syzkaller login: [ 468.740264][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 468.791028][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 468.830431][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:34877' (ECDSA) to the list of known hosts. 1970/01/01 00:08:56 fuzzer started 1970/01/01 00:09:11 dialing manager at localhost:40819 [ 556.706026][ T2026] cgroup: Unknown subsys name 'net' [ 557.835075][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:09:17 syscalls: 2918 1970/01/01 00:09:17 code coverage: enabled 1970/01/01 00:09:17 comparison tracing: enabled 1970/01/01 00:09:17 extra coverage: enabled 1970/01/01 00:09:17 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:09:17 setuid sandbox: enabled 1970/01/01 00:09:17 namespace sandbox: enabled 1970/01/01 00:09:17 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:09:17 fault injection: enabled 1970/01/01 00:09:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:09:17 net packet injection: enabled 1970/01/01 00:09:17 net device setup: enabled 1970/01/01 00:09:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:09:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:09:17 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:09:17 USB emulation: enabled 1970/01/01 00:09:17 hci packet injection: /dev/vhci does not exist 1970/01/01 00:09:17 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:09:17 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:09:18 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:09:24 fetching corpus: 49, signal 36666/38593 (executing program) 1970/01/01 00:09:29 fetching corpus: 99, signal 52143/53767 (executing program) 1970/01/01 00:09:33 fetching corpus: 146, signal 57689/59288 (executing program) 1970/01/01 00:09:35 fetching corpus: 194, signal 66999/67773 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/70920 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/70977 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/71036 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/71100 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/71168 (executing program) 1970/01/01 00:09:38 fetching corpus: 229, signal 70572/71225 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71282 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71338 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71397 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71463 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71527 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71593 (executing program) 1970/01/01 00:09:39 fetching corpus: 229, signal 70572/71658 (executing program) 1970/01/01 00:09:40 fetching corpus: 229, signal 70572/71734 (executing program) 1970/01/01 00:09:40 fetching corpus: 230, signal 70738/71896 (executing program) 1970/01/01 00:09:40 fetching corpus: 230, signal 70738/71958 (executing program) 1970/01/01 00:09:40 fetching corpus: 231, signal 70868/72080 (executing program) 1970/01/01 00:09:40 fetching corpus: 231, signal 70868/72148 (executing program) 1970/01/01 00:09:40 fetching corpus: 231, signal 70868/72202 (executing program) 1970/01/01 00:09:40 fetching corpus: 232, signal 70883/72269 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72341 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72409 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72469 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72512 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72568 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72634 (executing program) 1970/01/01 00:09:41 fetching corpus: 232, signal 70883/72695 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72749 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72797 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72864 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72944 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72964 (executing program) 1970/01/01 00:09:42 fetching corpus: 232, signal 70883/72964 (executing program) 1970/01/01 00:11:27 starting 2 fuzzer processes 00:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:11:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000080)=@raw=[@btf_id, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 712.457618][ T2031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.636788][ T2031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.076469][ T2032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.309945][ T2032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.509623][ T2031] device hsr_slave_0 entered promiscuous mode [ 724.585705][ T2031] device hsr_slave_1 entered promiscuous mode [ 727.760980][ T2032] device hsr_slave_0 entered promiscuous mode [ 727.817096][ T2032] device hsr_slave_1 entered promiscuous mode [ 727.867870][ T2032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.889221][ T2032] Cannot create hsr debugfs directory [ 733.151016][ T2031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 733.519262][ T2031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 733.663658][ T2031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.936408][ T2031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 735.066846][ T2032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.230131][ T2032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 735.494456][ T2032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.585127][ T2032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 745.150241][ T2031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.095821][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 746.208284][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 746.950495][ T2032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.571279][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.617191][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.360302][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.450432][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 753.384509][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 753.431168][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.470362][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.527093][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 754.055704][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 754.118641][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.519138][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 754.588430][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.795908][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 754.829638][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.028311][ T2031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.575587][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 755.600778][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.975284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 756.328292][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 757.270565][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 757.349782][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 757.725063][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 757.777350][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.100491][ T2032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 763.076443][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 763.081459][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.278738][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.287970][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.489256][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 776.527688][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.154564][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.204715][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 783.173992][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 783.230447][ T2659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 783.434367][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 783.468642][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 783.519535][ T2031] device veth0_vlan entered promiscuous mode [ 783.851409][ T2031] device veth1_vlan entered promiscuous mode [ 784.709535][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 784.769674][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 785.116482][ T2031] device veth0_macvtap entered promiscuous mode [ 785.431179][ T2031] device veth1_macvtap entered promiscuous mode [ 785.520074][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 785.548876][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 785.591057][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 785.626527][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 785.877907][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 785.925840][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 785.975055][ T2032] device veth0_vlan entered promiscuous mode [ 786.849963][ T2032] device veth1_vlan entered promiscuous mode [ 787.044120][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 787.088372][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 787.476492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 787.515160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 788.041387][ T2031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.045614][ T2031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.046982][ T2031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.048252][ T2031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.480559][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.549698][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.978014][ T2032] device veth0_macvtap entered promiscuous mode [ 790.200861][ T2032] device veth1_macvtap entered promiscuous mode [ 790.704745][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 791.368377][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 791.418160][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 791.627020][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 791.685267][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 791.890012][ T2032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.929293][ T2032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.930925][ T2032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.934147][ T2032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:13:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000080)=@raw=[@btf_id, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 796.685333][ T26] audit: type=1800 audit(795.720:2): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 00:13:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000080)=@raw=[@btf_id, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:13:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:13:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000080)=@raw=[@btf_id, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 802.926881][ T26] audit: type=1800 audit(802.020:3): pid=2737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 00:13:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:13:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 810.004640][ T26] audit: type=1800 audit(809.100:4): pid=2744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 811.249690][ T26] audit: type=1800 audit(810.350:5): pid=2745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:13:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:13:35 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 818.940877][ T26] audit: type=1800 audit(818.000:6): pid=2748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 819.830997][ T26] audit: type=1800 audit(818.910:7): pid=2749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 [ 821.513766][ C0] hrtimer: interrupt took 1704800 ns 00:13:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:13:43 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 827.028761][ T26] audit: type=1800 audit(826.090:8): pid=2752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=643 res=0 errno=0 [ 827.672977][ T26] audit: type=1800 audit(826.770:9): pid=2753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:13:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 833.744569][ T26] audit: type=1800 audit(832.830:10): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 00:13:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fcntl$dupfd(r0, 0x0, r1) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 00:13:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x44042, 0x0) syz_io_uring_setup(0x3b68, &(0x7f0000003a00), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x10}, 0x0, 0x0, 0x0, 0x0) 00:13:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fcntl$dupfd(r0, 0x0, r1) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 839.661044][ T26] audit: type=1800 audit(838.760:11): pid=2761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:14:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fcntl$dupfd(r0, 0x0, r1) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 00:14:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fcntl$dupfd(r0, 0x0, r1) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 00:14:05 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f08a01", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:14:07 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f08a01", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:14:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000002c00)=0x8, 0x4) 00:14:10 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f08a01", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:14:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000002c00)=0x8, 0x4) 00:14:13 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f08a01", 0x14, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:14:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000002c00)=0x8, 0x4) 00:14:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:14:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000002c00)=0x8, 0x4) 00:14:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:14:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:14:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:14:25 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:29 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000500)) 00:14:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000500)) 00:14:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:14:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000500)) 00:14:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000500)) 00:14:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x30, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) 00:14:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x30, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) 00:14:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:14:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x30, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) 00:14:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x30, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) 00:15:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 00:15:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540f, 0xea007) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 00:15:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 00:15:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 00:15:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:38 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 00:15:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/fc_transport', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/228, 0xe4) 00:15:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:15:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x20100000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 00:16:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 963.294997][ T2901] usb usb1: check_ctrlrecip: process 2901 (syz-executor.1) requesting ep 01 but needs 81 [ 963.296948][ T2901] usb usb1: usbfs: process 2901 (syz-executor.1) did not claim interface 0 before use 00:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 965.751264][ T2904] usb usb1: check_ctrlrecip: process 2904 (syz-executor.1) requesting ep 01 but needs 81 [ 965.776117][ T2904] usb usb1: usbfs: process 2904 (syz-executor.1) did not claim interface 0 before use 00:16:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 968.789896][ T2908] usb usb1: check_ctrlrecip: process 2908 (syz-executor.1) requesting ep 01 but needs 81 [ 968.815013][ T2908] usb usb1: usbfs: process 2908 (syz-executor.1) did not claim interface 0 before use 00:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 971.560092][ T2912] usb usb1: check_ctrlrecip: process 2912 (syz-executor.1) requesting ep 01 but needs 81 [ 971.563306][ T2912] usb usb1: usbfs: process 2912 (syz-executor.1) did not claim interface 0 before use 00:16:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) 00:16:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 976.695739][ T2918] usb usb1: check_ctrlrecip: process 2918 (syz-executor.0) requesting ep 01 but needs 81 [ 976.697901][ T2918] usb usb1: usbfs: process 2918 (syz-executor.0) did not claim interface 0 before use 00:16:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x7}}) [ 980.337374][ T2922] usb usb1: check_ctrlrecip: process 2922 (syz-executor.0) requesting ep 01 but needs 81 [ 980.338668][ T2922] usb usb1: usbfs: process 2922 (syz-executor.0) did not claim interface 0 before use 00:16:21 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0}) 00:16:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) [ 984.341395][ T2926] usb usb1: check_ctrlrecip: process 2926 (syz-executor.0) requesting ep 01 but needs 81 [ 984.355493][ T2926] usb usb1: usbfs: process 2926 (syz-executor.0) did not claim interface 0 before use 00:16:26 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 00:16:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) 00:16:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) [ 994.447021][ T2930] could not allocate digest TFM handle blake2b-160 00:16:36 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 00:16:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) 00:16:42 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 1005.858110][ T2941] could not allocate digest TFM handle blake2b-160 [ 1005.859875][ T2948] could not allocate digest TFM handle blake2b-160 00:16:47 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 00:16:47 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 1016.828170][ T2954] could not allocate digest TFM handle blake2b-160 [ 1016.836591][ T2952] could not allocate digest TFM handle blake2b-160 00:16:58 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 00:16:59 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'blake2b-160\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 1027.514262][ T2966] could not allocate digest TFM handle blake2b-160 [ 1027.518554][ T2963] could not allocate digest TFM handle blake2b-160 00:17:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) 00:17:10 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) 00:17:13 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) 00:17:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) 00:17:16 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) 00:17:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x0, 0xf715) 00:17:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) 00:17:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x7, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:17:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000800)={0x2, 0x4c20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 00:17:46 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:17:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:17:49 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:17:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:17:52 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:17:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:17:55 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:17:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:17:59 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:01 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:03 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:03 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:06 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:10 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:13 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:18:14 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:15 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:18:17 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000540)='./file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:18:18 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x48020, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303006"]) 00:18:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) 00:18:24 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/28, 0x1c, 0x5) [ 1105.845073][ T26] audit: type=1804 audit(1104.940:12): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/78/file0" dev="vda" ino=640 res=1 errno=0 00:18:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) 00:18:27 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/28, 0x1c, 0x5) [ 1109.499496][ T26] audit: type=1804 audit(1108.580:13): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/79/file0" dev="vda" ino=640 res=1 errno=0 00:18:30 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/28, 0x1c, 0x5) 00:18:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) [ 1112.817490][ T26] audit: type=1804 audit(1111.920:14): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/80/file0" dev="vda" ino=644 res=1 errno=0 00:18:32 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/28, 0x1c, 0x5) 00:18:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) [ 1115.777317][ T26] audit: type=1804 audit(1114.880:15): pid=3068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/81/file0" dev="vda" ino=644 res=1 errno=0 00:18:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) 00:18:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) [ 1118.999104][ T26] audit: type=1804 audit(1118.100:16): pid=3072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/74/file0" dev="vda" ino=640 res=1 errno=0 00:18:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) 00:18:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) [ 1123.000109][ T26] audit: type=1804 audit(1122.100:17): pid=3077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/75/file0" dev="vda" ino=640 res=1 errno=0 00:18:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1637e1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x40000000000401}) 00:18:44 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) [ 1127.130666][ T26] audit: type=1804 audit(1126.230:18): pid=3081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/76/file0" dev="vda" ino=644 res=1 errno=0 00:18:49 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) 00:18:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) 00:18:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) 00:18:53 executing program 1: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:18:55 executing program 1: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:18:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x100, 0x0) 00:18:59 executing program 1: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:19:02 executing program 0: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:19:03 executing program 1: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:19:05 executing program 0: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:19:07 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:08 executing program 0: setresuid(0x0, 0xee00, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x0) 00:19:10 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:12 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:13 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:14 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:16 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:17 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:19 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:20 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:22 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:23 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:25 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001200)={0x0, ""/165}, 0xad, 0x0, 0x5800) 00:19:27 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:29 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:31 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:35 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:38 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:40 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:42 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:44 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:46 executing program 0: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:46 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:50 executing program 1: r0 = syz_io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x3bce, 0x0, 0x0, 0x0, 0x0) 00:19:51 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:19:54 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:19:56 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:19:57 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:19:58 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:01 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:01 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:05 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:06 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:08 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:08 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:12 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x99) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x547c, 0x0, 0x0, 0x0, 0x0) 00:20:12 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:17 executing program 0: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:18 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:21 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:21 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:23 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:24 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1b8ecc4d) io_uring_enter(r0, 0x6a1b, 0x0, 0x0, 0x0, 0x0) 00:20:27 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:30 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:20:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r2, r1, 0x0) 00:20:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:20:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 00:20:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) [ 1255.144103][ T2659] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1255.484185][ T2659] usb 2-1: Using ep0 maxpacket: 16 [ 1255.727651][ T2659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.743691][ T2659] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1255.746260][ T2659] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1255.747862][ T2659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.007936][ T2659] usb 2-1: config 0 descriptor?? [ 1257.295333][ T2659] HID 045e:07da: Invalid code 65791 type 1 [ 1257.629866][ T2659] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 00:20:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) [ 1258.107696][ T2659] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 00:21:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) [ 1269.076048][ T83] usb 2-1: USB disconnect, device number 2 00:21:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 00:21:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 00:21:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) [ 1272.046745][ T2659] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1272.343632][ T2659] usb 2-1: Using ep0 maxpacket: 16 [ 1272.499824][ T2659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.506750][ T2659] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1272.509021][ T2659] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1272.510576][ T2659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.670180][ T2659] usb 2-1: config 0 descriptor?? [ 1273.840239][ T2659] HID 045e:07da: Invalid code 65791 type 1 [ 1274.200264][ T2659] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input5 [ 1274.514856][ T2659] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 00:21:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 00:21:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1284.265701][ T2093] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1284.574484][ T2093] usb 1-1: Using ep0 maxpacket: 16 [ 1284.746087][ T2093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.748096][ T2093] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1284.750196][ T2093] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1284.758541][ T2093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.019804][ T2093] usb 1-1: config 0 descriptor?? [ 1286.219499][ T2093] HID 045e:07da: Invalid code 65791 type 1 [ 1286.418376][ T3070] usb 2-1: USB disconnect, device number 3 [ 1286.581234][ T2093] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6 [ 1287.274385][ T2093] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 00:21:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1291.054175][ T3271] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1291.574636][ T3271] usb 2-1: Using ep0 maxpacket: 16 [ 1291.818161][ T3271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.819978][ T3271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1291.843724][ T3271] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1291.845479][ T3271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.147629][ T3271] usb 2-1: config 0 descriptor?? [ 1293.628555][ T3271] HID 045e:07da: Invalid code 65791 type 1 [ 1293.966163][ T3271] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input7 [ 1294.251411][ T3271] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1298.786224][ T3070] usb 1-1: USB disconnect, device number 2 00:21:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1303.594442][ T2728] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1303.874348][ T2728] usb 1-1: Using ep0 maxpacket: 16 [ 1304.086501][ T2728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.088383][ T2728] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1304.090402][ T2728] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1304.106189][ T2728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.438757][ T2728] usb 1-1: config 0 descriptor?? [ 1305.595482][ T2728] HID 045e:07da: Invalid code 65791 type 1 [ 1305.889281][ T2728] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input8 00:21:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1306.075776][ T2728] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1306.390959][ T2660] usb 2-1: USB disconnect, device number 4 [ 1308.635070][ T2728] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1308.896852][ T2728] usb 2-1: Using ep0 maxpacket: 16 [ 1309.016457][ T2728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.018420][ T2728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1309.020377][ T2728] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1309.030041][ T2728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.327063][ T2728] usb 2-1: config 0 descriptor?? [ 1311.020223][ T2728] HID 045e:07da: Invalid code 65791 type 1 [ 1311.470516][ T2728] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9 [ 1311.655705][ T2728] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1317.839141][ T2728] usb 1-1: USB disconnect, device number 3 00:21:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1321.903469][ T83] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1322.185045][ T83] usb 1-1: Using ep0 maxpacket: 16 [ 1322.326314][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.328359][ T83] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1322.330403][ T83] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1322.344316][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.489342][ T83] usb 1-1: config 0 descriptor?? [ 1323.758737][ T83] HID 045e:07da: Invalid code 65791 type 1 [ 1324.203678][ T83] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input10 [ 1324.366413][ T83] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1324.755822][ T3070] usb 2-1: USB disconnect, device number 5 00:22:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1330.755702][ T3070] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1331.104331][ T3070] usb 2-1: Using ep0 maxpacket: 16 [ 1331.266631][ T3070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.268724][ T3070] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1331.270988][ T3070] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1331.297697][ T3070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.543735][ T3070] usb 2-1: config 0 descriptor?? [ 1332.857702][ T3070] HID 045e:07da: Invalid code 65791 type 1 [ 1333.313146][ T3070] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input11 [ 1333.545681][ T3070] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1336.948806][ T3070] usb 1-1: USB disconnect, device number 4 00:22:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1340.124791][ T2660] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1340.395391][ T2660] usb 1-1: Using ep0 maxpacket: 16 [ 1340.555952][ T2660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.557881][ T2660] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1340.559939][ T2660] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1340.561445][ T2660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.859830][ T2660] usb 1-1: config 0 descriptor?? [ 1341.808374][ T2660] HID 045e:07da: Invalid code 65791 type 1 [ 1342.087205][ T2660] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input12 [ 1342.278219][ T2660] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1345.313740][ T3070] usb 2-1: USB disconnect, device number 6 00:22:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1348.367348][ T2724] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1348.644166][ T2724] usb 2-1: Using ep0 maxpacket: 16 [ 1348.909400][ T2724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.911396][ T2724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1348.927206][ T2724] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1348.929676][ T2724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.120555][ T2724] usb 2-1: config 0 descriptor?? [ 1350.509176][ T2724] HID 045e:07da: Invalid code 65791 type 1 [ 1350.763502][ T2724] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input13 [ 1350.905059][ T2724] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1354.126018][ T2674] usb 1-1: USB disconnect, device number 5 00:22:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1358.774864][ T3070] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1359.147067][ T3070] usb 1-1: Using ep0 maxpacket: 16 [ 1359.357004][ T3070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.363117][ T3070] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1359.368529][ T3070] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1359.370282][ T3070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.539976][ T3070] usb 1-1: config 0 descriptor?? [ 1360.630614][ T3070] HID 045e:07da: Invalid code 65791 type 1 [ 1361.008668][ T3070] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input14 [ 1361.369924][ T3070] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1363.477124][ T2674] usb 2-1: USB disconnect, device number 7 00:22:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1366.464941][ T2724] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1366.714329][ T2724] usb 2-1: Using ep0 maxpacket: 16 [ 1366.836650][ T2724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.839593][ T2724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1366.849831][ T2724] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1366.851354][ T2724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.045145][ T2724] usb 2-1: config 0 descriptor?? [ 1368.131351][ T2724] HID 045e:07da: Invalid code 65791 type 1 [ 1368.419976][ T2724] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input15 [ 1368.610698][ T2724] microsoft 0003:045E:07DA.000C: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1372.750448][ T2674] usb 1-1: USB disconnect, device number 6 00:22:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1376.187214][ T83] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1376.466163][ T83] usb 1-1: Using ep0 maxpacket: 16 [ 1376.716590][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.718859][ T83] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1376.729638][ T83] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1376.751371][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.024142][ T83] usb 1-1: config 0 descriptor?? [ 1378.276849][ T83] HID 045e:07da: Invalid code 65791 type 1 [ 1378.498339][ T83] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input16 [ 1378.718637][ T83] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1380.314977][ T83] usb 2-1: USB disconnect, device number 8 00:23:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1385.017116][ T2674] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1385.275573][ T2674] usb 2-1: Using ep0 maxpacket: 16 [ 1385.416711][ T2674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.418475][ T2674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1385.421139][ T2674] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1385.456101][ T2674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.698328][ T2674] usb 2-1: config 0 descriptor?? [ 1386.777900][ T2674] HID 045e:07da: Invalid code 65791 type 1 [ 1386.986595][ T2674] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input17 [ 1387.304816][ T2674] microsoft 0003:045E:07DA.000E: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1390.247758][ T2660] usb 1-1: USB disconnect, device number 7 00:23:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 00:23:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 00:23:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) [ 1398.719193][ T2660] usb 2-1: USB disconnect, device number 9 00:23:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1402.684409][ T2660] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1402.964931][ T2660] usb 2-1: Using ep0 maxpacket: 16 00:23:22 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) [ 1403.086083][ T2660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.088223][ T2660] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1403.090944][ T2660] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1403.134871][ T2660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.281445][ T2660] usb 2-1: config 0 descriptor?? [ 1404.136157][ T26] audit: type=1400 audit(1403.220:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3571 comm="syz-executor.0" [ 1404.316828][ T2660] HID 045e:07da: Invalid code 65791 type 1 [ 1404.630426][ T2660] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input18 [ 1404.778637][ T2660] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 00:23:25 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) [ 1408.079829][ T26] audit: type=1400 audit(1407.160:20): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3581 comm="syz-executor.0" 00:23:28 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) [ 1413.159687][ T26] audit: type=1400 audit(1412.250:21): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3583 comm="syz-executor.0" [ 1416.256051][ T2674] usb 2-1: USB disconnect, device number 10 00:23:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) 00:23:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 1420.251176][ T26] audit: type=1400 audit(1419.350:22): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3595 comm="syz-executor.0" [ 1421.924583][ T83] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1422.204832][ T83] usb 2-1: Using ep0 maxpacket: 16 [ 1422.416919][ T83] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.418850][ T83] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1422.420623][ T83] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1422.445759][ T83] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:23:41 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) [ 1422.661292][ T83] usb 2-1: config 0 descriptor?? [ 1423.679825][ T83] HID 045e:07da: Invalid code 65791 type 1 [ 1424.019091][ T83] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input19 [ 1424.177974][ T26] audit: type=1400 audit(1423.280:23): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3603 comm="syz-executor.0" [ 1424.270354][ T83] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 00:23:44 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) [ 1428.392859][ T26] audit: type=1400 audit(1427.490:24): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3613 comm="syz-executor.0" [ 1435.745098][ T83] usb 2-1: USB disconnect, device number 11 00:23:55 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'changeprofile ', '&\x00'}, 0x10) 00:23:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) [ 1438.603738][ T26] audit: type=1400 audit(1437.700:25): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=3623 comm="syz-executor.0" 00:23:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) [ 1441.821416][ T26] audit: type=1804 audit(1440.920:26): pid=3630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/132/file0" dev="vda" ino=640 res=1 errno=0 00:24:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) [ 1445.900080][ T26] audit: type=1804 audit(1445.000:27): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/133/file0" dev="vda" ino=640 res=1 errno=0 00:24:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1449.699819][ T26] audit: type=1804 audit(1448.800:28): pid=3639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/134/file0" dev="vda" ino=644 res=1 errno=0 00:24:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1453.539996][ T26] audit: type=1804 audit(1452.640:29): pid=3643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/135/file0" dev="vda" ino=643 res=1 errno=0 [ 1454.153029][ T26] audit: type=1804 audit(1453.250:30): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/132/file0" dev="vda" ino=645 res=1 errno=0 00:24:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1458.042740][ T26] audit: type=1804 audit(1457.140:31): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/136/file0" dev="vda" ino=645 res=1 errno=0 [ 1458.237581][ T26] audit: type=1804 audit(1457.270:32): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/133/file0" dev="vda" ino=644 res=1 errno=0 00:24:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1461.223356][ T26] audit: type=1804 audit(1460.320:33): pid=3651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3982323361/syzkaller.0YUrSC/134/file0" dev="vda" ino=644 res=1 errno=0 [ 1461.231067][ T26] audit: type=1804 audit(1460.330:34): pid=3652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/137/file0" dev="vda" ino=645 res=1 errno=0 00:24:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) fallocate(r0, 0x3, 0x1, 0x8004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:24:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) [ 1466.136980][ T26] audit: type=1804 audit(1465.240:35): pid=3654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1283086368/syzkaller.dIj5Mv/138/file0" dev="vda" ino=640 res=1 errno=0 00:24:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r1) socket$xdp(0x2c, 0x3, 0x0) 00:24:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) 00:24:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:24:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) [ 1483.095099][ T3674] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.269377][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.306450][ T3670] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.679157][ T3670] atomic_op ffffaf800e5ff998 conn xmit_atomic 0000000000000000 00:24:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) 00:24:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:24:46 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) [ 1488.473730][ T3679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.639650][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.670765][ T3679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.883654][ T3679] atomic_op ffffaf800bbc2998 conn xmit_atomic 0000000000000000 00:24:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:24:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1494.027677][ T3686] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1494.169141][ T3684] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1494.308991][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1494.341014][ T3686] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1494.481423][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1494.556458][ T3684] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1494.698950][ T3686] atomic_op ffffaf800f757198 conn xmit_atomic 0000000000000000 [ 1494.840017][ T3684] atomic_op ffffaf800cc1e198 conn xmit_atomic 0000000000000000 00:24:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:24:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1499.410473][ T3691] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.836510][ T3692] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1499.879066][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.966590][ T3691] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1500.219808][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1500.260217][ T3691] atomic_op ffffaf800c0aa998 conn xmit_atomic 0000000000000000 [ 1500.289149][ T3692] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1500.433133][ T3692] atomic_op ffffaf800c0ab198 conn xmit_atomic 0000000000000000 00:25:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1505.026355][ T3695] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1505.235172][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1505.269784][ T3696] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1505.378262][ T3695] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1505.495870][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1505.543824][ T3696] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1505.548426][ T3695] atomic_op ffffaf800e43b998 conn xmit_atomic 0000000000000000 [ 1505.668984][ T3696] atomic_op ffffaf800e43d998 conn xmit_atomic 0000000000000000 00:25:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1509.039212][ T3699] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1509.110081][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1509.127923][ T3699] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1509.307432][ T3699] atomic_op ffffaf800e5ff998 conn xmit_atomic 0000000000000000 [ 1509.770917][ T3700] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1510.264792][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1510.269218][ T3700] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1510.417597][ T3700] atomic_op ffffaf800ff3e998 conn xmit_atomic 0000000000000000 00:25:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1513.718529][ T3702] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1513.838804][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1513.895837][ T3702] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1514.076929][ T3702] atomic_op ffffaf800e850198 conn xmit_atomic 0000000000000000 [ 1514.890740][ T3704] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1515.197227][ T3704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1515.238940][ T3704] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1515.419961][ T3704] atomic_op ffffaf800be1d198 conn xmit_atomic 0000000000000000 00:25:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1519.313710][ T3706] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.556011][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.561189][ T3706] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.829871][ T3706] atomic_op ffffaf800f757198 conn xmit_atomic 0000000000000000 [ 1520.775974][ T3708] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1521.037117][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1521.071000][ T3708] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1521.487867][ T3708] atomic_op ffffaf800fee8198 conn xmit_atomic 0000000000000000 00:25:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1525.037448][ T3710] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1525.504367][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1525.508839][ T3710] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1525.846048][ T3710] atomic_op ffffaf800bed9998 conn xmit_atomic 0000000000000000 00:25:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1527.215528][ T3712] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1527.721443][ T3712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1527.729156][ T3712] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1527.860333][ T3712] atomic_op ffffaf800c556998 conn xmit_atomic 0000000000000000 00:25:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1530.149959][ T3714] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1530.327024][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1530.330686][ T3714] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1530.507244][ T3714] atomic_op ffffaf800c555998 conn xmit_atomic 0000000000000000 [ 1532.765264][ T3716] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. 00:25:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1533.070689][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1533.079580][ T3716] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1533.558909][ T3716] atomic_op ffffaf801127c998 conn xmit_atomic 0000000000000000 [ 1536.755920][ T3718] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.185885][ T3718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.190955][ T3718] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.470008][ T3718] atomic_op ffffaf800e850998 conn xmit_atomic 0000000000000000 00:25:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1541.488261][ T3720] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1541.735082][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1541.739950][ T3720] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1541.919419][ T3720] atomic_op ffffaf800cc1d198 conn xmit_atomic 0000000000000000 [ 1543.624756][ T3722] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1544.300114][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1544.310452][ T3722] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1544.760406][ T3722] atomic_op ffffaf800f55e198 conn xmit_atomic 0000000000000000 00:25:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1548.076485][ T3724] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1548.235053][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1548.406860][ T3724] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1548.665053][ T3724] atomic_op ffffaf800c1cb998 conn xmit_atomic 0000000000000000 [ 1549.459080][ T3726] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1549.608543][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1549.676068][ T3726] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1549.820879][ T3726] atomic_op ffffaf801f271198 conn xmit_atomic 0000000000000000 00:25:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1552.636980][ T3728] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.924931][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.928327][ T3728] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1553.265296][ T3728] atomic_op ffffaf800c140998 conn xmit_atomic 0000000000000000 [ 1553.504103][ T3730] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.597426][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.601284][ T3730] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.848823][ T3730] atomic_op ffffaf800c33b998 conn xmit_atomic 0000000000000000 00:25:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1557.516575][ T3733] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1557.679695][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1557.785916][ T3733] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1557.955028][ T3733] atomic_op ffffaf800c557998 conn xmit_atomic 0000000000000000 [ 1558.039939][ T3734] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1558.175296][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1558.179953][ T3734] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1558.488317][ T3734] atomic_op ffffaf8009ba4198 conn xmit_atomic 0000000000000000 00:25:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:25:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1562.701409][ T3737] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1562.838829][ T3738] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1562.875577][ T3737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1562.880671][ T3737] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1562.976917][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1562.981366][ T3738] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1563.114880][ T3737] atomic_op ffffaf800d81d198 conn xmit_atomic 0000000000000000 [ 1563.141493][ T3738] atomic_op ffffaf800c0ae198 conn xmit_atomic 0000000000000000 00:26:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1567.718217][ T3742] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1567.860650][ T3741] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1567.898336][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1567.984860][ T3742] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1568.038485][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.080081][ T3741] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.201173][ T3742] atomic_op ffffaf801089d998 conn xmit_atomic 0000000000000000 [ 1568.357894][ T3741] atomic_op ffffaf800f750998 conn xmit_atomic 0000000000000000 00:26:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1572.736922][ T3745] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1572.786580][ T3746] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1573.168855][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1573.198198][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1573.239839][ T3746] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1573.330215][ T3745] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1573.599442][ T3745] atomic_op ffffaf801f6f3198 conn xmit_atomic 0000000000000000 [ 1573.687714][ T3746] atomic_op ffffaf801148b198 conn xmit_atomic 0000000000000000 00:26:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1577.403858][ T3749] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1577.527765][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1577.558793][ T3749] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1577.704335][ T3750] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1577.779591][ T3749] atomic_op ffffaf800e850998 conn xmit_atomic 0000000000000000 [ 1578.084918][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1578.088692][ T3750] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1578.381426][ T3750] atomic_op ffffaf800cc18198 conn xmit_atomic 0000000000000000 00:26:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1581.668471][ T3752] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1581.835769][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1581.888000][ T3752] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1582.084993][ T3752] atomic_op ffffaf800e5f8198 conn xmit_atomic 0000000000000000 [ 1582.369236][ T3754] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1582.569784][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1582.574724][ T3754] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1582.895267][ T3754] atomic_op ffffaf800e5fe998 conn xmit_atomic 0000000000000000 00:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1585.687590][ T3756] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1585.789507][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1585.830352][ T3756] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1585.969973][ T3756] atomic_op ffffaf800c556998 conn xmit_atomic 0000000000000000 [ 1587.056608][ T3758] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1587.186352][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1587.189602][ T3758] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1587.336016][ T3758] atomic_op ffffaf800c557198 conn xmit_atomic 0000000000000000 00:26:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1590.729411][ T3760] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. 00:26:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 1590.898354][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1590.935165][ T3760] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1591.073727][ T3760] atomic_op ffffaf800c0a8198 conn xmit_atomic 0000000000000000 [ 1591.459658][ T3762] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1591.625886][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1591.630681][ T3762] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1591.837496][ T3762] atomic_op ffffaf800c0ab198 conn xmit_atomic 0000000000000000 00:26:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) 00:26:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) [ 1595.909589][ T3766] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1596.117009][ T3766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1596.121364][ T3766] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1596.535850][ T3766] atomic_op ffffaf8010724198 conn xmit_atomic 0000000000000000 00:26:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="01e22abd70000000070000"], 0x98}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="10012cbdc92c1b5e6e001afd247b92578c8a2e03000200000008400200060000e300080006e70100000008000700"/56, @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400fc0200"/28], 0x5c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c094) r6 = dup(r4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0xda}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) r7 = signalfd4(r0, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) renameat2(r6, &(0x7f0000000200)='./file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 00:26:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x5, 0x0) [ 1600.227995][ T3770] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.371167][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.429131][ T3770] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.718795][ T3770] atomic_op ffffaf801148a198 conn xmit_atomic 0000000000000000 00:26:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x50}}, 0x0) 00:26:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x50}}, 0x0) 00:26:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x50}}, 0x0) 00:26:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x50}}, 0x0) 00:26:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, 0x0) 00:27:24 executing program 0: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 00:27:25 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:28 executing program 0: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 00:27:28 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:31 executing program 0: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 00:27:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:36 executing program 0: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 00:27:38 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:44 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:45 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7f80fe8cb0e9a0a"}}, 0x48}}, 0x0) 00:27:52 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:27:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:55 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:27:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:58 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:27:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:01 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:28:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:11 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:28:14 executing program 1: msgrcv(0x0, 0x0, 0xff0f, 0x0, 0x4800) 00:28:15 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:28:16 executing program 1: msgrcv(0x0, 0x0, 0xff0f, 0x0, 0x4800) 00:28:18 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000001200), 0x481, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000001300)="a1", 0x1}], 0x1) 00:28:20 executing program 1: msgrcv(0x0, 0x0, 0xff0f, 0x0, 0x4800) 00:28:22 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:23 executing program 1: msgrcv(0x0, 0x0, 0xff0f, 0x0, 0x4800) 00:28:24 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:26 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:29 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@echo=0xfffffffb) 00:28:35 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 00:28:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:38 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 00:28:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:41 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 00:28:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:43 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 00:28:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:28:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 00:28:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:28:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:28:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:28:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:28:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:29:01 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="bbe453a98e0bb0f63f99c20461991caf9750c1c7bb28cce819e4cf619c32ee54f85e508902f3a662f8882c1dea09fc1468a2a349b92659c6642635cbf166c646ac45ac6b55c5b148541496c976e2936cccbcf02e72f9012742839bf7", 0x5c) 00:29:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0) 00:29:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000005080)=""/183, 0x2b, 0xb7, 0x1}, 0x20) 00:29:15 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000005080)=""/183, 0x2b, 0xb7, 0x1}, 0x20) 00:29:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000005080)=""/183, 0x2b, 0xb7, 0x1}, 0x20) 00:29:18 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000005080)=""/183, 0x2b, 0xb7, 0x1}, 0x20) 00:29:22 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:23 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 00:29:25 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 00:29:28 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000003c0)) 00:29:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 00:29:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 00:29:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 00:29:48 executing program 0: r0 = memfd_secret(0x0) r1 = syz_io_uring_setup(0xf33, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x20ec, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) ppoll(&(0x7f0000000100)=[{r1}, {r2, 0xc202}, {0xffffffffffffffff, 0x8}, {r0, 0x1402}], 0x4, 0x0, 0x0, 0x0) 00:29:53 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:29:54 executing program 0: r0 = memfd_secret(0x0) r1 = syz_io_uring_setup(0xf33, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x20ec, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) ppoll(&(0x7f0000000100)=[{r1}, {r2, 0xc202}, {0xffffffffffffffff, 0x8}, {r0, 0x1402}], 0x4, 0x0, 0x0, 0x0) 00:29:59 executing program 0: r0 = memfd_secret(0x0) r1 = syz_io_uring_setup(0xf33, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x20ec, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) ppoll(&(0x7f0000000100)=[{r1}, {r2, 0xc202}, {0xffffffffffffffff, 0x8}, {r0, 0x1402}], 0x4, 0x0, 0x0, 0x0) 00:30:01 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:05 executing program 0: r0 = memfd_secret(0x0) r1 = syz_io_uring_setup(0xf33, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x20ec, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) ppoll(&(0x7f0000000100)=[{r1}, {r2, 0xc202}, {0xffffffffffffffff, 0x8}, {r0, 0x1402}], 0x4, 0x0, 0x0, 0x0) 00:30:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1813.607901][ T4025] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1813.616412][ T4025] [ 1813.616984][ T4025] ====================================================== [ 1813.617663][ T4025] WARNING: possible circular locking dependency detected [ 1813.618402][ T4025] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1813.619253][ T4025] ------------------------------------------------------ [ 1813.619891][ T4025] syz-executor.1/4025 is trying to acquire lock: [ 1813.620819][ T4025] ffffffff84fc0408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 1813.624037][ T4025] [ 1813.624037][ T4025] but task is already holding lock: [ 1813.624839][ T4025] ffffaf8011546350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1813.626662][ T4025] [ 1813.626662][ T4025] which lock already depends on the new lock. [ 1813.626662][ T4025] [ 1813.627578][ T4025] [ 1813.627578][ T4025] the existing dependency chain (in reverse order) is: [ 1813.628349][ T4025] [ 1813.628349][ T4025] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1813.629815][ T4025] lock_acquire.part.0+0x1d0/0x424 [ 1813.630820][ T4025] lock_acquire+0x54/0x6a [ 1813.631740][ T4025] __mutex_lock+0x114/0xade [ 1813.632704][ T4025] mutex_lock_nested+0x14/0x1c [ 1813.633610][ T4025] nci_start_poll+0x4de/0x6b8 [ 1813.634415][ T4025] nfc_start_poll+0x10c/0x1e8 [ 1813.635228][ T4025] nfc_genl_start_poll+0xfe/0x252 [ 1813.636080][ T4025] genl_family_rcv_msg_doit+0x19a/0x23c [ 1813.636919][ T4025] genl_rcv_msg+0x236/0x3ba [ 1813.637684][ T4025] netlink_rcv_skb+0xf8/0x2be [ 1813.638441][ T4025] genl_rcv+0x36/0x4c [ 1813.639151][ T4025] netlink_unicast+0x40e/0x5fe [ 1813.639883][ T4025] netlink_sendmsg+0x4e0/0x994 [ 1813.640618][ T4025] sock_sendmsg+0xa0/0xc4 [ 1813.641469][ T4025] ____sys_sendmsg+0x46e/0x484 [ 1813.642750][ T4025] ___sys_sendmsg+0x16c/0x1f6 [ 1813.643513][ T4025] __sys_sendmsg+0xba/0x150 [ 1813.644217][ T4025] sys_sendmsg+0x2c/0x3a [ 1813.644998][ T4025] ret_from_syscall+0x0/0x2 [ 1813.645803][ T4025] [ 1813.645803][ T4025] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1813.647031][ T4025] lock_acquire.part.0+0x1d0/0x424 [ 1813.647881][ T4025] lock_acquire+0x54/0x6a [ 1813.648633][ T4025] __mutex_lock+0x114/0xade [ 1813.649482][ T4025] mutex_lock_nested+0x14/0x1c [ 1813.650308][ T4025] nfc_urelease_event_work+0x126/0x218 [ 1813.651191][ T4025] process_one_work+0x654/0xffe [ 1813.652502][ T4025] worker_thread+0x360/0x8fa [ 1813.653406][ T4025] kthread+0x19e/0x1fa [ 1813.654376][ T4025] ret_from_exception+0x0/0x10 [ 1813.655351][ T4025] [ 1813.655351][ T4025] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1813.656726][ T4025] lock_acquire.part.0+0x1d0/0x424 [ 1813.657637][ T4025] lock_acquire+0x54/0x6a [ 1813.658405][ T4025] __mutex_lock+0x114/0xade [ 1813.659232][ T4025] mutex_lock_nested+0x14/0x1c [ 1813.660107][ T4025] nfc_register_device+0x44/0x29e [ 1813.660924][ T4025] nci_register_device+0x538/0x612 [ 1813.661818][ T4025] virtual_ncidev_open+0x82/0x12c [ 1813.662841][ T4025] misc_open+0x272/0x2c8 [ 1813.663669][ T4025] chrdev_open+0x1d4/0x478 [ 1813.664440][ T4025] do_dentry_open+0x2a4/0x7d4 [ 1813.665438][ T4025] vfs_open+0x52/0x5e [ 1813.666210][ T4025] path_openat+0x12b6/0x189e [ 1813.666934][ T4025] do_filp_open+0x10e/0x22a [ 1813.667661][ T4025] do_sys_openat2+0x174/0x31e [ 1813.668447][ T4025] sys_openat+0xdc/0x164 [ 1813.669239][ T4025] ret_from_syscall+0x0/0x2 [ 1813.669982][ T4025] [ 1813.669982][ T4025] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1813.671223][ T4025] check_noncircular+0x1de/0x1fe [ 1813.672605][ T4025] __lock_acquire+0x19a4/0x333e [ 1813.673510][ T4025] lock_acquire.part.0+0x1d0/0x424 [ 1813.674359][ T4025] lock_acquire+0x54/0x6a [ 1813.675132][ T4025] __mutex_lock+0x114/0xade [ 1813.675940][ T4025] mutex_lock_nested+0x14/0x1c [ 1813.676765][ T4025] virtual_nci_close+0x28/0x58 [ 1813.677581][ T4025] nci_close_device+0x12e/0x1de [ 1813.678376][ T4025] nci_unregister_device+0x34/0x182 [ 1813.679211][ T4025] virtual_ncidev_close+0x9c/0xbc [ 1813.679999][ T4025] __fput+0x164/0x502 [ 1813.680682][ T4025] ____fput+0x1a/0x24 [ 1813.681361][ T4025] task_work_run+0xdc/0x154 [ 1813.682659][ T4025] do_notify_resume+0x894/0xa56 [ 1813.683473][ T4025] ret_from_exception+0x0/0x10 [ 1813.684269][ T4025] [ 1813.684269][ T4025] other info that might help us debug this: [ 1813.684269][ T4025] [ 1813.685170][ T4025] Chain exists of: [ 1813.685170][ T4025] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1813.685170][ T4025] [ 1813.686826][ T4025] Possible unsafe locking scenario: [ 1813.686826][ T4025] [ 1813.687445][ T4025] CPU0 CPU1 [ 1813.687977][ T4025] ---- ---- [ 1813.688519][ T4025] lock(&ndev->req_lock); [ 1813.689272][ T4025] lock(&genl_data->genl_data_mutex); [ 1813.690175][ T4025] lock(&ndev->req_lock); [ 1813.691017][ T4025] lock(nci_mutex); [ 1813.692081][ T4025] [ 1813.692081][ T4025] *** DEADLOCK *** [ 1813.692081][ T4025] [ 1813.693805][ T4025] 1 lock held by syz-executor.1/4025: [ 1813.694486][ T4025] #0: ffffaf8011546350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1813.696182][ T4025] [ 1813.696182][ T4025] stack backtrace: [ 1813.697007][ T4025] CPU: 0 PID: 4025 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1813.698068][ T4025] Hardware name: riscv-virtio,qemu (DT) [ 1813.698888][ T4025] Call Trace: [ 1813.699403][ T4025] [] dump_backtrace+0x2e/0x3c [ 1813.700302][ T4025] [] show_stack+0x34/0x40 [ 1813.701133][ T4025] [] dump_stack_lvl+0xe4/0x150 [ 1813.702692][ T4025] [] dump_stack+0x1c/0x24 [ 1813.703691][ T4025] [] print_circular_bug+0x34e/0x3d8 [ 1813.704683][ T4025] [] check_noncircular+0x1de/0x1fe [ 1813.705612][ T4025] [] __lock_acquire+0x19a4/0x333e [ 1813.706503][ T4025] [] lock_acquire.part.0+0x1d0/0x424 [ 1813.707402][ T4025] [] lock_acquire+0x54/0x6a [ 1813.708238][ T4025] [] __mutex_lock+0x114/0xade [ 1813.709159][ T4025] [] mutex_lock_nested+0x14/0x1c [ 1813.710112][ T4025] [] virtual_nci_close+0x28/0x58 [ 1813.711009][ T4025] [] nci_close_device+0x12e/0x1de [ 1813.712469][ T4025] [] nci_unregister_device+0x34/0x182 [ 1813.713416][ T4025] [] virtual_ncidev_close+0x9c/0xbc [ 1813.714817][ T4025] [] __fput+0x164/0x502 [ 1813.715981][ T4025] [] ____fput+0x1a/0x24 [ 1813.716824][ T4025] [] task_work_run+0xdc/0x154 [ 1813.717735][ T4025] [] do_notify_resume+0x894/0xa56 [ 1813.718626][ T4025] [] ret_from_exception+0x0/0x10 00:30:13 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:15 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:16 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1821.124023][ T4036] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:30:20 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:20 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:21 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:23 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:24 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1828.808028][ T4054] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:30:28 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:28 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:30 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:31 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:31 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1836.403871][ T4073] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:30:35 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:35 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:38 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:30:39 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) VM DIAGNOSIS: 20:09:36 Registers: info registers vcpu 0 pc 00007fff85259968 mhartid 0000000000000000 mstatus 00000000000040a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000ff08 sepc 00007fff85289440 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra 00007fff8525c7a8 x2/sp 00007fffddd28670 x3/gp 0000000000012800 x4/tp 00007fff853b96c8 x5/t0 0000000000000000 x6/t1 00007fff852a5d0c x7/t2 0000000000000009 x8/s0 00007fffddd286a8 x9/s1 0000000000000004 x10/a0 00007fffddd28670 x11/a1 0000000000000000 x12/a2 00007fff852b6c60 x13/a3 0000000000000000 x14/a4 00000000000000ff x15/a5 0000000000000000 x16/a6 00007fff853b802d x17/a7 00000000000000a9 x18/s2 00007fffddd286a8 x19/s3 00007fff852b6030 x20/s4 00007fff853b8420 x21/s5 00007fff852b6c58 x22/s6 0000000000000010 x23/s7 00007fffddd286b0 x24/s8 00007fffddd28b60 x25/s9 0000000000000000 x26/s10 00007fff853b807b x27/s11 00007fff853b807c x28/t3 00007fff8526eac0 x29/t4 0000000000000010 x30/t5 0000000000000005 x31/t6 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff8010edf4 mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a2 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff801231a8 sepc ffffffff830cee4e mcause 8000000000000003 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8010edf4 x2/sp ffffaf800cac33f0 x3/gp ffffffff85863ac0 x4/tp ffffaf800ec89840 x5/t0 ffffffff86be4770 x6/t1 fffff5ef019585f8 x7/t2 0000000000000000 x8/s0 ffffaf800cac3420 x9/s1 ffffaf800cac3460 x10/a0 ffffaf800cac3463 x11/a1 0000000000000007 x12/a2 1ffffffff0ce1f7e x13/a3 ffffffff8010edf4 x14/a4 0000000000000003 x15/a5 0000000000000005 x16/a6 ffffaf800cac3463 x17/a7 ffffaf800cac2fc7 x18/s2 000000000000002e x19/s3 000000000000002b x20/s4 ffffaf800ec8a288 x21/s5 ffffffff85889780 x22/s6 ffffaf800ec8a288 x23/s7 ffffaf800ec8a260 x24/s8 ffffaf800ec89840 x25/s9 ffffffff85fa4048 x26/s10 ffffffff85899680 x27/s11 ffffaf800ec89840 x28/t3 0000000038303430 x29/t4 fffff5ef019585f8 x30/t5 fffff5ef019585f9 x31/t6 ffffaf800cac2fd8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000