35f91ec12bcbd84d63b8469c9bc28cb737da4af87179d0d294ede8defef3b0c0660d5e35599e1c392b94a40386c73cf1809ed8372f9c66225e9f9fafbd10963c870b9e8d165c9041b652c445c894b90a3e5a814a2cd767688bd02eb4098485e2f2ce1f8f0581a133a478a5592bffd232cae7fd3c3bc14960d2719c3b431d0c18febc016f5b0d68f5e35a8b72a64610a113b04ff25e278ec009e344172d55ca0369951c9c95f8d5f1a0df7a82b59eb35c80b2532b933f2b73608d0b14460937a41097249bf3689d55d0f1b006f16095d16e78d5744861969f3ec9ee558bcab1f5d722bdf65abe1471264c22ff07946952fa533663ac2614835d438b1a045016f2fa21f0de37a51fab163b2a39e775ae4ff11f6dad59fe86e0c56112de12e0f35fae49ae97d2862a6bb5da995efda3e7bc29d117417af33f0ac5c9b973c5a90e60aa9d5c8f12b832244535ec49245a0d89b57aea64632c2c31ac9f064ea58a31d3ec56d95e8fd45b3db4cd2fe6dbac13d462ccc0f7dc7dad6e864fbc10a7a5780045754f96885c88208b0a62cfb57a75b42678f78fa270ae602bf51edd7cebc0c7a15a1721b37610fcde6c1c090bb1250357e051f5b4d78ccdd7048dcd43fe53675c95ae0587babcd0127cf99095f9364c1607e172045668a210ed6fd4ca6398efacf034377409e6511b38743a15100bc7a5607ef3b3f8af4b12acfd825f691bdf15ed8566641093f1a004cbc8c9079978dcc119a6af54de0505b5e04baab5db4b01a8eaccd9871ded231460efc142eff545e257f25164001045484cd81269937a792b03fb044b43c6c5b01dcc28e2103eeb59535f9402c7188b8a1647e90dd84382d43c15303b7a8fe9f33ca111324268ae374e4bd760a6f02a9cac2dda8c6d79e1c1021995f9b7d8022a5242d7e397f99e1dad7e32ef7ee6c02aba1fe04bb6fcbfc5060dec33b264b3ef3be77135f5ff2223a543f91ade9ccd0c20258d909317d176705777560b30457c5eb8cc16311d4e59d1eac6d11a8f41afb73daea211340818773d806c4c4bfc9c5f151bdb04aba0fbe3925e02c9ef355f4fa290df13745dc1fd13ec89e94f2b8d2fb22113c59c92691918a59083f37eab1811d100acaa0f005c0d0e4caaaff6b5bcd1ab3f8749c3d71d322d6f265cb7116aecb97337c71703d8b2b166d6275d6748536c7bbb8dcdb08eaf2119cfa10951cb221d3fd50b5fdc378a04b3adde54b5c3febd975cca62f0819513b61c3ff1fcd14e820591f0b15ccf21d202cb5ccac4fba9d1c249964bf9027d0dd5047ca2bc9e18ece5444196faacbf376414c41bac74df7aedd46c76aa29693a18645f03ba3ee172a309e255fb81341755589369fdf3fcd2a165f6e4926d4dd424c5917f028c055e451677929eef5a464ef2a69aa47f6cb7235737ad00a71aae2ecd77411b7adb01dba2a506b81c96086fffa75b51695b53b5e36a55afb7b2eb7856c053b85b73b1747a2131406ea0d362609570783cae0b084dc2b1f172606377eeba9c658a8634442f3339f70f913b13c142942c4c7ffcc53bdc2895f78caa60b2e9d35aeaa8bd875bd07a5317f3bfb50a6fa6d5199429b7b7b1cd7982e6dfe3b8b39434016db498e35e734cbc5a1d31a43f5451eb939171fad7d2094f2086d31311a5169c0d12643cc3c14ef407c9519bc92cbf89c6fbfd242f9aea5a40c1ff7d9f4e32f45dec53305740b3bf59a5b4a84d523f5b4f13b40bb719a4475995be45822f162ace893f1a47b8e7ac03468bfdc8bcd24564e9f53eb494401c2249c435b2d154c45fb76e2017fdb30d944d609380677d03eb11f6dac4c9abfb16b1e70ccdb47c77f6ece6ccb4e1c5062e08f7a89c3cb1712789e392c97b022b3572eef2a24527b5eb511c3c56db282ef3cdb0c3eb57fb7ba56239f0d02e1c8a6d940503f6a2e4cedc5f1039999e25a9e31594afdd77020c0bbb8323ed39936bbd8343a9891bbfe7eb95d561c7b1298691328992af695005adad3be2a735907ee9ca438e5b51be3ea507c83812daabbb00875cfa7079ed6a0989cdf10a734ffe152198f3a41af8e1a605d009830bd2755ff46fddd1551230b2f5491e9347c249d310c2f4994a238ede55a5a5bd14e8c6195b611a0f472bbffc91d2d66640bb64bad84a08a0845aea314a2d37d5af40ff53875d89515f45343e4c8cdb96c1271d48acb1bf973aa55e758e1ad930c04ae0136b097a76caa879499752ddb1474e13da52cd88289ec9b7cf6ca05a25676b5c718465958c46c4946d0fa854ea568342dc219a280407d1d77c8104dff7884bb392dd94ac5f480b402191427b8f4855d8955b6b540395d276be8036a4552da8343f20e4d91901586df2f3e39812b8248aea0821442e14f4d73af2dd6f1b9e4422bafd8c8522879d3e3b6a42a561a7d23766603946cdca63962791e49e6c5d8b43becb2c089979348d0b5dbd82d6fd8eb85542ac2371065780e54ad9a791df031d6605b40149eb35b71f4f4f7d78c663094cec6f72c026e438d160ce9597b434c22d0c7314345f0d21e62f6e5dd1bf0a81c05204fcd88353a320927de31b4a8080c3fd54ff12d696f5722a9ad2f2d507a376d1b08caa8cf5760289b2999598f3515966509545fbe32ea1c5ab55ee65848da636b91766e10a234cdb2fbf519e64178f3db41b8f810abde8735cc9a8a38461647ae96161dbbf022d085ef75c544e83e08c040891b407fa00a11200205758dda72e12871e40b644be0e3039733be717579acb0c9c2a90993973e3ad9d3829b2b7bf00832807567a9d4ba4db438651b54dfa1017bdd0d76f52aab5d1d800c948c70274b52458611f22e1be8433008320ebdfd45b8cc10b042d202d80dd215eede7a9931052082adbbee888615823826491a9e6dfecad91edc19f52d809e7b34ae4c6ff182f2c41b427b639f269a33469753030d651eab4069969b0102bdd93549185f2ee493665744a18d057e6db9b20ffd8ecc0d3d54bf107d45f19d950fcad2aa46ef01aa0e61578cffc80052f64d81404bf0a76ab164970d9b6c68078bcacc341fd4b5535e07f4c034c8d89f28497cd6ef5602b0954099a7fe50f3eaa6829d6ae152da65b6cd767a0fc37678bb4ca610cc39fcee2d5235367631a8ff77ec339f2c3d0136d010c1b3d52da36e9ecbc904b6c5fcb3348770bdfc63324985ee611b94f13ad904695f0884f0aff80340969abdb8db67dc55313067ad13d588a6e290c230370809946f70a8f491f224419ea742fb698f0466545018de9092a5be8c5caefb4aa4f43b87fa63ebf35942b711510ce989263b94d11e4380feff85c89ac2253a1dca86a9951721141f02ffbf95946873bda7fed85c49a95481e4ae5e80d6e4bace6b80d1d52d569f7cd0d132aba9db9a35027c1cc45e72dce400fb0252b1900988dca4f36dbeebdd21001f97fa918400f22ec2b52aae6d53f629196fa687dfb9fec217f57924c187ba732fcc18f26445a288a890e9c12f6ea9deb195b011a232a81d90621ff8227b4b9f30e0e01ee0d53521e2aea807807fb7ebb4a50367aaccd3b8b35767f6ad72288721c3f7215c1e0c8b48a463703887062585edc377b33face6cc18462443fee0d246fe109f519bf2d001ad2b9dab82d8148d4fbd9ebf858beee6ae4b0e9ddd1705adfa8e2d5e1ad8581bf9563347716bfffddf27389c5f2f0f383dc2fd0696c0f73184868817edf63e8ad98ba7ef2ee634e1ce3a3ec56da44045aac6e4dfbed6ba0ae7691f34e375a77a5cfbda5ae73df8158f7f0b9b5e8d092dce9837eda9672747925555bf0528242d0e8a08cfee8b0a3558a059c0789458861756a7a3dbc1afeb296d2543ecf743712872bf265f1cba4e02666fe175efb0e9f02", 0x1000, 0x4}, {&(0x7f0000001480)="2e5fc1259ad5972277fab649a82d75a0d24ffe3a638832ae76ee8c0591ee025218bf2bdad8d69094cff5457a15cdf09bf2ed8743683c358bf1e7333af0fb1622bfe8fb1b01dda39014ecc55fcfe58be8a9d3ccc52d2d2f0d36100cb5ef166d046546454ac48b066676c4771d016acf81edf904e88f3fcc17af1eb33e769ff408469e4f177b6fb6766571c6cd169fa8e141558c85ef60fc2ea5a24ac71110a7670757d3a2efca8a69a0adfc370517c689734181a8f8869d302475fb64e4080af26d07bf", 0xc3, 0x800000000000}, {&(0x7f00000026c0)="ca8ecefe2648a9fccdfbeddb225ab1cdef17ab9cafd18dd7e108330d261000c25c0600e7bf041d0024878255645d95e933ffdece9ac41fa26786bcdbe4e90b67d30bca27ee475f59b36525cefe65b78959a927f44aea8f0d5c4fb485485dc40b682384fd458b2939da81f27b76b01b007ea490ba95bacbc6f956e7272b0ee02147cab22b1932e26bf2c6432804de1ed7dc15", 0x92, 0xfffffffffffffe01}, {&(0x7f00000003c0)="184b581a8dae170833aa61be3bdff313854fc07ce6e09b99a573860fb30622", 0x1f, 0x9}, {&(0x7f0000001640)="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", 0x1000, 0x5}, {&(0x7f0000002640)="38a48286b5aefe82933e2486c6683463d886b8baf212d6cd704dee5fc7ae97b0012d4fb091e05bd548b0dbcbf28b3a4c2aab9fa5fea092824e203a275487d097dd49ef9cf133bf7c362896302e3c164b098d7328c34dd9d5cf0446112d12ce", 0x5f}, {&(0x7f0000002b80)="5dd5198e2377747433010e10987141c40fbb91e98e0c798cb9f520926a97bfc068096ecc241a300ce94277b4aa62c18a19c90d84f9dddbc82368d4937b35220739e2e0f79266c6cd695766d33632537734cd99a8e7c632ce28d1baf705adb59103e4411c6dc11be87ee13816f8b6f60efa326d1a7cfcf275f7e5ae5913c241e0914896db44df18173103ceaf163ed9792ab7b75f50458b0b1111b5afaeecdcfdaa5ab4e51a7528ca661eb6caeeee0bf33d7a6a87431d4abee6df2f337298e70d5de3b60bef138cb596d9b178ec6fe75981b5c8b0b5e8c381e5abccedb2708fab01d0416291ffdfc81fede36eca8bd6f3ac475000", 0xf4, 0x1}, {&(0x7f00000027c0)="d4aa1824453b06c6a9266b88ab499761e880b70c6d0d7e29dab1e7f1a91bfd4f255f6c7f4f448eaa0460b45c20fc5b133feb81d639e40204b90b692b5120cc15cc3a3fd120f6384c150436567773356ad735d4b25bdb3be638f2075aacff788d327bed5cb5dd0315ec6a6764349a1ba2aedee0cae75b32275aee35a8e3f3ea9cac296cf767061145ca6aec59a22445805e5d4a11fb3ea9c76a4cdf288f2a", 0x9e, 0x80000000}], 0x1008011, &(0x7f0000002880)=ANY=[@ANYBLOB='lockproto=dlm,norgrplvb,nodiscard,hostdata=batadv\x00,hostdata=batadv\x00,statfs_quantum=0x0000000000000040,uid>', @ANYRESDEC=0x0, @ANYBLOB="447f8e97557fc7b2923fcace2c6f626a5f72786c643d77282729275b2c00"]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0xffffffffffffff1f) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xff}, 0x8) 11:00:55 executing program 0 (fault-call:3 fault-nth:11): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "33058b538ac4c7ee", "4d9b58f5cbdc04d7d7db0e3fdb4afa78", "4b7831a8", "e9a51a7785507d8f"}, 0x28) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 445.360047][T15628] FAULT_INJECTION: forcing a failure. [ 445.360047][T15628] name failslab, interval 1, probability 0, space 0, times 0 [ 445.449783][T15628] CPU: 1 PID: 15628 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 445.460555][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.471515][T15628] Call Trace: [ 445.474837][T15628] dump_stack+0x18f/0x20d [ 445.479468][T15628] should_fail.cold+0x5/0x14 [ 445.484477][T15628] should_failslab+0x5/0xf [ 445.489323][T15628] kmem_cache_alloc_trace+0x350/0x480 [ 445.495260][T15628] legacy_init_fs_context+0x44/0xe0 [ 445.501346][T15628] ? generic_parse_monolithic+0x1f0/0x1f0 [ 445.507195][T15628] alloc_fs_context+0x51c/0x880 [ 445.512183][T15628] do_mount+0x11cb/0x1df0 [ 445.517552][T15628] ? copy_mount_string+0x40/0x40 [ 445.523198][T15628] ? _copy_from_user+0x138/0x190 [ 445.528694][T15628] __x64_sys_mount+0x18f/0x230 [ 445.534102][T15628] do_syscall_64+0x60/0xe0 [ 445.538559][T15628] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.544479][T15628] RIP: 0033:0x45cb19 [ 445.548561][T15628] Code: Bad RIP value. [ 445.552739][T15628] RSP: 002b:00007fd3dab60c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.561928][T15628] RAX: ffffffffffffffda RBX: 00000000004f7280 RCX: 000000000045cb19 [ 445.570414][T15628] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 445.578606][T15628] RBP: 000000000078bf00 R08: 0000000020000180 R09: 0000000000000000 [ 445.586945][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 11:00:55 executing program 4: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 445.594948][T15628] R13: 0000000000000772 R14: 00000000004ca6a1 R15: 00007fd3dab616d4 11:00:55 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:55 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:55 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xfffffd05) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r4, 0x0, r6) keyctl$chown(0x4, r4, 0x0, r1) semget$private(0x0, 0x4, 0x43) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b4ce28708bb7cd188339538a120b80ec2a909c8014e0818068577d0d8e5426b147b32f9cb44df2d3ffcffabeda8e5cb17158c5b079e346f3f2dbac32a330c4b5ceda1d9bbfaf31da4944d7e2eb67cc210d681ee3e5a0588f3e41fe0bfb50a00cf7ba71758ca40980b150171f7ad7f5e48afaa21ab38189fde9040ea8a3a9169ef133b27656f297ac627e15729b5a6e3df2f2708998fbd75731338edbc374edd4457a5a9fcb50020536e319f54ddafcf5f70a", 0xb2, r2) keyctl$session_to_parent(0x12) 11:00:56 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 11:00:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x7f, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r3, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000040)}, &(0x7f0000000140)=0x10) keyctl$session_to_parent(0x12) 11:00:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x20, 0x8, 0x8}, {0xbb, 0x4, 0x0, 0x7ff}, {0x5, 0x3, 0x0, 0x284}, {0x0, 0x6f, 0x5}]}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x4, 0x4) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 446.407346][T15662] vivid-001: ================= START STATUS ================= [ 446.442144][T15662] vivid-001: ================== END STATUS ================== 11:00:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffe74) setresgid(0x0, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) dup2(r2, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f00000000c0)=0xcf1f, 0x4) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) keyctl$session_to_parent(0x12) 11:00:56 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:56 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) flock(r2, 0x5) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x1}}, 0x10) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x8, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="840004002c00270d000000000000000000400000", @ANYRES32=r9, @ANYBLOB="0000000000000000080000000a00010072737670360000005400020014000300fc01000000000000000000000000000020000400000000000000000000000000000000000000000000000000000000001400020000000000000000000000ffff000000000800010000000000"], 0x84}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 447.151838][T15665] vivid-001: ================= START STATUS ================= [ 447.159882][T15665] vivid-001: ================== END STATUS ================== [ 447.254938][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe3, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r7, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r8, 0x5) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000300)={0xf000000, 0xd82e, 0x3, r8, 0x0, &(0x7f00000002c0)={0x3032c, 0x0, [], @p_u16=&(0x7f00000000c0)=0x4}}) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000340)={0x8, 0x1f, 0x2, 0x6, 0xc9, 0x5, 0x3f, 0xb1, 0x7, 0x6, 0x6, 0x6, 0x0, 0x3f}, 0xe) r10 = socket(0x6, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x492492492492805, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000280)={&(0x7f00000006c0)=@newlink={0x11, 0x11, 0x40d, 0x3, 0x8, {0x10, 0x0, 0x0, r6}}, 0xfffffffffffffe87}, 0x1, 0x0, 0x0, 0x801}, 0x804) 11:00:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 447.371974][T15704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:00:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:00:57 executing program 3: sendto$unix(0xffffffffffffffff, &(0x7f0000001340)="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", 0x800, 0x50, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0xc}, 0x4000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/179) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) 11:00:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:57 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:57 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) sendmsg$nl_crypto(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x100, 0x70bd2b, 0x25dfdbfd, {{'drbg_nopr_ctr_aes192\x00'}, [], [], 0x2000, 0x2400}, ["", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 11:00:58 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:58 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:58 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:58 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:58 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:58 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:58 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:58 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:58 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x4014) 11:00:58 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x6, &(0x7f0000000100)=0x4) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="647408322c00000000d69a"]) 11:00:58 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 448.983359][T15784] xfs: Unknown parameter 'dt2' 11:00:59 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x31b) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'wg2\x00', {0x1}, 0x392}) 11:00:59 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:59 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:00:59 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 449.266340][T15795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready 11:00:59 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:00:59 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 449.618423][T15795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready 11:00:59 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:00 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='{\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) pipe(&(0x7f0000000100)) dup(0xffffffffffffffff) 11:01:00 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:00 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:00 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xff00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x4}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r2, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r2, 0x375}, &(0x7f0000000040)=0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x0, 0x148, 0x0, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan1\x00', 'gre0\x00'}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x400007}}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 11:01:01 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:01 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:01 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:02 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:02 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xff000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:03 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5c01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:04 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:06 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xff00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x3, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:07 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x5, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x6, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x7, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:08 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x9, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x300, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x500, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x600, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6101}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7d000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x700, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x900, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1020, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:09 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x3f00, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xedc0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xff00, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3e8000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:10 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfeffff, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x3000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0xdf76e90c72738561, r1, 0x80, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72bb}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r2, 0x0, r5) setresgid(0xee00, r5, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:10 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:10 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:10 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={r2, 0xc47}) 11:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x9, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a65, 0x8, [], @value64}}) read$char_usb(r2, &(0x7f0000000080)=""/16, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4c9]}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:01:11 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7d000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x5000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={r2, 0xc47}) 11:01:11 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x200, 0x408, 0x1, 0xff, 0x1, 0x100}}, 0x50) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0x2c, 0x2, @tid=r3}) keyctl$session_to_parent(0x12) 11:01:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x6000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:11 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:11 executing program 4: socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x414040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 11:01:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x7000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x87c8) exit_group(0x800000006) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000180)=0x1, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x154, r4, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x154}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xec8, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xe84, 0x8, 0x0, 0x1, [{0x50c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2cc3eecd37c63edc61672fd0b2005c70f01a827c274638c9805d51d1d9c8cd48"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:11 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xd, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x0, 0xfffffffa, 0x0, 0x0, 0xffffffffffffffff}}) 11:01:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r5, 0x0, r7) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() setgroups(0xa, &(0x7f0000000140)=[0xee01, r1, r1, r2, r4, r7, r9, r10, r11, r1]) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:12 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x803e00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x9000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="f3adb8010000000f01d9410f32c4e1f8103df26a0000440f060f0966420f14692667f08372f90e40f71ac462cd074de2", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ftruncate(r3, 0x3f) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x208000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:01:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0xfff}) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) flock(r5, 0x5) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "aa1c944e71df86c1", "f9caf4275ac5ae62740fb8b148d69177ddfa026686f7dbc9e25c77a3c78ed5a7", "a4c42052", "3713365d27c1907d"}, 0x38) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000140)=0x8) flock(r3, 0x5) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x2, 0x0, [0x1e, 0x2, 0xff, 0x4, 0x7fffffff, 0x1, 0x3264, 0x7]}) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) 11:01:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:12 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3e8000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:12 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd00700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20100000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="727678bdf7e8cad2d68fcf708100c59946617700000000000000000000000000000004000000000000000000000000000200000003000000a202000000000000000000000000004be0000000000000001002000010"], 0x1) 11:01:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x3f000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000032003dfa00000034000100300001000b0001206374696e660d000004000280040022000c00070000000000000000000c0008000000000000000000"], 0x48}}, 0x0) 11:01:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000580)="fd", 0x1, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000000)={{0x0, 0x0, @descriptor="7406cbb2c5c4bb22"}, 0xfa, r3, [], "e8242bfb0090d652b07f5f9ee380a16111a920792b863238824d1042124b767f519cfc1a2c164821c79848e1d5a3204820d644fc38fd901e01519cc45a71ceb5148774b93b53d979100cba0f08959ebab267843187b8b9646e919a715402fe3df8ff0f40ebc3f4c729024f01550a6b208226a20708cefdec72f4c45624ea0a836e0ecb394745705149fb15c96051334f8040f39a58b9516c3d5e3966f4bfd2cd157343028956b7069be86fcf8493878a120b623b5cd0a3312ccf9a0059df9d7e9ed0fab09b6b36d0514c91481249a7d96db077809dd1910a22902c7493ce2863416c4f1e48c77e0a7a9661e33dbf40a41d5cec8593412bf89794"}) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 462.918111][T16333] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.950500][T16333] tc_dump_action: action bad kind 11:01:13 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8cffffff, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:13 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xc0ed0000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:13 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x68, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1145}, 0x4000001) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TCSBRK(r7, 0x5409, 0x80000001) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r9, 0x5) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRES32=0x0, @ANYBLOB="00000000000000001c8012800b00010067726574617000000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="6e9dcc25cfdbdd9f7808ed81ea5af9896b3acb531ceda04822ce512546ba651e6683000000000000007aede24b45e8284ffe696389b73e10040102e71d141c128b14c522929415a8da3bac8cfb717b22ef147a4fe358a1ed42bbb4229dd2d29e38d74ca2c411207e7e"], 0x44}}, 0x0) 11:01:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, r1, r3) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:13 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:13 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xf6ffffff, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000100)) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r4, 0x0, r6) setresgid(r2, r1, r6) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:13 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0x3, 0x6}) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x448, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1ec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xe4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1c}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyprintk\x00', 0x4100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@getlink={0xfffffffffffffdab, 0x12, 0x1, 0x70bd2a, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x8080}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x34}}, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) write$P9_RAUTH(r6, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x2, 0x2, 0x7}}, 0x14) 11:01:13 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfeffffff, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:13 executing program 2: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x9, 0x40, 0x8}) r1 = socket$inet(0x10, 0x2, 0x0) clock_gettime(0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="13066ff24806", 0x6, 0x4, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x4) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 11:01:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xff000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) dup(r3) unshare(0x8000400) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) dup(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) keyctl$session_to_parent(0x12) 11:01:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10, 0x1, "aae977c4142fd386"}, &(0x7f0000000080), 0x1200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x200}, {&(0x7f0000000300)="c157663b752b1f03315beccd222b448f8f52ef6c721a685ad3af603f363950b357f121d6cc1f463a4f7aa72704618626dca0edcb40073d7231073494391b2d1d00e3f2b303eecde21768101b9d52b4d88b85bcf57db3c7cd4ac09102a588ced74a463830d738503891c7aa68286aae753a21dd5e03f9dc6c1bd17c8528657bf92cf81de88436da859f33340400000000000000dc058366f71e7ce9cf7be49e39dc71f82345684c33817f2147c36efe41f3874332d7acb924cc3791bd0ed15428af2b49de0b", 0xc5}]) 11:01:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xffff0000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 464.249978][T16387] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 464.266187][T16387] loop2: p1 start 3454819121 is beyond EOD, truncated [ 464.336329][T16387] loop2: p2 start 977674188 is beyond EOD, truncated [ 464.392240][T16387] loop2: p3 start 3019039488 is beyond EOD, truncated [ 464.427464][T16387] loop2: p4 start 3620636837 is beyond EOD, truncated [ 464.447622][T16387] loop2: p5 start 2239549723 is beyond EOD, truncated [ 464.471856][T16387] loop2: p6 start 4150690565 is beyond EOD, truncated 11:01:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfffffe00, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:14 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) setresgid(0x0, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0xff, 0x6, 0x1, 0xffffa16b}, {0x280, 0x1, 0x0, 0x1}, {0x401, 0x1f, 0xff, 0xfff}, {0x12e7, 0x80, 0xff, 0x82e}, {0x7, 0x2, 0x3, 0xfffff000}]}) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="6074c1556b2090ad"], 0x2f) 11:01:14 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 464.497455][T16387] loop2: p7 start 843286515 is beyond EOD, truncated [ 464.643011][T16401] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 464.654856][T16401] loop2: p1 start 3454819121 is beyond EOD, truncated [ 464.666294][T16401] loop2: p2 start 977674188 is beyond EOD, truncated [ 464.675919][T16401] loop2: p3 start 3019039488 is beyond EOD, truncated [ 464.687589][T16401] loop2: p4 start 3620636837 is beyond EOD, truncated [ 464.697198][T16401] loop2: p5 start 2239549723 is beyond EOD, truncated [ 464.705005][T16401] loop2: p6 start 4150690565 is beyond EOD, truncated [ 464.712340][T16401] loop2: p7 start 843286515 is beyond EOD, truncated 11:01:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xffffff7f, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabbc1740000920000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5003000090780000"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) sendto$inet6(r1, &(0x7f0000000180)="6ac61aee9a0db886297ce4e68080ffd4c07b0368deb90e5a589cf772c31ac716aa7a6b748a12262cbbfbfca11782d19f1ca28d7794a92c52a7e85aea4b4b05f00e976927b10d075438e5f50e6faeb244962b9049f96009f04e1b8c4ff19dd68e32c1c8f5dce1732a73fec36081ecbc3bffb35d8d3e3fe72f3584ea81b0d5d71621aedc", 0x83, 0x800, 0x0, 0x0) 11:01:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x7, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}]}, 0x410) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:15 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000100)={0x4, 0x9da, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001400, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="f588813b5c55e186c5384216b3bb480d090053969712aa7d82f3cb8872e12162d278c43d78172cfc8c9da5c01818cf9c258e815f64bea48e8d392b799d9d0d351fde965566db673a340b90808a45063347b672909f8816ce7156f978528874406a3cf59fdf332fe1f176ca9d07d10ec22a604bc611a41e5b01d1f66b40096604f3ebe84f8dca4aae2ec9e36ee76642", @ANYRESDEC=0x0, @ANYBLOB="f52e", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,allow_other,func', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=cgroup.procs\x00,']) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) shmctl$SHM_UNLOCK(0x0, 0xc) 11:01:15 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xffffff8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 465.096105][T16426] IPVS: ftp: loaded support on port[0] = 21 [ 465.170063][T16426] lo speed is unknown, defaulting to 1000 11:01:15 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfffffff6, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:15 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfffffffe, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:15 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x803e00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:15 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:16 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xedc000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:16 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd00700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 466.365580][T16433] IPVS: ftp: loaded support on port[0] = 21 11:01:16 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:16 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 466.488946][T16433] lo speed is unknown, defaulting to 1000 11:01:16 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfeffff00000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:17 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x100000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:17 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2b8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 11:01:17 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:17 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x200000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 467.259616][ T48] tipc: TX() has been purged, node left! 11:01:17 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x300000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:17 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:17 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x400000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:17 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:18 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x500000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:18 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x600000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:18 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:18 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:18 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x700000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:20 executing program 2: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:20 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x800000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:20 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:20 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:20 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x900000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:20 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2010000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0531032100000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010600090002206d041cc304000000000109022400011000a0000904000001030101000921000000012205000905810346"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "01d2c90e"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6630400000068"], 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000080)=0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x3f00000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:21 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:21 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8cffffff00000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 471.609467][ T9231] usb 3-1: new high-speed USB device number 8 using dummy_hcd 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xfeffffff00000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 471.899347][ T9231] usb 3-1: Using ep0 maxpacket: 16 11:01:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xff00000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 472.020036][ T9231] usb 3-1: config 0 has no interfaces? [ 472.035084][ T9231] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.21 [ 472.079634][ T9231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.135626][ T9231] usb 3-1: config 0 descriptor?? 11:01:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xffff000000000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:22 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:22 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xffffff7f00000000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 472.413540][ T8794] usb 3-1: USB disconnect, device number 8 [ 472.619740][ T48] tipc: TX() has been purged, node left! [ 472.999366][ T8794] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 473.279332][ T8794] usb 3-1: Using ep0 maxpacket: 32 [ 473.409936][ T8794] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.426829][ T8794] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 473.458553][ T8794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.540293][ T8794] hub 3-1:16.0: USB hub found [ 473.769389][ T8794] hub 3-1:16.0: 1 port detected [ 473.774331][ T8794] usb 3-1: selecting invalid altsetting 1 [ 473.810542][ T8794] hub 3-1:16.0: Using single TT (err -22) [ 474.632757][ T9231] usb 3-1: USB disconnect, device number 9 [ 474.650276][ T8794] hub 3-1:16.0: hub_ext_port_status failed (err = -71) [ 475.419223][ T8794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 475.689183][ T8794] usb 3-1: Using ep0 maxpacket: 16 [ 475.839718][ T8794] usb 3-1: config 16 has an invalid descriptor of length 9, skipping remainder of the config [ 475.850039][ T8794] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 475.859515][ T8794] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.21 [ 475.868581][ T8794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:01:26 executing program 3: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="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", 0x1c6}], 0x1}], 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0x100e1, 0x1400}], 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0xffffffffffffff19, 0x0, 0x10001, 0x10000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x20400, 0x0) write$capi20_data(r4, &(0x7f0000000280)={{0x10, 0x401, 0x1, 0x82, 0x3, 0x2}, 0x6e, "79612a308ba5f3b4cf9f0d9bfae304b708e2504ffceead8ffd8f26e10fe35e1cd52e2b4d68e6e0621a7cf3b950f1b36dcc1734d35bc9640ee626100ef825ca2dec3329e05c0ec640e18f384afc1e9547ce64b0c674da9311be40abce2a2cbee827a36aaf105eda227370d1d32d5d"}, 0x80) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000180)={r3, 0xca}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x2873, 0x40, 0xfffffff7, 0xfffffffc, 0x26, "3980c59ea6780f020121e3ddfeeca8ed6c9cd9", 0x40, 0x3f}) 11:01:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000380)={r1, 0x8, 0x6}) flock(r0, 0x5) r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x4000, 0x61, 0x5}, 0x18) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000002c0)={0x800, 0x1, 0x0, 0x800, 0x2, 0x1, 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0x20) setresgid(0x0, r4, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000003c0)) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) write(r6, &(0x7f0000000140)="870218afdb90d5aae01f17c3d19bb74ba1f4bac002f9c7ce6155a8bb6e1b48ca4b66f8ba9c0d13c47f162f2a36c0365ef9ed6aee6ed9af4d925aa234f8e5f90232e94d4387818e21a094ce5589231b926c5070560884735c77416f5111c5c1235d0c08665d08f79a6549136b8096969111d18ee456ace9743143e89ad3d6a249928bbd7cefcb9a32bea62726da96597004f96f19cca5e8251cac8db9cbe9083530fe964079038300de462571fc4a4d864df3893e525a45f601f0189d253b054c127ee3e10ae147", 0xc7) 11:01:26 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x7, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:26 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:26 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 475.941108][ T7880] usb 3-1: USB disconnect, device number 10 11:01:26 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="73657373696f6e3d307830303030303030306666666666e666662c00"]) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000140)={0x77359400}, 0x10) dup2(0xffffffffffffffff, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) accept$netrom(r0, &(0x7f0000000040)={{0x3, @netrom}, [@rose, @netrom, @default, @remote, @default, @null, @default, @default]}, &(0x7f0000000100)=0x48) 11:01:26 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) setresgid(0x0, r0, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 476.082276][T16682] 9pnet: Insufficient options for proto=fd [ 476.092141][T16683] hfsplus: unable to parse mount options 11:01:26 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x3c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 476.131186][T16681] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 476.143161][T16683] hfsplus: unable to parse mount options [ 476.148208][T16681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 476.183822][T16681] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 476.196490][T16681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 11:01:26 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvram\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000001a40)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_CPUID(r5, 0x9000aea4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00df00ae728985384b08064d85000000006623564cec5ef73236f141b682ee929ff295904e9927972a89319af850f104bee6f4c5127ccf6c898eabbf14d3a191001219283bba7a0c26f853e5971f95317dad4be43b8ed823f053075271347f0802b02ecbb18d74793f683b353b56a4ada9c44b8b91f2f57c349f019f1968a2d58e30bc07d1b0f5ed56f5dff5c5186773e9bff2bd3392ca314428b630fbdb"]) dup2(r6, r5) 11:01:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xf7, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) [ 476.262549][T16681] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 476.301501][T16681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 11:01:26 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:26 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 476.326699][T16703] 9pnet: Insufficient options for proto=fd [ 476.328236][T16681] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 476.403127][T16681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 476.468719][T16711] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 11:01:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {}, 0xb25b}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) write$6lowpan_control(r2, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) keyctl$session_to_parent(0x12) 11:01:26 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x7, {[], [], 0x6b}}) 11:01:26 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000380)='\\', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r3, r4}, &(0x7f0000000540)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r6, 0x0, r8) r9 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ea718aa165b0c76518bf8aa066847cbbcfda23c955205bd0b94d42e06b8e94abcab96565f58b4fce8ea7b3443ba2422a5bc4d13298553645565fa2a1b3e687be97eedb80e9c6f7a0401c43ab3b00277d8feb69e7afb17f38f1b9aa47554378b430a4e0c4af3b440e0ef17cca60", 0x6d, r6) r10 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="8aa50dbc09ccd4201270dbbdc89f40328c86c9c69375d8830211f9f860b3823da12aa253886e46d9471aca7cfad6d200c387d7dc1e68970d6097a5c461416d8f44e8f7ef2705668fc76e65f0c2c66c1703d61a7c452de4bec6be5b97bf47bf603a553b592a92066a7574f5b051d2acce0c883d134ac160a810de29c1ce8b01b28c67b4aa7724654ccef7b774dec4773ace6c16f4eb467b9dac3fa04bd98c057cc8f94b6e45aacdec51d994a259", 0xad, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r5, r9, r10}, &(0x7f0000000280)=""/48, 0x30, &(0x7f00000003c0)={&(0x7f00000002c0)={'sha1-avx\x00'}, &(0x7f0000000300)="2c29e31cef1471264448199587134421143cc69c102e99aa71ecd7ad6d85ccbfb0cbd858d40efe8f337dc3966409e508f215f0ab3e0ed6741b06394e3faa87bcc18489e26ca16cdfc905cf1ee7a665f6c1ac045299efd81b9f7e31e33aefce3df70df71935823bb36c99a64a7220ee0eb5bbe3a6552401835ba858b61b2e37eb78a70f101f99483a385e3549208915fb454fbab9fbb01957932592d739692862b5f7d16e9569e4a28217097b3e6c7bbd5d196fd4eb", 0xb5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x25}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 476.617757][T16721] 9pnet: Insufficient options for proto=fd [ 476.634852][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:01:26 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x3c, {[], [], 0x6b}}) [ 476.659112][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.686124][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 476.711734][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.735453][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 476.761177][T16733] xt_l2tp: unknown flags: 25 [ 476.765790][T16734] 9pnet: Insufficient options for proto=fd [ 476.767375][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:01:26 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x5c}}) 11:01:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) clock_adjtime(0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0x3ff, 0x17a, 0x1, 0xf0, 0x7, 0x70, 0xfffffffffffffff7, 0x2, 0x9, 0x1ff, 0x748, 0x100, 0x4, 0x4, 0xffffffffffffffa3, 0x7, 0x80, 0x9, 0x24, 0x3, 0x7ff, 0x5, 0x5, 0x6, 0x1}) flock(r2, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003c000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="f00fbabf61b400000d66b8a1000f00d82e0f8601000000260f01c3650f01c9b9800000c00f3235002000000f30b9d3090000b808000000ba000000000f30b8cfbb00000f23d80f21f835c00000700f23f867f20fa5a215000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in6=@empty, 0x4e23, 0x7, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x11, 0x0, r5}, {0x6, 0x4, 0x1000000000000, 0x6, 0x9447, 0x5, 0x3, 0x1}, {0x9, 0x20000000000, 0x5, 0x1f}, 0xffffffff, 0x6e6bb5, 0x3, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x637a29ed58392e12, 0x1, 0x7f, 0x1, 0x9, 0xffff1248}}, 0xe8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) mmap$snddsp_control(&(0x7f0000046000/0x3000)=nil, 0x1000, 0x100000c, 0x13, r6, 0x83000000) [ 476.819466][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 476.849027][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.887239][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:01:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 476.931356][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.960235][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 11:01:27 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 477.003249][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:01:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x9dc5, 0x6, 0x6, 0x8, 0x7fffffff}, 0x14) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, 0x0, r5) keyctl$get_security(0x11, r3, &(0x7f00000000c0)=""/33, 0x21) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0xb, 0x3, 0x6, {0x400, 0x7, 0xe9, 0x4}}) 11:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/96, 0x60) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000080)={0x11, 0x43c, 0xac, 0x10000, [], [], [], 0x1f, 0x5, 0x2, 0xa10, "e32bd921b431b81035478e97ecc0d74d"}) 11:01:27 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:27 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='tran\\=fo=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',k']) socketpair(0x27, 0x80000, 0x80000001, &(0x7f0000000040)) 11:01:27 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040), 0x4400) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2200800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sync_file_range(r2, 0x7, 0x200, 0x3) 11:01:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000000)=0x8) 11:01:27 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:27 executing program 3: r0 = dup(0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x125}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 11:01:27 executing program 4: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:27 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 11:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getegid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) setresgid(0x0, r1, r3) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:27 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r3) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@access_client='access=client'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@noextend='noextend'}, {@debug={'debug', 0x3d, 0x9}}, {@cache_fscache='cache=fscache'}], [], 0x6b}}) [ 477.657745][T16790] IPVS: ftp: loaded support on port[0] = 21 11:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 477.970679][T16790] lo speed is unknown, defaulting to 1000 11:01:28 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$join(0x1, 0x0) 11:01:28 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:28 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 478.310881][T16800] IPVS: ftp: loaded support on port[0] = 21 [ 479.779176][T16800] lo speed is unknown, defaulting to 1000 11:01:30 executing program 2: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x8, 0x20000000001}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xc010) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)="c26baeec596b8b2295b88e2cea12047be680968bb2a12b2b20f97cc1763def88ec3d5fd2f7ae618d", 0x28}, {&(0x7f0000000300)="2843369971a594a77cf7f74db12d39b0b88191821bd0b9115614943eb82c92b2ad74401a1c3c1bfda3fcaee9db0cc53cad1f8f99b6d69f542d57127adf6031493e12dff1816171d10ba7746fb540f77d7b43efdece13e38cf66ea7aa106bcc48f10e35843287a151fd3927950ae20dbed3840a406a3fbd8fca3022bc5ced1961d2588b9e39306daae0c2fc0ecc96a3ba096631138edcbedf6c2af4a7967a057f41c65fe36cf94d4b261cb5ec6a5183", 0xaf}], 0x2, 0x6) fstat(0xffffffffffffffff, 0x0) setuid(0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') add_key$user(0x0, &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000c80)="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", 0x959, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) syz_genetlink_get_family_id$l2tp(0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x40045566, 0x0) 11:01:30 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c1670525c66649fe311e550462b58f179f97091bd5d74fe1e904dc90e4bb7de82b70c0af79c42695aadbf718fa1b97e643b55df6386e4a24636d3d4175ee58f4d10b33e29a911185cef5d4f6cbc4b80fb25ca3e4f9e497d5d8b7e043917adcb2c2be2f600d46ef8dd4c8f69b80adc7e26b4d5ecbb0766b00adf0b055f238c1d5c65283f68b8029ffe4f0ad664192ac512511a2ebec778599e0300fe89d6e3670404c5f9431592dec3104dd9", @ANYRESHEX=r0, @ANYBLOB="a80e5631eb31765033bf7ecb6b"]) [ 480.117562][ T7] tipc: TX() has been purged, node left! [ 480.191182][T16885] 9pnet: Insufficient options for proto=fd [ 480.269502][T16890] overlayfs: failed to resolve './file0': -2 11:01:32 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000380)=0x7, 0x4) keyctl$session_to_parent(0x12) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) 11:01:32 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:32 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x88020000, 0x130, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x110, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}, @common=@inet=@set2={{0x28, 'set\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$nvram(0xffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r3) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x40000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat'}}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xc5-/-@\''}}, {@smackfshat={'smackfshat', 0x3d, 'raw\x00'}}]}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) 11:01:32 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x3, 0x0, 0x9, 0x6640, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x87caa2b655834229}, 0x51640}, 0x0, 0xffffffffffffffff, r0, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000100)={0xe, {0x4, 0x3f, 0x6, 0x4d, "3848022da8f79c8e9859e4b0276c3598bbe64eab2af06b4d56d3a4e4c34b91159e053c3884d99d431409296586935a52c5d1d3566375501610f5d93163abc9e3ef37b0678ecea85274ae93f073"}}, 0x59) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='task\x00') syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="64746e74676853736644bc"]) 11:01:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x119000, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) [ 482.608409][T16923] Cannot find set identified by id 0 to match [ 482.684386][T16928] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dtntghSsfD¼" 11:01:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0xf74db7ab69690f65}) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x242, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="240000000806050100000000000000000a00000205000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x400c800) keyctl$session_to_parent(0x12) [ 482.927685][T16937] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dtntghSsfD¼" 11:01:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:33 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) getsockopt(r0, 0x80, 0x7fffffff, &(0x7f00000001c0)=""/183, &(0x7f00000000c0)=0xb7) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x3, 0x5) close(r5) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1147042, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffa) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) 11:01:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000000)) 11:01:33 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:33 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 483.380217][T16940] Cannot find set identified by id 0 to match 11:01:33 executing program 4: socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xfffffd00) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r5, 0x0, r7) setresgid(r2, r4, r7) setresgid(0x0, r2, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000040)={0x4, 0x80, 0x6184, 0x0, 0x7, 0xff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe51, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) 11:01:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x1f, 0x400, 0x1, 0x1, 0x9, 0x6, 0x20, 0xffffffc0, 0x1b7, 0x7, 0x8, 0x6, 0xfff, 0xfffff800, 0x9, 0x20, {0x1f, 0x9}, 0x6, 0x7}}) keyctl$session_to_parent(0x12) [ 483.937999][T16980] Unknown ioctl -1065068969 [ 483.966255][T16980] Unknown ioctl -1065068969 11:01:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000240)={{0x2, 0x0, @descriptor="cc4027423baa5637"}}) flock(r3, 0x5) ioctl$KVM_SMI(r3, 0xaeb7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff01) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) readlinkat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/81, 0x51) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 11:01:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x40000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x7) flock(r1, 0x5) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000040)=0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x400042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100), 0x4) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:34 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:34 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) write$cgroup_int(r3, &(0x7f0000000100), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) close(r0) [ 484.931894][T17007] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 484.998674][T17007] File: /root/syzkaller-testdir396937262/syzkaller.QSKo3l/173/bus PID: 17007 Comm: syz-executor.3 11:01:35 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @cfhsi={{0x0, 0x1, 'cfhsi\x00'}, {0x0, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x0, 0x5, 0x9}, @__IFLA_CAIF_HSI_TAIL_ALIGN={0x0, 0x4, 0x8001}, @__IFLA_CAIF_HSI_INACTIVITY_TOUT={0x0, 0x1, 0x5}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x0, 0x2, 0xffff}]}}}]}, 0x50}}, 0x4044094) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 11:01:35 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x20000880) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x4}, 0x40, 0xc3, &(0x7f00000013c0)="77188bb6a03dd7e9eab50234f83349b218eca7fd51af0165130ce7b31f0d07cbd3c32bf83f12778ca728b9cff022095bdd5eceaa51dc82bfdb58eecafdacd06eea6f4fbd4e4bf7c07ef16cfbd4577da9bf3197d3108456a797f518777849b95e9e17d7e693e5ed713c32b6aeb50c194ac128bc42137dfd8482de357b3ae1b1d14eb3b7990c5f0a63de2484f55ef0ef17b12786df8017b0bc4f2e0fe8a9005b9779713208ad4a8f61a800a838696ad699a00088f244c2a72595ef6f5821d04f3bea4a7768566ecdc3812078d7098a1d7f48fefd093904e361c370fbb49da25cc260605b355f39fe142fef296d26a67a988d23927fe1b41a767de96c573ee08020a222e06b67d9131af0aaba212aa6c1918b950c28b284b7504db64a034e35e879e57a5979fc47dcaa2f0416064f22c5ddebde7c35d1c1dfd266d795e40a66681e019092f4e4e444bb60ccd3e9d8320a791dc1950d3e4007430701c3a51c182faa363e45b8aed83a0f27ec7731450989fb59634448e44de423dd8464eeb694a8272b09c791b1679d899af4178ca28a829b821c92a0280f68daf8d101b27f132bbeb10b669027291cfe079579836cba61c2412703b171aa30b8209140c151d64ef0f24fe42f4a6a8a6e6595523c63d7efcfeac6cff701675fbc79159165e14639ab34f97e25b14489da8f66e6c1d88787c1570170835ddf703924073fd9244b86b55fee910357ed75867fd899292a1fdf7cac9dfd9267d62b4f20c5fa5662b9f5d6b5694b9a9175c78bc92b6685aaf6eb8815a27587825163fee0e18c36959591cb1430c005e8a736ed951afd6d3198042c250bda74b604f67a81a2a2ea1837fa8292a978364b152af1f80a36bcd865cb4796de3b9668b03d4e1b0fa0973e4dd45dbe845c835b5cd98b4c96535410bfef8585f9b4196e342779e188bf153973f86c0bd2d9e1ec1fcfe6cc65cdd609fcbceaef48de76157dd0b4f41f0cf1cc2619ffda180d97975f1c6debd63ff6cd6a200f19af92f7ad48ef0c4d9a108c1e14a93e83a15fdb560bcb3ee0fd0bf056d15dead3bbd8fe3c6100d9099e4f90c1341f003389091ecded41183acc3fa943fbe526b5e8e0d6c6fe130a76ef30baf9795acac6240654003499ad70989c03e180393ed5b273859e74d78afbc5e0042706b94be971d7d4c0816592ee094fb2dc102d1feea7b0a2b9021eb3d701713c4eb1b9a74f0676414ec91fe6243bc4cc91d9c986189ed22abb026578a7430d85f2c0dfb1c2f05738dd445a6d523115efb9032bc03c3ab92d453a2e4063e27a5ebb79def01617ed99fdb3ef8746b471974844ed162ea1e01722f362d7e7900ae9ee39a7f32834018c4f4f8df8a16c5052fa562272631f61f2e47b82f9f150c5f58a76924c19e041435e4bd189016527b217a1b02c5a154287eabfe6c30fe2af8a03818f0ff6394c00285960076e8222bc4b23f66028363b7ac8fea561a97b8d917f92ebd87699182a41506d789fc92b9492e9494490951b07bc60f012c201fe7e491b2c6d3853d824c9284f67f1e286b98caec8104c59f435b430bb899a2de274fd63c58d0d80ab078f2e899e8c702a9c5b2e2e65454d98dd187a193fac1f92268687b07ff0633863a0828d2fa30ec8b77bdd49f4533777da8941433b4fde68ab854bce40f0fd40a1d57c27c35b604fabf7c0a603fbf08ca49ef32d7029e89f8acf43c67fc0a7d82b2d4ce45be11d4ce24fba803ed164cb693c8d9da80841038fa0cfb4e0f6bfa3bc4ebd07cf8f45a4d6b57afb1746cefaaf7785c4b312c07a6026100ebcff34f72ea7baa5b328dcb8b987c06b7f58d4af617ef80d54277a74efe36422d17935ced2d9e56c9138e9725bfca0a105870891c573305dba13af5649a93c27cce6ef717213879ed110cdf2544fa705ff2910521586c9015806417248edabaffb9a5678c222f649f556dad6266fe3897a75ee577106a339ff8dbd2a2415b6f8f4894ca19912b12789d7492273a7bfc5853163e9d7d8780d89f58412f0be342932662a0c385beed431449e9045bbb26abde7a19ff9a4f32fffc4cc9c9e5db068f5097232da6dbdda52abedb5306398c9de1d92d2932d93c48c9feea23ea32e6b422e289ca9ae97faf0da1d30bd92cb8ff01bb0ede8f77cfe6ab10aa4604f946a112f3367f862660d0b688358c3a413263c5edf4b19210a918d4333c6a7f22eb394b35960ffb10bf0afc078cd6f4505d686f1da28b24e5cde5de1fedffdd18eecbae6c84cf01145ba5e203b626dea5a6881e228775b31fa4badb3c058f5d5dfb7fc3875107a6ee6d16fdb28fdbe6ce40cd732d6d040c0c857f371e46c56b85abbff148e1898c1741cd9c9b851bc0d5ffb8889a5545ef903c4e98ad5c76c8ed32dfed90a87b2ff27dfff6b7c3d9e9e8645758c5a60c06816786e5e27128ea8803f783e92a92f282d92bc6fef68f8cc8b15ad43a24f4a5486fd87713e143bb81417b94255f67216bbc3689b67a61e1ced23be79a60226ebf1d249ce42c9b609610c80ed5b52c2641f4059ca01b69b20f6976602bbd806ec90d636f3080d28066b92e7e4360a7965066572ab90161561736c84f97fc29d8c4eb3f8f0c4076d3efae6cd4594977670552b6ea386d49577cda63289e078c476d5f8cc1f9b9b897df91667b5d9571f16d7ae748a6c79dfb6415e0fd0e8d68e737c3af8ea4f18e0228eb5850d00a9aa262c598fdce33f68f659604208a5548cc81e2f30881f02fbf8342ce178fb1767e597d4d4b77c2a171494d2560e2c1f0d7c0080e540dec42a4a4e82e0cc041c82b6b20cce48354d817131fbb5669504afd2612d1f7999137eaec4809ff9e53b62fb7b0fd4d094b1bbfa7e99491d2b2dceea2345b8ecae586453451f89e986de5e15bf2317e85f878468741ef3218d55f6b6941e0425679f134b88eca1d9349645c4c7e38223a83971c0d049b079b6ca380c2a9304614ecfb944ccb59bad96297134863f8d1621829939cdeb017d327c8ef36ebfdd7948e62429e2dfd566f1d9da2b83e06150775e409da436754601f27829a865f2a750136c0e69d6126831e7879a642bfb70b7be5de5f914a66035b3f707058a3b8ebce110f7e314460b559565d1837d4f6beb8ded5661b60e0af0574962304588940f72fff6cb900acc1fa68df34d705b0e3d9c310e5725b5b79c45dd4b0ea57eb2b48b06dc2d3110447f2dc623ef3af6d8ca5620dea94c0a454e433565bf659aaa9800408e287c7354a5dd2cf6ca22b0342a4df7eb98bbace4494647758d2d823efbee2f05a8ec5c86cabc7d2448508df48e5f6b9f61352f44297febccc14e54c037e4f186d88a8b066f28e0f4cf932e6c086ceba7688b2f41afbc146207d00ed0dfd78bfa454dd95dd0f4e1ae33c78ade2fe3061ac149e1913ef7c56b02b9d46a5ea065ab308b1aab517a587f8f1b1083bd6675df7beecf922bce73d64d5c1bbf7825fc58ccc65a3af8ac234d33742ec1625259de9e159e26831a0b3bca509cea06750be66dc96be7610f6d2110a4d0f40eef294155da61f2a3ae190a2e455bab261ebfbfc4dc32b560476b0aa59e8262f11d82603c6f3ab5980bf6e5531fc316dbc64f540a8bc5055db528cd39941c17d4af15d4607e8a9f73b2592c77af628ff95497456e7987b101ccfdf9825b76b78c7d6061005e52f28a7a8edf5268c927070d0e301f012f147f8b7b66dc961ee972f2df6f1f22a8b7333e1303398880dcc56dbf30c7f274b51f0ed1d3861eb96d586440ff19386f66b3c7ab76cc38edf17d432f8e076322162784bb8c4e85dc7ca3d06036f5e005d0768a878312947c5e5277aa4195169b66bb9d03fa15db733d41115eca43ce448cb787a0920c10ed76a7877b3bbd737c8fff5e458e1c2ca014494712af1ce2106ddad9381586034c20087afe9217674392da2b487d3529b513698404b8d46a3d6869584e7094e02c3f4302156574837b904bfedd7a62a28aafa3c81cb00b1895b55ca7185912c2292c8ad4a6e0656b4aaa4601a6a69dd2bda02b2a63ee6a233023f7de170b9e000e2b43925a8d9310a2d21f509e7d1a4840947d27ebb77d29467d58b4f03bcc7740b6e9b28007eb93764d945f34dd26eabcaa29bc5858eb73d6befc66845f01085db45c8869e8ec76bf392230ebf3c7592c7c51e9e290c436a74b9612517ddaa3451461945639c181e675f9567e5716400184cb3e1e12cdc4584b22d0ff0acb24ac5314cd0ca3171c2c14819935d35997ee1c5aada23d859f05ba86c5c94848f096ffb4aef3433b368d61e83258c83096860a877d5a7980e7fa6f604e0196da51e92d3866dcd07f2ea535158ca582e5c3a18e919ce1b37a13a9feaa5639a7caff8c9125afaf89797600f6c4cac829fee3b6371bb315fcbbc65ded59600bd5ecf87ee4bfeaea27cb9dd8916b62e8bcaa20630049c5f297fdcdc63bde1635f19ddd5f1b5bcc7cf542422fa43381812acfe98e1566fe87e1857632ea00ee8cab8d8979b6ffc101c6d27225d78afa5f06bb78bfe931bce96a473f684ab4b0103d5c918034895f190292f44b26d711792e13f88cb7074004765c693819b30d5ab8df961dc6f28b6fe505427a7759f4a38629849104b755cd26dc8683dfdb2d10010c47896c5f893ca9a0a8b62c3f425118cd246d39cf15e4e923400703ec6fb66a5cadf5d88132bfef901c4db50c644917724e8f2b3f9630209fc3bb5dbcb51eb292d23a49160dd89e27f7a2a95cefe556d36b14d5d8375fcb6b89e4dbd0fddf4e2c4a04beb219462d64ff593818a2de41fea10be868c3a3be92090641e9bad37d9cd65fa7035e2a671a785d1139bb909893278d03e4787d870ed7f88b4b4cda94ecf91519e90cdfed4cd02178eba695297e4b2aa5e062b06ce902961cb5a206fe07c9a4037c8b497c7be911889b522e2a869d26fe5b7517972cd972a3dbc74d45a554af766a8847ef09d3b6cd79e8eb80a29c4147824ae35a59db0076dedd53a58e8639ed8c203db99c9cc0a510c720d75b39c3da55421a00df48f34c3f91bf2bbc1239cece254fa66a0ab5015a6bc7ccab5d32c016a0448cb4e86770850c6e143b1ea1a4f84c3a483dcbd83df7f288784981ef94f7b84a5d3d2cb2286e26382d46696ac884cc7b9a02f9ebcc0d28c610e5b2558b3c0c93c7155e6fba861a38b993e8cf434e459422ed383f1bce8f3cb8403e65f144e411a57ac376076873625b9720b8b2b29302f7fe0fcebd551375d977a33031ccff099ab3aabe7ad8f77c8121fc2fe990ca8a7c0ac294027f9e5eb01e6acaedc96e2246494125ef9fd143cb08e5b882cbd86b5ad95b7da6245df21d2f336a1575f169cd663bbeb6bb0593780a1c5240088311b6cd7eb38b713ee40e1e4e706aaa768a84f904e6755620057d69db6d4d3a6f45acf52b6fcb5eb8bfd32449ca400ed29bac0fa324680eb423a663c923244b868649ce2e60c16429929899cd2258f9c67216cfc0aab46a07f395c0d2ed4f1e3362eb05f458f16bc03f0552b4a339de69b59eda0afdd83cc49322bdda8bd6bdfbfc23e362147b1ecf32aa0722130fda7f6533e6a995fcd0ed42ce8b7b877bfe1c83389d1c6dd3f74ec936c6abf691ea115f6e81e3ea9eba3562a2247b62e34a122d6d9a0de2d71cb7397b232de497ad33891c8511047ebc531bfb867e12cd4bf4d53dbfa7535fab2f69d7f395e89dfa48607932d2e7c9f2fff2de16444c542255deb59d87b4aa5d512e12c334c132a3b9f0fbb8649b692d773cebd8c251ecf6f3f2056e0a8d", 0x1000, 0x7, 0x401, 0x0, 0xffff, 0x7, &(0x7f0000000300)="bf34c855c2a47fc5709d50f935c642a510a66f2fe0e025cfa53e9fb8cf211fd2bbaf79377f0fb29066ba7c8bdf4ece84ad429139344233f94097822becfb188c82715f2d0f20a9900b584304903f80f09ba2770287b00c4ad399888ce46ec8a8c70c5c14c8a3ffbee78dee59658b4f7a107e34487ac0644f45dcfa2f7c10a031747a5d65ab61686daff8c78046485479079ef0deda42cb09c769f25570cd63f27033dd42557754c42cd20df80b5c39ec6f56b25d994f0036afbcd20d8b01f7ab489b31fc405f89008f3ddd68d86981477519532b"}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setpriority(0x0, 0x0, 0xfffffffffffffeff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x1, 0x33}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x78, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x78}}, 0x20000000) dup(0xffffffffffffffff) 11:01:35 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:35 executing program 3: syz_usb_connect(0x0, 0x2, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x97, 0x3e, 0x7f, 0x8, 0x110a, 0x1658, 0x4ad1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x3, 0xdb, 0x46, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "278ad96b940a"}]}}, {}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, 0x0) 11:01:35 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:36 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x12000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:36 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000000c0)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1ff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x200000) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) pidfd_open(r2, 0x0) 11:01:36 executing program 2: r0 = eventfd2(0x5, 0x801) read$eventfd(r0, &(0x7f0000000000), 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r2, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r2, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r2, 0xa698, 0x1000}, &(0x7f0000000080)=0x8) 11:01:36 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:36 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000c9ddfce531702164addf0f0028"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r5, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r5, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r4, 0x1, 0x6, 0x5, 0xf001, 0x1f, 0x1, 0xa3, {r5, @in6={{0xa, 0x4e21, 0xfffffff8, @private1, 0x5}}, 0xffffffff, 0x81, 0x401, 0x0, 0x3}}, &(0x7f00000000c0)=0xb0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1}, @TCF_EM_IPT={0xc, 0x2}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2fc0}}]}]}}]}, 0x64}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x492492492492570, 0x0) 11:01:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$kcm(0x29, 0x8, 0x0) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/76, 0x4c}], 0x5, &(0x7f00000024c0)=""/4096, 0x1000}, 0x40000000) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000000)=r0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000003580)=""/9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000034c0)='/dev/bsg\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000003500), &(0x7f0000003540)=0x8) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x39}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0) 11:01:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x32021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000005}, 0x48120, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x56dc0100, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040000000a0005003c00000018f643ef43bd00000000"], 0x40}}, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="0b5582fedf16e200007985baa3c4e265a64efd9adf8d22427f7d3d7e6b41347e850304397a20c922a161738b6697d491c3d6bd250327504f27a8d32d2ad60bf2923647955adbc8d90228cd068c23a6ff0c7bb3e9f29228d4c3f1e54013bf3ecd54b5b5bd50d3b2d05f9d2911a833a669cd130d", @ANYRES16=r1, @ANYBLOB="3f020000000000542ee75213511e584daf636258e67400000001000000000000000c4100000014001462726f6164636173742d6cf52bf898ed7202578b42c6696e6b0000e9f0cc3b091bac616619dcaabeffdc593f712340245aa659d3b39392a9def505f4a7a88b2b3e18eced778fac852f2f007af32350c6ae45c98b4aadca8465436ede830e803066cd10e57612eafdd7840b9a48e2e7262f"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40000) syz_genetlink_get_family_id$batadv(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x25c8c2, 0x0) [ 487.089880][T17061] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 11:01:37 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:37 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) dup(r0) tee(r1, r2, 0xa027b7, 0xc) flock(r0, 0x5) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) syz_emit_ethernet(0x3f, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ff0769", 0x9, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x0, 0x883e, 0x9, 0x0, @opaque="8d"}}}}}}, 0x0) [ 487.205847][T17063] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 487.350960][T17079] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0xf 11:01:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850001000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec88317"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff0a0a4000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101051a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50b87dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x104, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x10, &(0x7f0000000b00)={0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x0, 0xd6, &(0x7f00000001c0)=""/214, 0x0, 0x3, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x7fff, 0x57d4}, 0x10}, 0x78) 11:01:37 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x12000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002480)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100080737) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000100)) 11:01:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x38, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xfffc}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @broadcast}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}]}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0x656b, 0x71f}, {0xee, 0xd14a, 0x17a91491}, 0x0, 0x1}}]}}]}, 0xa8}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70011300", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250200000028000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000034000180140002006d616373656330000000000000000000080003000300000014000200776732000000000000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600001801400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000000800030001000000340001801400020076657468305f746f5f626174616476001400020065727370616e3000000000000000000008000300030000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002007465616d5f736c6176655f3000000000140002006272696467655f736c6176655f310000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="080003000300000004000180"], 0x170}, 0x1, 0x0, 0x0, 0x20004040}, 0xccbf716b2b86c34b) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x0, 0x81}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x14000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000100)=0x99e6, 0x4) 11:01:37 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 487.814357][ T29] audit: type=1804 audit(1593514897.887:69): pid=17093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir396937262/syzkaller.QSKo3l/180/cgroup.controllers" dev="sda1" ino=16291 res=1 11:01:38 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='smaps_rollup\x00') ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0xfff, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0xf41, 0x70bd29, 0x25dfdbfb, {0x0, 0x1, 0x0, 0x0, 0x7, 0x401, 0x7, 0x3ff, 0x0, 0x1cb}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4140}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0xfffff785}, &(0x7f00000000c0)=0x8) sendmsg$rds(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) dup3(r0, r1, 0x0) 11:01:38 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:38 executing program 3: clone(0x20000000f0108280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765df27b90300060000009224dbcb04d273e50000570035f4c38422a3bc82200005"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:01:38 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@l2={0x1f, 0x6, @any, 0x4, 0x1}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000100)={0xac3e, 0x12, [{0x7}, {}, {0xc, 0x1}, {0x9, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xf}, {0xa}, {0x5}, {0xb}, {0x1}, {0xe, 0x1}, {0x4}, {0x8}, {0xa, 0x1}, {0xc}, {0x0, 0x1}, {0x5, 0x1}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r5}) [ 488.112687][T17108] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. [ 488.207720][T17112] IPVS: ftp: loaded support on port[0] = 21 [ 488.258364][T17112] lo speed is unknown, defaulting to 1000 11:01:38 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000480)=""/136, 0x88}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000040)=""/26, 0x1a}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0185879, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000300)='threaded\x00', 0xffffffffffffff65) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000340)='./file1\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:01:38 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setuid(r1) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x3}, {0x2, 0x0, r1}], {}, [{}, {0x8, 0x0, r2}, {}, {}, {}], {0x10, 0x5}}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) connect$netrom(r3, &(0x7f0000000040)={{0x3, @bcast, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 11:01:38 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:38 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1d000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 488.668985][T17124] overlayfs: conflicting lowerdir path [ 488.771188][T17132] overlayfs: workdir and upperdir must reside under the same mount 11:01:38 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x200fb50, @private2}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000c14"], 0x1}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x880, 0x0) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) r3 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r3, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) [ 488.945906][T17112] IPVS: ftp: loaded support on port[0] = 21 [ 489.034774][T17112] lo speed is unknown, defaulting to 1000 [ 489.034898][T17156] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.167571][T17161] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.3'. 11:01:39 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x1}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='cgroup2\x00', 0x4000, 0x0) 11:01:39 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:39 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 489.825322][T17173] overlayfs: conflicting lowerdir path 11:01:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x70c, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x1, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000380)='/dev/vcsu#\x00', 0x401, 0x701081) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0xa, @vbi={0x1, 0x400, 0x5, 0x6363731b, [0xa0c4, 0x3], [0x6, 0x4], 0x108}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 490.258497][ T48] tipc: TX() has been purged, node left! [ 490.334032][T17186] overlayfs: workdir and upperdir must reside under the same mount 11:01:40 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000000)=0xe7a, 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$KDSETLED(r2, 0x4b32, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 11:01:40 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:40 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/60, 0x3c, 0x40000002, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf732}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) 11:01:40 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 490.760977][T17220] EXT4-fs (loop2): Can't read superblock on 2nd try [ 490.888498][ T8794] usb 4-1: new high-speed USB device number 32 using dummy_hcd 11:01:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x14}}, 0x0) 11:01:41 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x38) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1001400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) [ 491.138493][ T8794] usb 4-1: Using ep0 maxpacket: 8 [ 491.258790][ T8794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 491.290326][ T8794] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.337264][ T8794] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 491.398408][ T8794] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 491.452135][ T8794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 491.484297][ T8794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.549781][T17213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 491.565139][T17213] raw-gadget gadget: fail, usb_ep_enable returned -22 11:01:41 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 491.609146][ T8794] hub 4-1:1.0: bad descriptor, ignoring hub [ 491.615481][ T8794] hub: probe of 4-1:1.0 failed with error -5 11:01:41 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5c010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 491.816742][T17213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 491.846005][T17213] raw-gadget gadget: fail, usb_ep_enable returned -22 11:01:42 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 492.123159][ T8794] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 11:01:42 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:42 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 493.106417][T17213] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 493.398288][T17213] usb 4-1: device descriptor read/64, error 18 11:01:43 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 495.109139][ T48] tipc: TX() has been purged, node left! [ 499.990342][ T0] NOHZ: local_softirq_pending 08 [ 501.270846][ T0] NOHZ: local_softirq_pending 08 [ 503.837807][T17213] usb 4-1: device descriptor read/64, error -110 [ 504.117787][T17213] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 504.327845][T17213] usb 4-1: device descriptor read/64, error -32 [ 504.667759][T17213] usb 4-1: device descriptor read/64, error -32 [ 504.939159][T17213] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 505.057869][T17213] usb 4-1: device descriptor read/8, error -32 [ 505.267815][T17213] usb 4-1: device descriptor read/8, error -32 [ 505.537730][T17213] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 505.647820][T17213] usb 4-1: device descriptor read/8, error -32 [ 505.877834][T17213] usb 4-1: device descriptor read/8, error -32 11:01:56 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:56 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) [ 505.999538][ T8794] usb 4-1: USB disconnect, device number 32 [ 506.012688][ T8794] usblp0: removed 11:01:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000001140)={0x9f0000, 0x4318, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x990a63, 0x8, [], @ptr=0x9}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0xb08, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040850}, 0x80d4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x70, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:dhcp_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x40000, 0x0) recvfrom$inet(r6, &(0x7f00000000c0)=""/4096, 0x1000, 0x6100, &(0x7f00000010c0)={0x2, 0x4e24, @multicast2}, 0x10) setresgid(0x0, r5, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r8, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472618ac63d66642c726f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6b49412de0f2c02552daf5d28e785213806fa38a29000606d8"]) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x500) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x5e, 0x3f000000}, {0x8, 0x3}]}, 0x14, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r4}) 11:01:56 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000c0, 0x200000f0, 0x20000120], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000abaaaaaaaa0008004500002400000d000011907800000000ffffffff00000000000390780200000000000000"], 0x0) 11:01:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r4) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2002000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@loose='loose'}], [{@dont_hash='dont_hash'}, {@uid_lt={'uid<'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:56 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r2, 0x5) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x101, &(0x7f0000000180)=0x4) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6, @ANYRESHEX]) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x16) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r7, 0x5) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000300)="5cd1537c09c8cb6668fae4d0e806497489236953840b2b1f232b9817c55e3a10fad9d474ef62b234be2a9d1625773c77c388fb690bc6ff49d7e91626f4d6a533ba6bb6769a673d9f5c325e24adc410d689d2a364ec74dc0e573d2bad70f7b31b3e5c50371bee5c26331a9ce4b9fe4f8fb31c64407666834766fe34215dc1fe4c0cbf98a2f4ec54c4b69a0693b1") 11:01:56 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r2, @ANYBLOB="2c636f6e746578743d73797374656d5f752c646f6e745f6d6561737572652c6f626a5f726f6c653d7472616e733d66642c2c646f6e745f6d6561735572652c667368bf24aac369645363383237613963312d396230002d66667f00ce722b54372d36363430346530312c7365636c6163656c2c646f6e745f6d6561737572652c6b"]) 11:01:56 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 506.583605][T17328] hfs: unable to parse mount options 11:01:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20040000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6b305de8e6607ad14328ae2c0d9348f28600721cb418d730e11f87dc1e5cc698d1f1565571d7b1412a6224e3080722ac77163845f2f404deabbd0b022d75d81fab03e05813c6b36c0e061971c4fe0fbadf75df07eb2c4629c1a3db94000cf92acd5cbafc5944be9a13f797d76fe163987867b7e6d4ce60773d353ca3f3c8509608a0769ed534cb1b537faaee5ae10800d822eb2ae551beaba50226500bd6c2cc408e953ddfc9c858904fc678"]) [ 506.660407][T17328] hfs: unable to parse mount options 11:01:56 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000001c0)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x6688bf6a21ac7680, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner'}}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}, {@dont_measure='dont_measure'}]}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 11:01:56 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x121000, 0x1}, 0x18) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)={0x6, 0x1000, [{0x2, 0x0, 0x48f}, {0x8, 0x0, 0x4}, {0x20, 0x0, 0x384980000000}, {0xc0, 0x0, 0x1f}, {0xfff}, {0x2, 0x0, 0x100000000}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) [ 506.902918][T17347] IPVS: ftp: loaded support on port[0] = 21 [ 506.974194][T17347] lo speed is unknown, defaulting to 1000 11:01:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266d0646e6f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',k']) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000340)={0x0, 0x1, "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"}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) getpeername$ax25(r3, &(0x7f00000002c0)={{0x3, @netrom}, [@default, @netrom, @remote, @default, @rose, @netrom, @null, @null]}, &(0x7f0000000080)=0x48) 11:01:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x440) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r3, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r3, 0x81, 0x3, 0x9, 0x1, 0x4}, 0x14) [ 507.337333][T17358] 9pnet: Insufficient options for proto=fd 11:01:57 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x61010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 507.424340][T17361] 9pnet: Insufficient options for proto=fd 11:01:57 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, r1, r1) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:01:57 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x1015, 0x1, 0xfe, "0c68d077b5851560e5ddac7c93dfd0c9", "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"}, 0x1015, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000480)=[{&(0x7f0000001540)=""/151, 0x97}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r7, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0x990000, 0x6, 0x101, r7, 0x0, &(0x7f00000003c0)={0x990a6c, 0x1, [], @p_u16=&(0x7f0000000380)=0x1}}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f0000000440)=0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000280)={0x39b64f2d, 0x84, "900f27b5a1ffe075ee9b7b6e1d0174ab78e146dd197fae47d2e40ca8211e2e5930cabed551d9ad145bea8145430c578e82b8c100954d116f055a26c71550933159c9a2b5dd44f01fefd16db0a2f18ecbd2d32fd3f728489f1c0576e68908a4c31d6949ad26703b955c8db0937eecbb2e598cbeeef9fae1f5f01136b36ba926e090905248"}) 11:01:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000140)={0x2d, 0x1}) getpeername$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) 11:01:58 executing program 0: umount2(&(0x7f0000000100)='./file0\x00', 0x9) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c726616166f3d", @ANYRESHEX=r0, @ANYBLOB="2c7f66646e6f12223ff80558de3d0000000000000000", @ANYRESHEX=r1, @ANYBLOB=',k']) [ 508.267624][T17398] IPVS: ftp: loaded support on port[0] = 21 [ 508.343749][T17398] lo speed is unknown, defaulting to 1000 [ 508.556471][T17405] 9pnet: Insufficient options for proto=fd [ 508.666913][T17411] 9pnet: Insufficient options for proto=fd 11:01:58 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:58 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:59 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6424000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x2, 0x1, [0x8, 0x4, 0xfffffffb, 0x0, 0x8, 0x1c000, 0xffff7fff, 0x382c]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x200000f0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 11:01:59 executing program 4: socket$netlink(0x10, 0x3, 0xb) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, 0x0, r2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='$*,[[.)\x00') 11:01:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:01:59 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:01:59 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 509.867482][ T48] tipc: TX() has been purged, node left! 11:02:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ftruncate(r0, 0x100000000) sendfile(r2, r0, 0x0, 0x9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) 11:02:00 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:02:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@audit='audit'}], 0x6b}}) [ 510.007152][ T48] tipc: TX() has been purged, node left! 11:02:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x3800) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd,rfdn?\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',k']) 11:02:00 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:00 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x3, 0x7fff}}) 11:02:00 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5139eacce6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:01 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:01 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:02 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="284abc79bdbc288947780a745ef11c918dc87643e27ef4f8d9468b25d66cb04c0684931aaa7600ba3cda8c00009defd6d75c10af05dd012a223158bd5bf0fa9d0976eab580bec48b71f70989958d37988f0f7b99f1d2aa22eed116f46e15218a9ca045d97d4970ee71429e128a92b812a363", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="840000002c00270d4bba73884139840000dbf6c6abb5000000", @ANYRES32=r2, @ANYBLOB="0000000000000000080000000a00010072737670360000005400020014000300fc01000000000000000000000000000020000400000000000000000000000000000000000000000000000000000000001400020000000000000000000000ffff000000000800010000000000"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', r2}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r7}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r8, 0x5) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x9d0000, 0x7fff, 0x4, r8, 0x0, &(0x7f00000001c0)={0x70a3f, 0x7fff, [], @p_u32=&(0x7f0000000180)=0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x18, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x5f}, @jmp={0x5, 0x0, 0x9, 0x5, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1e00, 0x7, [], r3, 0x8, r4, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x9, 0x7, 0x80}, 0x10, r7, r9}, 0x78) 11:02:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ftruncate(r0, 0x100000000) sendfile(r2, r0, 0x0, 0x9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) 11:02:03 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) sendmsg$nl_netfilter(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000100)={0x108c, 0xc, 0x9, 0x401, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x2}, [@nested={0x1076, 0x53, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @u32=0x3}, @typed={0xd, 0x5d, 0x0, 0x0, @str='*\xd8^+{{}/\x00'}, @generic="b576701390e92f0e99690767c56b000c79dfae926f943b9f240720574001522f4a374a62655c3c988a72e4193f13cec4477dc9215b0667a226f35651dbf8d58501d1", @typed={0x4, 0x66}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}, @generic="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", @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x7ff}]}]}, 0x108c}, 0x1, 0x0, 0x0, 0x4}, 0xf152b9047994a777) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:02:03 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:03 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x4, 0x0, 0x5}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='Yn']) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r5, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, r6}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x10, &(0x7f0000000080)={&(0x7f0000000280)=""/165, 0xa5, r6}}, 0x10) [ 513.938433][T17553] 9pnet: Insufficient options for proto=fd [ 513.985785][T17557] 9pnet: Insufficient options for proto=fd 11:02:04 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:02:04 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getegid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, 0x0, r5) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r8, 0x0, r10) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) setresgid(r2, r1, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 11:02:04 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x84800) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='(k']) 11:02:04 executing program 4: dup(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 514.628514][T17582] 9pnet: Insufficient options for proto=fd 11:02:04 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x101}]}, 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000280)={'ah\x00'}, &(0x7f00000002c0)=0x1e) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, [], [{0x7fffffff, 0x3ff, 0x1c, 0x9, 0x7, 0x7}, {0x2, 0x40, 0x6, 0x40, 0x80000001, 0x100000001}], [[], []]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0xb64e, {{0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @broadcast}, 0x5}}}, 0x88) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x108) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000340)={0xffffffff, "135e22329083ccab9cbdb1eeacddf7fb47e2db9ca2f5a35dc6e2b3526a8a1e7e", 0x2, 0x7fff, 0x3, 0x1000000, 0x2010406, 0x2}) 11:02:05 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x80000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xaa700) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000280)={0x1000, 0x0, 'client0\x00', 0x1, "3555d0d4d6bb02f7", "f6737b6c1fdcee3fd75408044850ae9898b0f28b02607b8875d8ecf62d140def", 0x6, 0x6}) 11:02:05 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x5) r2 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xcb}, 0x5086a}, 0x0, 0x2000000, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='rdma.current\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000200)='[}j*\x00', &(0x7f0000000240)="56a5feaa1d25e5eb15aec5d4429b43403e08b8ed4b2e46883b02f4427cbf6de37a45545de649626013945e7f45011bbb9b96d6cd2d48b02749599402f37ec67c2460e0137c97232d9c9f50d34cb9507c0bc9067135d60aafb43c546c54b2fa88ef688aed40c28cace1957997702cc1d35008edcca9ecb55d882a5878707fcd9abebf6dd3e97784e1c35b425f3ce8cda2eaacfd0aae927ffa73392363cea5ea2e9f9be606f84238acb83bb6127564dc766d366ddb5ec466a75a8484d46ba4ac8e", 0xc0) [ 515.183290][T17606] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 11:02:05 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0xa0082, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vhci\x00'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}], 0x6b}}) 11:02:05 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x803e0000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:05 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5251639c05}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x2ff99b41}) flock(r2, 0x5) write$P9_RCREATE(r2, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0xc5, 0x4}, 0x3}}, 0x18) flock(r1, 0x5) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3ddd2811915050d2465c3cc55745bfb946a7d7114ab266bc0d2b97322fbba005eb9421c0667c2db49188bd3b10c5a414dfa8b60dfc216bcbbe849e35f5de06ca1c585e4c09a7e4a89bfa97e9497b9c44385392e69874db800ff9a77e9920815b187145d979c27f84514368a94cb9582ede28499cf4bbdf3d531e1ba8856acb018d4ce72f8acc10ce508b657ce7da964c466a373f5fb58bcf7d24f569", @ANYRESHEX, @ANYBLOB=',k']) 11:02:06 executing program 2: r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1281000000ffffff2f1940e7b5ef4340781987ff33334000000000010902eb09b256832400010800000033f3d1000000090400000103eec800092100008013220100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x30c4e7581acd5a8c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40000eff84ff26f3f4e887d404849add005b5d6b1953a28bf4a8ab69505eed3ac918e9d4a514d2456b66340d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") r1 = gettid() ptrace$setopts(0x4200, r1, 0x10038e, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) pidfd_open(r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0xa01) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self\x00', 0x20000, 0x0) fsync(r3) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000a1420002dbd7000fcdbdf2508000300010000000800350001000000"], 0x20}, 0x1, 0x0, 0x0, 0x22044804}, 0x20000005) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, r4) syz_usb_disconnect(0xffffffffffffffff) [ 515.944319][T17606] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 11:02:06 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd0070000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10, 0x80000) 11:02:06 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:06 executing program 0: pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0xa00000, 0x8, 0x0, r2, 0x0, &(0x7f0000000140)={0x9b090c, 0x3, [], @p_u8=&(0x7f0000000100)=0x67}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 11:02:06 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r4, 0x5) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) flock(0xffffffffffffffff, 0x5) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0xd, r6, 0x7, r5}, 0x10) unshare(0x2a000400) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080b29bd7000337c89b8e3e997010500010001000000050001000000000014000300ff0200000000000000000000000000016550107ad4682d08000500ffffffff14000200fc00000000000000000000000000000108000500e00000011a41a77e5d5bc5c70a6e713f3b917a7a8d514668b3825df120453c4d33d04409044c0b4a563628bbce1c00fada6907b939b318e95158cb81a59b7bc79f0eda8c5117a321697c"], 0x5c}, 0x1, 0x0, 0x0, 0x4040850}, 0x80d4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 11:02:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000021002551071c0165ff00fc020a000020", 0x14) close(r2) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x20000000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x884, 0x0, 0x21, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IE={0x849, 0x2a, "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"}]}, 0x884}, 0x1, 0x0, 0x0, 0x40}, 0x20088000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x10000017e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000b40)='./file0\x00', 0x3306219f, 0x4, &(0x7f0000000d40)=[{&(0x7f0000000b80)="e03cfe0ee32de4ff04dd1a72ef28f89bdcf224145e2c611b66c1a838efb617080c24137735f039a859a5d04753c6ff46c02f8e1b595d", 0x36, 0x2}, {&(0x7f0000000bc0)="c41a27f2fed071214a3595f77a", 0xd, 0x5}, {&(0x7f0000000c00)="74996d93c97fca", 0x7, 0x100}, {&(0x7f0000000c40)="1e1f1fcfd7db29b7168253de83f63eb8a255645b88beda856a0a991a32f06e36fa7ae02b74e8299a83e15cf84bf7b0c3bcfd1bff35924988e041df180c90839ea57cfc5bbdd93983a4fec08b4415d424ffe59c9ec65185b11e5156b724dc100834d6da9fe305fce62813f6c8ff76b3b13b7d0f2d9fcd9f94ca6ddf657e1dc1491131711ede08d66ff9ac61b2c6010252873ecec1d4df473c0b5d280a420c82262a7d4e2da56d02c47abe4b161b009d910172c799598db86ba5666fccef7e5b09a939c653dd7d1ddcadb25a47f89de372", 0xd0, 0x4}], 0x3000, &(0x7f0000000dc0)={[{@nouser_xattr='nouser_xattr'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/}'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_type={'subj_type', 0x3d, 'rsvp6\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#+'}}]}) splice(r0, 0x0, r2, 0x0, 0x84ff60, 0x0) 11:02:06 executing program 4: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ffe00}, 0x0, [0x4, 0x9, 0x916, 0x80000000, 0x7fffffff, 0x6, 0x20, 0x80]}, 0x5c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x6, 0x4) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000000000000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000a00010072737670360000005400020014000300fc010000000000000000000000000000200004000000000000bb00000000000000000000000000000000070000000000fbffffff0000000000000000000000ffff0000000000000000000000004a3539ae58cd682baa608e0000c7d49a0f43933fd8b924d9532773e36c0c69731b43ba5406"], 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x20, 0x70bd2b, 0x25dfdbfb, {0xa, 0x78, 0x6, 0x36}}, 0x18}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000430000002bbd7000fedbdf250a000000040006800c0001006465766c696e6b000c000800ff0000cd0000000008000480020000000c0008548c000000000000000c00068008000800430000000800040005000000060001005c000000"], 0x60}}, 0x0) 11:02:06 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:06 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x80000001, 0x599}]}, 0xc, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r3) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xb9}, {0x7fff, 0x80000001}], r3}, 0x18, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2b6bc18c47854b63539ca1f3c58641d45bb18936e48adab0b73d86e7f0ae2110e4c4"]) [ 516.815854][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:02:07 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) [ 517.056345][T18186] 9pnet: Insufficient options for proto=fd 11:02:07 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:07 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x402) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) [ 517.292075][ T2432] block nbd4: Attempted send on invalid socket [ 517.299222][ T2432] print_req_error: 14 callbacks suppressed [ 517.299252][ T2432] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.340660][ T2432] block nbd4: Attempted send on invalid socket [ 517.346947][ T2432] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 11:02:07 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}], [], 0x6b}}) 11:02:07 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x101, 0x20080) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "d4094c23c96455b8ce948d95161eaefd"}, 0x11, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mkdir(&(0x7f0000000200)='./file0\x00', 0x1) flock(r0, 0x5) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000540), 0x24, 0x0) 11:02:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x301000, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xac32, @private2={0xfc, 0x2, [], 0x1}, 0x7fffffff}, 0x1c) 11:02:07 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:07 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0xc2) rmdir(&(0x7f0000000040)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xa0, 0xb6, 0x5, 0x24, 0x0, 0x3f, 0x81c89, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x661, 0x2, 0x7, 0x800, 0x0, 0x5}, r1, 0xf, r2, 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r6) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r8) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x20, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@fowner_lt={'fowner<', r8}}, {@fowner_gt={'fowner>', r6}}, {@fsname={'fsname', 0x3d, ',\x86'}}], 0x6b}}) 11:02:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xd) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'caif0\x00'}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000040)={0x9, 0x80}) dup(0xffffffffffffffff) [ 517.973886][ T2431] block nbd4: Attempted send on invalid socket [ 517.980231][ T2431] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 518.021282][ T2432] block nbd4: Attempted send on invalid socket [ 518.028072][ T2432] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 518.078851][T18220] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 11:02:08 executing program 4: syz_usb_connect(0x0, 0x34, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xfb, 0xd2, 0xab, 0x40, 0x5a9, 0x264a, 0xe0de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_control={{}, [@extension_unit={0x7}]}]}}]}}]}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 11:02:08 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180e00000000000000000000c0f2ffff72000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 11:02:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="dbfd660fc987b73d6664d8badfec", @ANYRESHEX=r0, @ANYBLOB="2c77010000003d", @ANYRESHEX=r1, @ANYBLOB=',k']) 11:02:08 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_gt={'fowner>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}], 0x6b}}) 11:02:08 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xd) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'caif0\x00'}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000040)={0x9, 0x80}) dup(0xffffffffffffffff) 11:02:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699020000000500150007008178a8001600140001c00200001203ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 518.655052][ T17] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 518.694450][T18261] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 518.722715][T18261] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.811801][T18266] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 518.842048][T18266] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. 11:02:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x40, 0x0, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffeae) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) [ 519.025239][ T17] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config 11:02:09 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/66, 0x42) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000005e80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1410, 0x820, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x48085}, 0x20000015) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) [ 519.235155][ T17] usb 5-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e0.de [ 519.254503][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.312048][ T17] usb 5-1: Product: syz [ 519.329884][ T17] usb 5-1: Manufacturer: syz [ 519.343984][ T17] usb 5-1: SerialNumber: syz [ 519.359867][ T17] usb 5-1: config 0 descriptor?? 11:02:09 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x80000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 519.622454][ T17] usb 5-1: USB disconnect, device number 8 [ 519.654906][ T2650] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 520.025161][ T2650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.052273][ T2650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.071326][ T2650] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.084658][ T2650] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 520.093937][ T2650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.104332][ T2650] usb 4-1: config 0 descriptor?? [ 520.404569][ T8113] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 520.589138][ T2650] uclogic 0003:2179:0053.0007: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0 [ 520.776264][ T8113] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 520.788728][ T9231] usb 4-1: USB disconnect, device number 34 [ 520.944524][ T8113] usb 5-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e0.de [ 520.953603][ T8113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.966428][ T8113] usb 5-1: Product: syz [ 520.970611][ T8113] usb 5-1: Manufacturer: syz [ 520.977224][ T8113] usb 5-1: SerialNumber: syz [ 520.990432][ T8113] usb 5-1: config 0 descriptor?? 11:02:11 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESOCT=r3, @ANYRES32=r4]) 11:02:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x3, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "76a3ca0b06defba5", "03326e726e88b02abf40e2c6d84125cb", "f23f0325", "79c3534e15d1d7ed"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 11:02:11 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x803e0000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:11 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xbbed, @private0, 0x1}, {0xa, 0x4e23, 0x8, @private2, 0x80000001}, 0xfff7, [0x8e99b13e, 0x1, 0x859, 0x7, 0x9, 0x125, 0x5, 0x3f]}, 0x5c) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[], 0x0) [ 521.239787][ T8113] usb 5-1: USB disconnect, device number 9 11:02:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7706000000bf26f7be524b844930c366f8de9cbf5a4afadb356c828435b85a5fad67638bf8207772c81aef9dd6486bed50a94032e95e91f3243fc88d228de2180c24b6d983929dcfccd3d2dd09d50ad12ba47b4776b280a49a7efee4bb3a0d4dfde416ce9344974e1b1b2c96c898a1b15e5d2e85bd016a8b0e2e5a2bb10f1b470c", @ANYRESHEX=r1, @ANYBLOB=',k']) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r3, 0x101, 0x30, 0x8, 0xffe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r3, 0x4) 11:02:11 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x533800, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x20b, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x161002, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000f04000000000000070000000000000033821c5611bdeb7182c1b06a50c05bfe1ca8ac76"]) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1000000c8) flock(0xffffffffffffffff, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r7, 0x5) io_submit(0x0, 0x8, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x81, r4, &(0x7f0000000240)="bb329206df0d4e224c509ff9cdc095573e3ad13d39461c7d1077d92ad1d6c40788d5c90e5ca558bc475d80c9d45663b0dba18820a9fa29473acbd1211a5197d73372e4333698869c87a32da3cbf0f8fc77288a523a5c896854cb2f11076b79cb9ed61ff9d6667a34670598a3fb7a273328f70297747969f031409c13331479eb6b23646cfbf5bb212a0be4627f1a482cbea01a7e9850f168f119a1c3", 0x9c, 0x8, 0x0, 0x0, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="a93faa7d6a2052e3b70a08860d29b55badaf3eff49a710304a72f9aec2c9d6f4f44c44032748e8f44a11304a9b66c5b4f3af76fca8a192b0e6c3256bd19d5a3d86dae77dbdce7fd5eb5a403f7ebdfc2569e977cbcaef7ed37533f6de7ea4d3cbf135a381a17c2dbc3dce81d9b495636f6c57ed3ebe3d1a2cf6e6a7e0d2172899b95c512b07c8d74060a555d1291b98c6305c85308d039782", 0x98, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000440)="91522f27b96415cecf247fe96aefb0f9bb4149c6f58365dbe76244c5a4d0668651f6bb51dcf15de6fb97e19daaa7ae094319d5608cacc6ed20588ee1c1c3458393fda15a3b531d0fe6b7a8bf3a22ff6e3c3712e65b0d3c9628fe6991b39e0c4f1f641b0277c0ef2e3626f0bfa5771891ecb4514ec2a2f3e521760ae142c01776e3155cb338b8225f1c896adfe7b62a2282a4e9f7b6cef5c6f088f6ffe37924027ad84c2a028b7d14dccded54353437ac80d2f6c3e74c3990198ff29a665adc5b5ef869510b45a21e91d8d704e8cbe26929a278439e09b1e0", 0xd8, 0xffff, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="3358a5646d91af3ddf223e36bf3b2b7b537af7012123eddc61f9ca216648509380a9f2310c2d1ea9c7affe35c07a956522ddb2db80c9d614be9599f73f86b87f304112dbcf873372fce93e9ab2fcda7c05e1ffd82485974d41d3544f7e9781fd1d90ec33ff41f6da42e9bb5e2b1494e0972704b623b6da2d7f354e10fb667579b63b2dad1932463ef8ce9500f4bceb00c0690bc77e2db25b2354a0c61cdbeaf9b315dcea2467ce6069cbb96a0a2d60bfcdda5e", 0xb3, 0x7, 0x0, 0x2, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f0000000780)="82d7a17895d69e53b91dd671e01e004d16432ce8402649966a38a3d76de390a50b49aef2239e264aefd6d0362c2fc38e507a92d0d1ceb5bb3ff69a2a8d50283540bd5bb2a4b57ac18fe45b51f3a922db4bee0cdcd0d8ce113b90617ac0b55428a3944ee84d63273c9f89b828fd285b17c698b309ff6d6c95cb90662c42e2bd8312ea6848e19ac451a970d0f5841123602a815e8859a1d3dc65434e77d0472ddb3ac44604021898aadcba44a26039c8bc8d041136777ee06b7564d1b52e4190a11ee33652c296725abf2ee4a963a5a87c07afb40908bdd6254ddb051fc5059412", 0xe0, 0x8, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f00000006c0)="8cc3d47e3a192a6f200fe272e287d297aabbe8339cf45f", 0x17, 0x7, 0x0, 0xf5dd441138141eeb, r5}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0xe6ee, r6, &(0x7f0000000900)="6b31e28f0707d205af327971fffe24685c617792e26dfe0eb2c06c71e3c99d0ec14aa5a9324ef69656f7f537422e7cba4ac9de0bea26eb1bdd67aebc39a31a2eb0c9e8e29d", 0x45, 0x2, 0x0, 0x2, r7}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000009c0)="5bd3478d2759ba8ce08b2ba43587494ec5ce83ca8ee61d1481d3cc06b8bf487c3bd76fa1883bc108f3d90af94bfcfef000d39795eb5fd9507a2dcc337c9376e82691d44e336790d7899343e54be3bac6e482ecfd3c8cd4ab050c85497ac4807e2eb8f3b65cdb91536a91e0ec04737f734c31195ca0da086f1f", 0x79, 0x8483, 0x0, 0x1, r0}]) sendfile(r2, r2, 0x0, 0x24000000) [ 521.487544][T18358] 9pnet: Insufficient options for proto=fd [ 521.515268][T18358] 9pnet: Insufficient options for proto=fd 11:02:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7415000000400000006f3d", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',k']) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x3}, 0x8) [ 521.574355][ T9231] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 521.583235][T18362] QAT: Invalid ioctl 11:02:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x468, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:02:11 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6ff4566b0c1763ef7d3d1d79e7"]) [ 521.975205][ T9231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.004271][ T9231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.017761][ T9231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.032239][ T9231] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 522.047553][ T9231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.068267][ T9231] usb 4-1: config 0 descriptor?? 11:02:12 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4ba201) accept4$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x800) unshare(0x40000000) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="67834f57f40086ea8460899ae9bd5777ba", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 11:02:12 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:12 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xd0070000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4838000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001440)={0x2400, {"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", 0x1000}}, 0x1006) 11:02:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=k\x00,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',k']) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x28c02, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r4) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x1010010, &(0x7f0000000640)={[{@huge_within_size={'huge=within_size', 0x3d, '#^&.!'}}, {@huge_within_size={'huge=within_size'}}, {@huge_advise={'huge=advise', 0x3d, 'port'}}], [{@smackfsdef={'smackfsdef', 0x3d, '127.0.0.1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6a12}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=rdma,'}}, {@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x110c, 0x16, 0x10, 0x70bd2a, 0x25dfdbff, {0x1b}, [@generic="8a81e7c523869fc0dae29f91da5d8575d3c87d", @nested={0x108a, 0x18, 0x0, 0x1, [@generic="14558ed9e17eb1f9b72048b58c9cf411387cb8aacecb162437638f3eb150f5119f8bce6c56cef050912eb62bd6a057a7cb4193948f5b9157e7cf758eabdbdebe14c3a7c092f5747ef04cf44a1591d1de8d70d702df3d0a5a85804ed9dfc7895525105933a30c3c11c322a0c2be67572b5748a2eba66d3e9888f7ae2d18fe4d5a69bc29ed6a1f533d9fd81b431c1544493874f0b2e5a08e37715fcda20761395c998e77d34af879964eda4c515204e0ee7b7e0bb0a58db0e574f7b3c5b207fa6e717ae79fed1d6736a437f996a6cd10532f7ce2228056ffa362450469fb855a98d4fe71eb066ef28fd786e4ce6e0a406459808b828686e5e5b6cc8dcccaa37635e1b82f96f57da81bcf0a6a3506c15fff52cc0ae08a73f4c6547a91ade1f59fb50d55aee25007d7c9edf87aae032851bf1f8b35a004921701063b4efaedfdd5f5400fe4c6910d30d5ffe4e4370c1726bdbfa1d1341579da6d86a92983a1e69c2c131856dcdd6a49a0b7cfba25f9f98b83ef15b72d526e1c84cd0a08b8e5a11befa7e8e297a366a3e070fdca4112386183d4dab395d5aedaa6a1994e32d6ddc8d90058b3c208452cba01b7091b68126985ecdc52be79d6a8a8482e2ad2901a0b40be962189f399e31bf18c5aa243ef247356c8ab26bb527ff4daa2ba1b8259802568196865ef23a2bdd4a7aa0e7d7986ba96f2f448884090f007076aa0fd8e5144be91f9cdab81981a8b47864b7269ae3970194370a405ad46e6edff77151279f56e1fde631c15cba318f2d862d4bcff3b9d28e3fb1c50a14084d53175506eb755d3a90d1c652719b7c2e01eed8bc85a5a6b14d86154997432cc53d4e017a2fe3a134e7bb3b3c672918dce5eb52096f7d5a9ccc225a8f38f8104460e6c76ee0a2b0fbe820efb43beadb28336df593d48e7313a7d71f235be8bb0e58b761cf1f676477c9a468a4a2ccaf395e463c3a8bc554ad85b92ff129fb13b5090e9e2f1688f95460ff5cab6e76bcae8f0e839e84663886081c8f732326c12a0b972a1904a8d2f7fb616460e901eccf5e5d631c7a2b89959cb4e057e5b131ca14ab26fb7d51f490dc53e4102d7dfcb5358bda4de7dcdc2c9429e5a5b670d113f0d39536cd81fb357b9318d0b3b527ee083a5452666a87150425fb91bb92de91c5bd4e82f55d4390e13e96a0fe078c668a49f7f91d210d65e2b94a24a0dcf834fade99002fd3b139aabcedffcb4443d3689dba177a250071e2e0526a78dc60c1f7b3fabbf4b052a57ae132d80bd7d797ef41194c7ae2ab7455e86a01245c4e9007e24dc2f3389f716010f7e220abd6f941d988d43aeb61819b1b0bf64b8b2731c19864a60d4cf6ea0b438fd49b35681f5758ae26e7557a44d736263e63ab476d3a1d68955d7ee4b6bf7252e9b12a269dce1ccaa03141f67e3148cc520b531b81a28bcb4f9a0a3114c1bd39331385cca26bcb2c4d93cc2fb9bcb3f14eaaa1f0df525e9d7af1f3b64e45336383e7758996ce1502977e02ee85f7e75840c0015f438fb06fec54ccec1dab532835bd98dd5942bd94d6ee9ebc62e579c2afbffe7803008a12dd1d590a2d02bd7153b659916099b20523f3b6e55560a50d38c439a313cae9fed1b6c106fe6814b1bf24ba5b8e58250fcabfae92e0d52cb64cec04152aaf445804b1d81d3c461c4adbac907a508ee0aec37899e9dcf7755a8f355d6114475343a8b7ec10493cc647731f64581d2d2391c41357d9b31c65d2b8ccab79d8f61eb78ec998515265b6ea52294ed38acb3fa13d13d0929c9ddea5bed26c288f453febda17a5b9c02299fd7f1eaa9c79c7eeb64704fea7c6ddf1be533e373ad5b0f9fa42c68d2080b9096f5fc557408fedd5fd11e13a89be5ac4a686aaa89f952de83e1740510ae9f75c484142bcd0bda0f2ccda17ee5278d28bab0de6ff62e20469a90228e32f98c6d999e01dacb3ad9edac80aa9f985ae56f86327d4977d82443ee8d2a5eeec60e87975c0edec17ab5e2f3c654c3de60b2453a67d41f35c214b96a7f518034f842f7bdda444786a9f64a73d6525bf4dffe58040eba894d5753f17e0cea729d38499d56525c38920d9b2016acdddb85df3399f20b04f70265fc117ef967475fd54944f3dde909443692a0f6b3261650ca74acfc81ebe67eeeb6d18f29465a341f2ad85c0d65ab9656a58de1416b5892744db3e8048fa45ec5e122c84b3840bd8b30a5dd649989646922e5f10d1a840c1f7c6df47c2fb1cb48a9d466b5a90c5f13920bdbe57a0d1366da1f8986f5936cf4c32c3ae53946e3e73396c3266d4590324261bbece93b3a1cebd30a73cde589cdc5cb82834820e7c060c2c55c9fe5037cae1ba7c5aad6e2e3ba746c666d59474d45830ba45c24d3fa76bbe1b8122285b816e4c8964062f5c9edee06d8693d46634fde21b8d92bc7b6b1987745ace3fec40bd66e407453a057f27344bd4858c7f3429971e395f669cfbb3a0e3118ed4b6c617fb5e457aab0e8e74d0d29f451756c2714a9c19d2a5cef2ad72041d0a8ea152c385ab64bf28c86dcc1bdc6b3e4f803977f8050623cbcdbccdac76cbf2d5d2640b12a1afbd52530981a3f0a80b6dbee518dd1692f5027f3ca0e5edea79f9a337beb1216111de978fba4e838f2b23528f17d66c80c3c9508b9d8dc2a0051306f1d62032ccfe20e80661ffb347558c1fd115e46eecf5ce8962c8a7737dca0ee955e5cc07ed9bd28e69dc093e36f4881e928f983126f33cf35c23d56e06b7d08e6c30a0720d02930ae09a2898337f74912e0d094a70636911610887f29669b36d3d0e97c2392a566a0a35e1822e5443ee3339209ec89eb2cc59ae1006f1c371ed67bdaf67fc257711fb2ae0062f5f64efeb19be68a048d6cc5a152cd5fa92949b864e4efed0823d352399eae739dc487e96e314715409849df775acda839501c42a1eed1dd88f54a57fbe386a448450d90c033bd2f12fe3a22411614a751df8b2533446bba737486b994c1c185f5f8690ee0776cfdfd8f0ba0498bce2f9326d260014d8acc73a3933a959a1a478393c57e22066792d12da8efa22f6a347433e3f2a2eec3e07833c50b7b1e9791bce9c06a0252d9f02fa405d1bb04753cefce5b13f404defe1f839aa9544bc44b74d871cb12feef4167b3116345cdc9f7c8c72a8c739cbc7de240537ce91afc4c0ef069fc9e526dc5437a65c76368bab807e8c1edfedb57b3c26ccee63a06476dc86485635a877f52a39551e7db936712847aae64e27a3227ecfa575ab3a72a369cf08c9996859dc919d0da85eab1e35b579b8993bfdd71bb69e1f03c53bc18160001445fdc12d267d3f2c505920a159e9294b16e10751815d9c2e622704f4008f8c74cb33adc0608e5cf63b091b502922ddf0d96473b2eb8f08915e761075282138b2a6adf819ded08307e60145d07da74e0ba062f4d216268f75e410ae139ebea502134807458f230a0279019dafd3f31561c3b551568ea0d191d0176a43d67ef25f74c915acceb3bb48b54823176c49ca4478f2e162bbe247533788340013e4f8ac43beaba8b8bdacad780066152d8edfc85c7585fd146836c600387f74c2a0089d1e9e682edc7e791a2902490e7b2ebd14b486d62a74f7cd3435b8a64179f0ace8d8f357721385d7d1067e232d091d1d2c35c8313a82f6e7f717ee303d3c89f967fbd26c8c9fba795a68a1d532b354d1fd8bf39d29294be451177b4926c0a95e092630af6ff1da2468787743daeea32417fb09829ca0e2cb9229c4e4029a057b5c97cc78f506f513a698d422fb08bd230cecc58b15f26e252877a439b02501f82717a3aed7c3360a319a0581e888bca76765579eb2fcc66b759bc51db5ff2379a65fdb3c112657918ba678c44d3d08ec285f89a1b263f8ecfef21ef9d78f95862226a9695a9fdeccd64d6a7ed747671337c672aad9a03bfa0d6529f9df30ec1ad668719314f01eb883d1c08fd333cf95c9dc6eec5800c4a813bf7dbe8db5b8a5d9d5d475ca30f028d378829535ce066345b012bf1f50479b1f9fa81df7fdf823bcf62aff0d9eca9d347d4e79ebcdbb160837e987d7b8b67757ce09164c1f499d2823247b8243529102cec0b1ca5f185444475dd3c1deb18f9a03b2e9f734adbbedb163635f2e3df073f0c4d329b813ce049885a384bb9504176bc495b46b08d1790aadf2a193218a8581984583a94e5d1f081f0530256f646c68af098278152172ab1327ff3149cca68eb72546d8dd24530ac39e17903ef8f001b6fdec6e75cb92c657a38082f6f0c2f047ef777edd9136852b7b7f811f44b0e6fb8e0d85fc79368fcdb83a0cba4e631ef2d9cdc2464dee8bc9c821c5d1a098ab4c045642361f0a92e20bab0bcc1d6d6be2852ad7800d2eccb74721bc8843605bac92a91ab6a2b7046bcb67dd0ce5032ff5bd4b86cdc080228c180375c580ad7cfcb33c8bd64834a6a018544621d0a05a0717916adc5e41bf094ef08a0096d6cb65122bbafc012d379edff747b692960836eff31451d9f1a5e29df6561635085231021fb3a18bc9d6f502333f24ff7cc9310749093d065d7ca7c71bfd77829200dacf062cf757834fb77ef70a59c7ecd3ac79e8359c3d2c8c3dbfc8e20cdbe66b62b9bf5c5429bc2f83b8951ca3d591c424b1f6a99182a858517d95eeb82f787729f8047976f4a8da34034ea58b40eeb678e416ba3d63de9e1e70b4f0782fda383cb8c8f14bfc9dc9b7dafe89576d47016f89315f3e5e7e9434946f93f8bb0f7c55ba14b05da233c83611d6f0895e90caca83ea103dfe6929af456ba3d70a4a3d19d4ee2791942901c5a108123e59626dfccff6fc2190149382f82928fe45801e1884dd5a10a6242624d38fe0a2e41f69509ad0222e41b14ff6be203ee2c6223e262eedfb380ed01ca4e03cc0f34aa256cc1cdfcad9b9b3a36ecccaf9b67cbd85df8d2692a6652971e83a1a7e8e8a4162b2951e2e714b9ed123795db899f3db9fcda3ae95e179ee8fff9cee06d270ccbb4e9c61d32a68b241c308643a20cb416659e91cff8b1a8d464b0300c7693da110bcad9152d6860cb7ef6438ae09e7a98dbffb5c2bebb00ee1b60db1fecd1eae915d738196159f076157df7b3d82476f0dff5bf7a71ac124c637b5175694bbab475bdd28e24184376f43a5a2e6454a458c58d819d689747e26e1e95225e23a294d06d7a73475802ff2d9f766d9b2c6f4ae7243122d1b2c32f69f2e03e5465ba172a3335c5d573f72eb6d56900824134fbc0c09b596d4d5462d0b5e9b2d23e5e627fb61b5abbbb8315c24a865f24190b79f0a08a8a6130e5063bbc312fcda66d6b49d70e7f2e0f81432c0d8b42b156555b674ee501a2fae833da12ac1045b200c027fc0b8007fd32fc12de5e2f43bead30dcd6e40135ee44fa754064789399d84726da2e249f5d887251d66f0884a0b3e8bdfc2da98aa59d5b436e67e8275e6cb55f7a830f859183c4ca18effbedab38a114b1cdfe5cfd1be8b19fcec2f13141b93bfe6058939b3298633cda3cf860d22d54f6056afe6fa6e6b62824b2e3723f0be606f92574a58028ca796e9ca55cc7255f5cfc8e3211349e7ddc870be4709c85437a392408b89b0678b0ec1fc9045c8072cb7f3ba0f9af7b90d34572966c4ee1a4fe619f3853e0ef562770262377e130ffcd999474fe4b9f70d3cba944ba40eb45f00f4ca4637a1e35bd4fc01326a74ff496acaf8a9151e390640c9670f24dea65155108e5be0ee79fbd159a3da8d6e32315dbbf00f5fffc4b16aa6d64eee319f1a9d3919cd1287a", @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @uid=r4}, @generic="6a8417ca03a72b6b4541e42a9175b7d4814accb10eabe0a622cee67dc7b965daf7804dbed0619d07b845f18c68cf9711ff21a9ec8e6f64908c217e5eb8c0e81c1dc41ae58bae3f6f3e17987568c44cb1b8f4831c275653d6e6038922758ac66549b2a14b2d1b8d181091", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x100000000}]}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@empty}, @generic="7d293bb24c41857ef7e711184c0dcc38b5ce8d", @typed={0xc, 0x80, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x7c}, @nested={0x18, 0x8, 0x0, 0x1, [@typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x110c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) 11:02:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, 0x0, r2) r3 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)="bb78c8c1ca36e2ed55e32b591c6fecb91e695fb96c1e7986a1bf824567926b6e8ef2a7a15d88737949af8d62aeb30b678f85b08ef307f4ccaa21be1d81da169559297d2325473128ada100c2fbe87420b6b783b3a0ad461f8a36e67226d2f11ea64b8bed19bf123d1e73805f54b4c0d73fec61b341963e8d09431f44a18f1d6ff1a1480e36c71bf607333a7d479e57d2c51c1c1b0fa740596a02b4008bc819f4e5f6600ac4c7daac326b2cfa95839e7f98fd818de4c4cbcf7479087b2ba77cded58e02d9806aa1d8438104476f699e36cdef6bcb9564eac14be59a491768ecc6014cfceecf31bdc57278c734702bb9d4e09d0af4", 0xf4, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) [ 522.424183][ T9231] usbhid 4-1:0.0: can't add hid device: -71 [ 522.429260][T18401] 9pnet: Could not find request transport: k [ 522.430394][ T9231] usbhid: probe of 4-1:0.0 failed with error -71 [ 522.459288][T18401] 9pnet: Could not find request transport: k [ 522.494433][ T9231] usb 4-1: USB disconnect, device number 35 [ 522.547368][T18409] IPVS: ftp: loaded support on port[0] = 21 [ 522.622490][T18409] lo speed is unknown, defaulting to 1000 11:02:12 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:02:13 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:13 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000f9bb7e682164f1c112307ca0780b76a2e7467148a15efe431951cd574369df01895890c9645c", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0xf4, 0x0, 0x10, 0x1, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) r5 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000000)={0x2, 0x70, 0x9, 0x8, 0x5, 0x3, 0x0, 0xd2, 0xd10a4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd0, 0x4, @perf_config_ext={0x5, 0x8001}, 0x4810, 0x6, 0x0, 0x0, 0x5, 0xa60, 0x2}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x58bb0100, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60144a02400c000200050a82c12d153e37090001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xf601}, 0x0) 11:02:13 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="d800000018008100e00f80ecdb4cb9040a5a65ef0b007c05e87c55a1bc000900b8000699030000000500150003008178a8001600030001400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642a3fa3a66e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) 11:02:13 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'erspan0\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x121000) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) [ 523.491408][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.548189][T18446] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 523.662263][T18449] 9pnet: Could not find request transport: fd*?£¦no=0x0000000000000003 [ 524.125783][T18445] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.134791][T18445] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 524.157582][T18446] device .0 entered promiscuous mode [ 524.172800][T18462] 9pnet: Could not find request transport: fd*?£¦no=0x0000000000000003 [ 524.395686][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 524.408312][T18422] IPVS: ftp: loaded support on port[0] = 21 [ 524.419620][T18442] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 524.471139][T18442] device .1 entered promiscuous mode [ 524.483977][T18422] lo speed is unknown, defaulting to 1000 11:02:14 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:14 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:14 executing program 4: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffff}, {&(0x7f0000000600)="e27eb0ba10660a7c529f72ae3b9a98d630a3959fef0f1fa5cced837354c8333e8a8bbe1bc4d3a311ef87a620fa37553de0", 0x31, 0x20}], 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="394a1f146de1970ffe547a1726072189f31b542d15ff284347f1eb66ee0d3b79f453cbbc1554ef06033a52cb96dc25684e011c382c1fa7afa92306918f2f29554e0dd0d4ed91f2e208f3d6c7daf78f2e2d5dc9073072a6adbb605cc8484915c9b757a429c2381993dd0101cd531e1601e1783f592193beb96b3e10ade772c17e406d1615464588", 0x87, 0x9}, {&(0x7f0000000200)="e3794bc35b7203b3fbd797c91a", 0xd, 0x4}, {&(0x7f0000000240)="069e2b54dc01fc53a6aefec4aadfc8ff40944199a0287e58cb41da7353ddfc36b4cb6549d56c451761311281c78b74f7b21a8134c94929c9d37d90a8083b14408bf5f056988f97492a6ec65864b783c4f130baddba6a78cb518ee08e0c4df28976f18d01329c8f725ddc57517d8473777bc6625421bff136dd858f9eb3574134cbaa85", 0x83, 0xfff}], 0x1020000, &(0x7f0000000380)={[{@part={'part', 0x3d, 0x7ff}}], [{@pcr={'pcr', 0x3d, 0x10}}, {@appraise_type='appraise_type=imasig'}]}) 11:02:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x141004) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:02:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="ba210066ed66b8010000000f01c1ba420066b80028000066ef3e660f6f9fa300ba4000b02eee0f323e660f3a0f58a9060f0b0f019ce712bad104b000ee", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1}}], 0x1, 0x0) 11:02:14 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={'caif0\x00', 0x5, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x105) 11:02:14 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',k']) [ 524.758905][T18523] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 524.768071][T18523] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 524.779636][T18523] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 524.792669][T18523] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 524.923669][ T48] tipc: TX() has been purged, node left! [ 524.948235][T18523] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 524.963639][T18523] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 11:02:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010463aee6000000000000000000a4e95c839ad5928af54fdff9a295e837c41cb19df391e5308a5e72e2fee008fd73baf7e359a0ef6c580f14ddc01645a4b70ed82e9ef3a5f77217178925c5253c206523eefe137d2e4d0ff6d1f22907e1d4208b31a238f53500c5d09eaf59069a75a851360f47719727c4bf3762c8", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b00000000000600270001000000"], 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 524.983630][T18523] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 525.025139][T18523] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 525.028593][T18541] 9pnet: Insufficient options for proto=fd 11:02:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in=@multicast1, 0x0, 0x3c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f00000001c0)={0x4, 0x2, 0x2}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r5}, 0x10) [ 525.181696][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 11:02:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5001000010000307ebff0006f2c6005334c6c38383d8040051899017bb00", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 11:02:15 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ad010000000000000000100000003000018006000400000000000600010002000000060002000000000014000300e0000001000000000000000100000000"], 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) [ 525.288170][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.348853][T18553] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.4'. [ 525.372223][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:02:15 executing program 3: io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x5) mq_timedsend(r1, &(0x7f00000002c0)="c7285b3415f21a99364fb84ec2501f6ca5f8d9c62a3ec13b34d5dc8d24cd74f152efea84e2a9d8b81558b14531a32d734c754dd108b7a86f9660ca09788de98a1a3a45188c4053e781b6f02179d0dbba71383f3e0796b7b794d942b5d9bdea7e614d955b56c94a5aa02cbf9c92078f06e67bfcaf09f7ca07b29a9a128924b0d295918a17855f391b86213ea13836be990ca3df76e67a55d53863ed93fec763fb157ed88804dcb1ca7402a56e898b6e7ec14c72625e0a1f256a87da5056e29925013b5f164f527e19943c5be162bf34175b8db27a1a6f18142ea0cc90b079547d036f6492edd3b58eb4", 0xe9, 0x4, &(0x7f0000000100)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/90, 0x5a}], 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, 0x20) sendto$phonet(r2, &(0x7f0000000140)="20b10b9d429e1ab05ea3f1aa1aaea48472e56c3b1538d2cf71304e85d2e367656dbd122a482e66fdc50238948dbf35850633c3f2f686d2834878ff2edc9c3f3617fc4a93220c659b3f9d3c8013a95ee9364c9e04866ddb098c731d32984dbc7c14d35808bddeded5cc0a4cd4653474987e3eddb835faff426ec1197ef4c7482dc701e991e9577adf975e9263ab7cf45167ce1c17faebe44124690f0c37bc9d32d7454f0bbe62c6c063f749172756219f8f77dfeee79baa73ea6bae88177fe42a1fcbe47cab8f63a04e662d5e8275371672dbdb7b8b22021aedadbee3eb898786473660f146d5b26ae3a53836c503d9b40e1bb6bd", 0xf4, 0x1, &(0x7f0000000280)={0x23, 0x1f, 0x3f, 0x1f}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x15) [ 525.413188][T18553] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.4'. [ 525.453817][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:02:15 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:15 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:15 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x0, 0x24, 0xee, {0xee, 0x59, "8aa870954541461cc68bb54759587648d3d043525b87397a4d77be23f1eb5b5975ed5c2791d5f1ed9c5df5b9a88af59668e10992d8d78dec0289b2b49617468c726bae3003185b855d966af2f7df8dffc02a74932bb24488f71116d8173a4f27a1fc80ceeca337a9507f0ed7d5a62d7f10ce80ccacfa0ee6a3bbb3f6e416898c0aacb4c5998c682e7d81754d9b48a47d976ed47e616b1bcd1f8e917d39296c14e0bddb0c0a500363fd9be4f3bd184604493cdf4429dbdb36de0ac00227f68a0930af407e812ffbe8fe04a85b7a35308fc5e55642ddc253c45595beb5e34b1be08d1bf8654c83a953df3f7bb0"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000100)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "5d3f533cb92fdb833d733f6f5bdd6468"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x401, 0xf00f, 0x5, [0x1fe000f, 0xffc0cf, 0xc03f]}, @ext_cap={0x7, 0x10, 0x2, 0x19, 0x4, 0xf, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "6457f991350bfe217f6d124441ee19d4"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0xe, 0x4, 0xcf, "a0c3b89f", "4d47f61e"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x40, 0x0, 0x74, 0x4, 0x7f}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x20, 0xd, 0xef, "c13b8644d8bdfeea9ae4a5476ca7cbeb313a0bae543e2aae98e956ee2ee5285bfa482a9993de4c7389450131c0352537c3a5068ad576c976a5c5412f27ea962704383d53bc69bd2f3015b7c31d069cf8da211c2e8fb0826993a72bd146586ee2fd258e0be742b4676b79a41fd547776e435afb382e41dc6b2e5409f0772c0970ece18740aaf49d13883c0f75ebf430e80c8bd4cf562e6484b88885ac945a12edbb68958b7164f1d241ae4449b0ca9934a4c56a16987d7cb6c2c850a5df0485219c759e69294a2ea7efb9593266eea908c0cde853ba9cb5e55adbfafbbbb7ce0ba9f6c8a7591b109c715c1a06f913a5"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xe3}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf00f]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xf7b2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0xb, 0x2, "5417"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="0809decd64e1"}, &(0x7f0000000780)={0x40, 0x19, 0x2, "db98"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x99}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x5}}) 11:02:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 11:02:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x5) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 11:02:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r1, 0x5) fcntl$setstatus(r1, 0x4, 0x2800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup(r3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) [ 525.842710][T18582] exfat: Unknown parameter '' [ 525.899332][T18596] exfat: Unknown parameter '' 11:02:16 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:16 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r2, 0x5) dup2(r0, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24004850, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r4, 0x5) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r5, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_team\x00', {0x7}, 0xfff8}) 11:02:16 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'bridge_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r3, 0x5) getsockname$packet(r3, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)=@mpls_newroute={0xf8, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1c, 0xb0, 0x80, 0x78, 0xfd, 0x4, 0x0, 0x0, 0x1500}, [@RTA_DST={0x8, 0x1, {0x7}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0xa92c, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0x3ff, 0xff, 0x6, r4}}, @RTA_VIA={0x14, 0x12, {0xb, "3bc0f57fcba249464e668a6e1f45"}}, @RTA_DST={0x8, 0x1, {0xf0, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0xffff8, 0x0, 0x1}, {0x214}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x3b2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2a0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x4}, {0x7}, {0x3, 0x0, 0x1}, {0x862}, {0x3, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x9}, {}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x80}, {0x5, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x3f}, {0x2, 0x0, 0x1}, {0xbe}, {0x6}, {0x8}, {0xfffff, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040004}, 0x24000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x24c20082, r8}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) [ 526.123456][ T8113] usb 1-1: new high-speed USB device number 15 using dummy_hcd 11:02:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x3, 0x3, 0x100}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 11:02:16 executing program 1: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 11:02:16 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r6, 0x5) dup(r6) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="0400000000000000"], 0x24}}, 0x0) 11:02:16 executing program 5: socket(0x1, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) flock(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 526.483541][ T8113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.533490][ T8113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.553441][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.591172][ T8113] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 526.619662][ T8113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.642753][ T8113] usb 1-1: config 0 descriptor?? [ 527.144863][ T8113] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 527.179613][ T8113] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input11 [ 527.357552][ T8113] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 528.534181][ T2650] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 528.712820][ T48] tipc: TX() has been purged, node left! [ 533.741819][ T2650] usb 1-1: device descriptor read/64, error -110 [ 534.081746][ T2650] usb 1-1: device descriptor read/64, error -32 [ 534.361750][ T2650] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 534.571591][ T2650] usb 1-1: device descriptor read/64, error -32 [ 534.901618][ T2650] usb 1-1: device descriptor read/64, error -32 [ 535.171526][ T2650] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 535.281574][ T2650] usb 1-1: device descriptor read/8, error -32 [ 535.491567][ T2650] usb 1-1: device descriptor read/8, error -32 [ 535.771378][ T2650] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 535.881433][ T2650] usb 1-1: device descriptor read/8, error -32 [ 536.091415][ T2650] usb 1-1: device descriptor read/8, error -32 [ 536.214275][ T8113] usb 1-1: USB disconnect, device number 15 [ 536.501194][ T8113] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 536.712916][ T8113] usb 1-1: device descriptor read/64, error -32 [ 537.051247][ T8113] usb 1-1: device descriptor read/64, error -32 [ 537.098130][T18576] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 537.109875][T18576] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 537.118302][T18576] CPU: 1 PID: 18576 Comm: syz-executor.0 Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 537.128195][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.138334][T18576] RIP: 0010:__queue_work+0x39a/0xff0 [ 537.143630][T18576] Code: 0a 9e 06 48 89 d8 48 c1 e8 03 80 3c 28 00 0f 85 f6 0b 00 00 48 8b 3b e8 e4 08 9e 06 eb 26 e8 bd f5 27 00 48 89 d8 48 c1 e8 03 <80> 3c 28 00 0f 85 ae 0b 00 00 4c 8b 2b e8 a4 f5 27 00 4c 89 ef e8 [ 537.163242][T18576] RSP: 0018:ffffc90004b87c78 EFLAGS: 00010046 [ 537.169315][T18576] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814b6ec8 [ 537.177289][T18576] RDX: ffff88805ec06180 RSI: ffffffff814bf443 RDI: 0000000000000005 [ 537.185260][T18576] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffff88804e12cb5f [ 537.193230][T18576] R10: 000000007fffffff R11: 0000000000000000 R12: ffff88804e12cb58 [ 537.201204][T18576] R13: 0000000000000000 R14: ffff8880a851e800 R15: 0000000000000040 [ 537.209185][T18576] FS: 00000000013a4940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 537.218106][T18576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.224669][T18576] CR2: 00007ff04bed0000 CR3: 000000009d89a000 CR4: 00000000001526e0 [ 537.232628][T18576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.240587][T18576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.248662][T18576] Call Trace: [ 537.251955][T18576] ? lockdep_hardirqs_off+0x66/0xa0 [ 537.257159][T18576] queue_work_on+0x18b/0x200 [ 537.261831][T18576] hci_adv_monitors_clear+0x150/0x1d0 [ 537.267191][T18576] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 537.273157][T18576] ? hci_add_adv_instance+0x7e0/0x7e0 [ 537.278517][T18576] ? lockdep_hardirqs_on+0x6a/0xe0 [ 537.283605][T18576] ? hci_adv_instances_clear+0x1ce/0x370 [ 537.289227][T18576] ? hci_smp_irks_clear+0x1d/0x1b0 [ 537.294416][T18576] ? vhci_close_dev+0x50/0x50 [ 537.299086][T18576] hci_unregister_dev+0x417/0xe20 [ 537.304089][T18576] ? fcntl_setlk+0xf60/0xf60 [ 537.308672][T18576] ? vhci_close_dev+0x50/0x50 [ 537.313334][T18576] vhci_release+0x70/0xe0 [ 537.317652][T18576] __fput+0x33c/0x880 [ 537.321614][T18576] task_work_run+0xdd/0x190 [ 537.326220][T18576] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 537.331933][T18576] do_syscall_64+0x6c/0xe0 [ 537.336338][T18576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.342217][T18576] RIP: 0033:0x416711 [ 537.346080][T18576] Code: Bad RIP value. [ 537.350118][T18576] RSP: 002b:00007fff0ef61380 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 537.358570][T18576] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000416711 [ 537.366652][T18576] RDX: 0000000000000000 RSI: 0000000000000e26 RDI: 0000000000000005 [ 537.374627][T18576] RBP: 0000000000000001 R08: 00000000f0d48e26 R09: 00000000f0d48e2a [ 537.382579][T18576] R10: 00007fff0ef61470 R11: 0000000000000293 R12: 0000000000792858 [ 537.390530][T18576] R13: 0000000000080cb6 R14: ffffffffffffffff R15: 000000000078bf0c [ 537.398506][T18576] Modules linked in: [ 537.402389][T18576] ---[ end trace b216a20be92a9e54 ]--- [ 537.407831][T18576] RIP: 0010:__queue_work+0x39a/0xff0 [ 537.413098][T18576] Code: 0a 9e 06 48 89 d8 48 c1 e8 03 80 3c 28 00 0f 85 f6 0b 00 00 48 8b 3b e8 e4 08 9e 06 eb 26 e8 bd f5 27 00 48 89 d8 48 c1 e8 03 <80> 3c 28 00 0f 85 ae 0b 00 00 4c 8b 2b e8 a4 f5 27 00 4c 89 ef e8 [ 537.432697][T18576] RSP: 0018:ffffc90004b87c78 EFLAGS: 00010046 [ 537.438753][T18576] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814b6ec8 [ 537.446703][T18576] RDX: ffff88805ec06180 RSI: ffffffff814bf443 RDI: 0000000000000005 [ 537.454654][T18576] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffff88804e12cb5f [ 537.462624][T18576] R10: 000000007fffffff R11: 0000000000000000 R12: ffff88804e12cb58 [ 537.470571][T18576] R13: 0000000000000000 R14: ffff8880a851e800 R15: 0000000000000040 [ 537.478546][T18576] FS: 00000000013a4940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 537.487451][T18576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.494013][T18576] CR2: 00007ff04bed0000 CR3: 000000009d89a000 CR4: 00000000001526e0 [ 537.501963][T18576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.509908][T18576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.517877][T18576] Kernel panic - not syncing: Fatal exception [ 537.525278][T18576] Kernel Offset: disabled [ 537.529598][T18576] Rebooting in 86400 seconds..