program 3: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x2, &(0x7f00000017c0)=ANY=[@ANYBLOB='discard,logbufs=00000000000000000002,swalloc,prjquota,uquota,attr2,filestreams']) 01:40:56 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1d17}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) inotify_init() exit_group(0x0) mkdir(0x0, 0x68) getpgid(0x0) [ 804.885033][T19470] bridge20: port 1(syz_tun) entered disabled state [ 804.900279][T19470] device syz_tun entered promiscuous mode [ 804.909642][T19470] device syz_tun left promiscuous mode [ 804.917083][T19485] loop2: detected capacity change from 0 to 256 [ 804.924009][T19470] bridge20: port 1(syz_tun) entered disabled state 01:40:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:40:56 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc200000100000000", 0x37, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 805.076674][T19506] XFS: attr2 mount option is deprecated. [ 805.115729][T19506] XFS (loop3): Invalid superblock magic number [ 805.134671][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 805.151046][T19531] loop2: detected capacity change from 0 to 256 [ 805.151600][T19523] bridge20: port 1(syz_tun) entered blocking state [ 805.169476][T19523] bridge20: port 1(syz_tun) entered disabled state [ 805.171838][T19506] XFS: attr2 mount option is deprecated. [ 805.176687][T19523] device syz_tun entered promiscuous mode [ 805.193239][T19523] device syz_tun left promiscuous mode [ 805.201428][T19523] bridge20: port 1(syz_tun) entered disabled state [ 805.239241][T19506] XFS (loop3): Invalid superblock magic number [ 805.298163][ T9513] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 805.570361][ T9513] usb 5-1: Using ep0 maxpacket: 8 01:40:57 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a", 0x7}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:40:57 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1d17}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) inotify_init() exit_group(0x0) mkdir(0x0, 0x68) getpgid(0x0) 01:40:57 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc200000100000000", 0x37, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:40:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:40:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000380)={'macvtap0\x00', 0x0}) [ 805.703201][ T9513] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 805.719909][ T9513] usb 5-1: config 1 has no interface number 1 [ 805.733992][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 805.757959][ T9513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 805.790466][T19585] bridge20: port 1(syz_tun) entered blocking state [ 805.798854][T19585] bridge20: port 1(syz_tun) entered disabled state 01:40:57 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40049409, &(0x7f0000000280)={0x0}) 01:40:57 executing program 3: r0 = eventfd(0xd16) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 805.808485][ T9513] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.819278][T19585] device syz_tun entered promiscuous mode [ 805.836526][T19578] bridge20: port 2(batadv_slave_0) entered blocking state [ 805.848477][T19578] bridge20: port 2(batadv_slave_0) entered disabled state [ 805.870055][ T9513] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 805.888956][T19593] loop2: detected capacity change from 0 to 256 [ 805.890113][T19578] device batadv_slave_0 entered promiscuous mode [ 806.084608][ T9513] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.097019][ T9513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.106252][ T9513] usb 5-1: Product: syz [ 806.110446][ T9513] usb 5-1: Manufacturer: syz [ 806.115900][ T9513] usb 5-1: SerialNumber: syz [ 806.461382][ T9513] usb 5-1: USB disconnect, device number 33 [ 807.133017][ T9513] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 807.395138][ T9513] usb 5-1: Using ep0 maxpacket: 8 [ 807.445858][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.452160][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.536640][ T9513] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 807.545796][ T9513] usb 5-1: config 1 has no interface number 1 [ 807.552772][ T9513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 807.566156][ T9513] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.577443][ T9513] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 807.758097][ T9513] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.767210][ T9513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.775949][ T9513] usb 5-1: Product: syz [ 807.780396][ T9513] usb 5-1: Manufacturer: syz [ 807.785004][ T9513] usb 5-1: SerialNumber: syz 01:40:59 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 01:40:59 executing program 3: r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001f80)='devlink\x00', r0) 01:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:40:59 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc200000100000000", 0x37, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:40:59 executing program 4: syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @mixer_unit={0x5}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 01:40:59 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a", 0x7}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:40:59 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x37fdffa945dd8649) write$sndseq(r0, &(0x7f0000000000)=[{0x7f, 0x1, 0x0, 0x9, @time={0xc0000000, 0x9}, {0x72, 0x20}, {0x0, 0x1f}, @queue={0x1f, {0x6c5c, 0x7fff}}}, {0x6, 0x80, 0x0, 0x80, @time={0x180000, 0x81}, {0x6, 0x33}, {0xf4, 0x8f}, @control={0x4, 0x7fff, 0x6}}, {0x1, 0x3, 0x8, 0x1, @time={0xf4e, 0x2}, {0x1, 0x4e}, {0x5, 0xff}, @queue={0x40, {0x7fffffff, 0x6}}}, {0x8, 0xa4, 0x5, 0x1, @time={0x859, 0x6}, {0x0, 0xfd}, {0x3f, 0x1}, @raw8={"17220bf0c99dcf54ac4970d1"}}], 0x70) 01:40:59 executing program 3: clock_gettime(0xb, &(0x7f0000005f40)) [ 808.024636][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 808.057498][T19646] device syz_tun left promiscuous mode [ 808.074085][ T9513] usb 5-1: USB disconnect, device number 34 [ 808.094957][T19646] bridge20: port 1(syz_tun) entered disabled state [ 808.101773][T19674] loop2: detected capacity change from 0 to 256 01:40:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x408c5333, &(0x7f0000000240)) 01:40:59 executing program 3: sendto$rose(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x40) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, 0x0, r0}, &(0x7f0000000240)=""/152, 0x98, &(0x7f0000000380)={0x0, &(0x7f0000000340)="d2b8ef50cdf994", 0x7}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, &(0x7f00000005c0)) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000680), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x20010004) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/vsock\x00', 0x8000, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={0x0}}, 0x80) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', 0x4) syz_mount_image$vxfs(&(0x7f0000001f40)='vxfs\x00', &(0x7f0000001f80)='./file0\x00', 0x0, 0x2, &(0x7f0000002140)=[{&(0x7f0000001fc0)="86a7311f2709e561fcdf58037429a94b4a94a856f0a12ee67428ec0a285fbdc328258f585226fa63e2f1c8b5d2c5fec8fc6791d6d7df03bae6b8d5b86d2114d2d996aaf17a8dddd426a9c2f6308668e6d2d46bd82234d1849331c3e2ab19b59a", 0x60, 0x3}, {0x0}], 0x2000000, &(0x7f0000002180)={[{'sha384-arm\x00'}, {'syz'}]}) 01:40:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 808.133246][T19646] bridge21: port 1(syz_tun) entered blocking state [ 808.142488][T19646] bridge21: port 1(syz_tun) entered disabled state [ 808.149826][T19646] device syz_tun entered promiscuous mode [ 808.167188][T19677] device batadv_slave_0 left promiscuous mode [ 808.174652][T19677] bridge20: port 2(batadv_slave_0) entered disabled state 01:40:59 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000000000000050", 0x53, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 808.210403][T19677] bridge21: port 2(batadv_slave_0) entered blocking state [ 808.237486][T19677] bridge21: port 2(batadv_slave_0) entered disabled state 01:40:59 executing program 0: fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) [ 808.288923][T19677] device batadv_slave_0 entered promiscuous mode [ 808.304242][T19689] vxfs: WRONG superblock magic 00000000 at 1 [ 808.310435][T19689] vxfs: WRONG superblock magic 00000000 at 8 [ 808.316694][T19689] vxfs: can't find superblock. 01:40:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:41:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40002101) [ 808.339848][T19694] loop2: detected capacity change from 0 to 256 [ 808.364789][T19698] vxfs: WRONG superblock magic 00000000 at 1 [ 808.371210][T19698] vxfs: WRONG superblock magic 00000000 at 8 [ 808.378548][T19698] vxfs: can't find superblock. 01:41:00 executing program 0: syz_io_uring_setup(0x158b, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 808.409395][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 808.438299][T19704] device syz_tun left promiscuous mode [ 808.445390][T19704] bridge21: port 1(syz_tun) entered disabled state [ 808.463812][ T9513] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 808.472676][T19704] bridge22: port 1(syz_tun) entered blocking state [ 808.480994][T19704] bridge22: port 1(syz_tun) entered disabled state [ 808.490503][T19704] device syz_tun entered promiscuous mode [ 808.501115][T19714] device batadv_slave_0 left promiscuous mode [ 808.514294][T19714] bridge21: port 2(batadv_slave_0) entered disabled state [ 808.533354][T19714] bridge22: port 2(batadv_slave_0) entered blocking state [ 808.540589][T19714] bridge22: port 2(batadv_slave_0) entered disabled state [ 808.552724][T19714] device batadv_slave_0 entered promiscuous mode [ 808.715823][ T9513] usb 5-1: Using ep0 maxpacket: 8 [ 808.907695][ T9513] usb 5-1: unable to get BOS descriptor or descriptor too short [ 809.018298][ T9513] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 809.028810][ T9513] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.037860][ T9513] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 809.048568][ T9513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 809.219971][ T9513] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.229211][ T9513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.237462][ T9513] usb 5-1: Product: syz [ 809.241835][ T9513] usb 5-1: Manufacturer: syz [ 809.246509][ T9513] usb 5-1: SerialNumber: syz [ 809.582880][ T9513] usb 5-1: 0:2 : does not exist [ 809.600774][ T9513] usb 5-1: USB disconnect, device number 35 [ 810.278498][ T9558] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 810.520486][ T9558] usb 5-1: Using ep0 maxpacket: 8 [ 810.682081][ T9558] usb 5-1: unable to get BOS descriptor or descriptor too short [ 810.762467][ T9558] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 810.775827][ T9558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.785745][ T9558] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 810.798471][ T9558] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:41:02 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 01:41:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000001640)) 01:41:02 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc20000010000000000", 0x38, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:02 executing program 0: syz_mount_image$pvfs2(&(0x7f0000000140)='pvfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000022c0), 0x0, &(0x7f0000002340)) 01:41:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) 01:41:02 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a71", 0xa}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) [ 810.974476][ T9558] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.983635][ T9558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.992521][ T9558] usb 5-1: Product: syz [ 810.997104][ T9558] usb 5-1: Manufacturer: syz [ 811.001764][ T9558] usb 5-1: SerialNumber: syz [ 811.044693][ T9558] usb 5-1: can't set config #1, error -71 [ 811.055427][ T9558] usb 5-1: USB disconnect, device number 36 01:41:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) close(r0) [ 811.091966][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002840)={0x0, 0x10, &(0x7f0000002780)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000002880)=0x10) 01:41:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f0000000380)={'macvtap0\x00', 0x0}) [ 811.155882][T19767] device syz_tun left promiscuous mode [ 811.177351][T19767] bridge22: port 1(syz_tun) entered disabled state [ 811.184636][T19767] bridge23: port 1(syz_tun) entered blocking state 01:41:02 executing program 4: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) accept(r0, 0x0, &(0x7f0000000500)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x0) syz_mount_image$vxfs(&(0x7f0000001f40)='vxfs\x00', &(0x7f0000001f80)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)=[{0x0}], 0x2000000, &(0x7f0000002180)={[{'syz'}], [{@uid_gt={'uid>', 0xee01}}]}) [ 811.202242][T19767] bridge23: port 1(syz_tun) entered disabled state [ 811.225817][T19767] device syz_tun entered promiscuous mode [ 811.241136][T19760] device batadv_slave_0 left promiscuous mode [ 811.250528][T19760] bridge22: port 2(batadv_slave_0) entered disabled state [ 811.254301][T19777] loop2: detected capacity change from 0 to 256 [ 811.266379][T19760] bridge23: port 2(batadv_slave_0) entered blocking state [ 811.278298][T19760] bridge23: port 2(batadv_slave_0) entered disabled state [ 811.293736][T19760] device batadv_slave_0 entered promiscuous mode 01:41:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) 01:41:02 executing program 0: r0 = socket(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)='X', 0x1) [ 811.305585][T19781] vxfs: WRONG superblock magic 00000000 at 1 [ 811.316187][T19781] vxfs: WRONG superblock magic 00000000 at 8 [ 811.345211][T19781] vxfs: can't find superblock. 01:41:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc20000010000000000", 0x38, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:03 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) inotify_init() exit_group(0xffffffc0) 01:41:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 811.457614][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 811.480418][T19797] device syz_tun left promiscuous mode 01:41:03 executing program 4: syz_read_part_table(0x402, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="020181ffffff01000000ff07000000ffffffa5000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 811.505197][T19797] bridge23: port 1(syz_tun) entered disabled state [ 811.533996][T19797] bridge24: port 1(syz_tun) entered blocking state [ 811.545014][T19797] bridge24: port 1(syz_tun) entered disabled state [ 811.553064][T19797] device syz_tun entered promiscuous mode [ 811.560836][T19806] device batadv_slave_0 left promiscuous mode [ 811.567372][T19806] bridge23: port 2(batadv_slave_0) entered disabled state 01:41:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) [ 811.579040][T19806] bridge24: port 2(batadv_slave_0) entered blocking state [ 811.591901][T19806] bridge24: port 2(batadv_slave_0) entered disabled state [ 811.599788][T19812] loop4: detected capacity change from 0 to 2 [ 811.610286][T19806] device batadv_slave_0 entered promiscuous mode [ 811.639972][T19812] loop4: p1 p2 p3 p4 [ 811.644211][T19812] loop4: partition table partially beyond EOD, truncated [ 811.653552][T19812] loop4: p1 size 2047 extends beyond EOD, truncated [ 811.661146][T19812] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 811.669322][T19812] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 811.677876][T19812] loop4: p4 size 32768 extends beyond EOD, truncated [ 811.695588][T19817] loop2: detected capacity change from 0 to 256 [ 811.709495][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 811.723128][T19825] device syz_tun left promiscuous mode [ 811.729125][T19825] bridge24: port 1(syz_tun) entered disabled state [ 811.736243][T19825] bridge25: port 1(syz_tun) entered blocking state [ 811.744229][T19825] bridge25: port 1(syz_tun) entered disabled state [ 811.755997][T19825] device syz_tun entered promiscuous mode [ 811.767684][T19825] device batadv_slave_0 left promiscuous mode [ 811.775726][T19812] loop4: detected capacity change from 0 to 2 [ 811.777351][T19825] bridge24: port 2(batadv_slave_0) entered disabled state [ 811.811182][T19825] bridge25: port 2(batadv_slave_0) entered blocking state [ 811.818577][T19825] bridge25: port 2(batadv_slave_0) entered disabled state [ 811.827402][T19825] device batadv_slave_0 entered promiscuous mode [ 811.841682][T19812] loop4: p1 p2 p3 p4 [ 811.848430][T19812] loop4: partition table partially beyond EOD, truncated [ 811.857026][T19812] loop4: p1 size 2047 extends beyond EOD, truncated [ 811.864481][T19812] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 811.873013][T19812] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 811.881041][T19812] loop4: p4 size 32768 extends beyond EOD, truncated [ 811.891105][ T4836] loop4: p1 p2 p3 p4 [ 811.895699][ T4836] loop4: partition table partially beyond EOD, truncated 01:41:03 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a71", 0xa}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:03 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) inotify_init() exit_group(0xffffffc0) [ 811.907458][ T4836] loop4: p1 size 2047 extends beyond EOD, truncated [ 811.916443][ T4836] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 811.925349][ T4836] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 811.935184][ T4836] loop4: p4 size 32768 extends beyond EOD, truncated 01:41:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) 01:41:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc20000010000000000", 0x38, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:41:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:03 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003f40)='/proc/partitions\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x0) [ 812.136353][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 812.164612][T19873] device syz_tun left promiscuous mode [ 812.175266][T19873] bridge25: port 1(syz_tun) entered disabled state 01:41:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 01:41:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 812.195914][T19873] bridge26: port 1(syz_tun) entered blocking state [ 812.204490][T19873] bridge26: port 1(syz_tun) entered disabled state [ 812.227105][T19873] device syz_tun entered promiscuous mode [ 812.268834][T19882] device batadv_slave_0 left promiscuous mode [ 812.277483][T19882] bridge25: port 2(batadv_slave_0) entered disabled state [ 812.296449][T19893] loop2: detected capacity change from 0 to 256 [ 812.307041][T19882] bridge26: port 2(batadv_slave_0) entered blocking state [ 812.325165][T19882] bridge26: port 2(batadv_slave_0) entered disabled state [ 812.345866][T19882] device batadv_slave_0 entered promiscuous mode [ 812.360661][T19896] overlayfs: './file0' not a directory 01:41:03 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 01:41:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 812.421209][ T36] audit: type=1804 audit(6971967663.995:56): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1751/bus/bus/file0" dev="overlay" ino=16025 res=1 errno=0 [ 812.515160][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 812.526955][T19915] loop2: detected capacity change from 0 to 256 [ 812.550701][T19913] device syz_tun left promiscuous mode [ 812.556382][T19913] bridge26: port 1(syz_tun) entered disabled state [ 812.642163][T19913] bridge27: port 1(syz_tun) entered blocking state [ 812.657738][T19913] bridge27: port 1(syz_tun) entered disabled state [ 812.665306][T19913] device syz_tun entered promiscuous mode [ 812.672867][T19924] device batadv_slave_0 left promiscuous mode [ 812.680312][T19924] bridge26: port 2(batadv_slave_0) entered disabled state [ 812.690952][T19924] bridge27: port 2(batadv_slave_0) entered blocking state [ 812.699067][T19924] bridge27: port 2(batadv_slave_0) entered disabled state [ 812.707493][T19924] device batadv_slave_0 entered promiscuous mode 01:41:04 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a71", 0xa}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:04 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 812.865475][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 812.898870][T19934] device syz_tun left promiscuous mode [ 812.908798][T19939] loop2: detected capacity change from 0 to 256 01:41:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 812.920147][T19934] bridge27: port 1(syz_tun) entered disabled state [ 812.935462][T19934] bridge28: port 1(syz_tun) entered blocking state [ 812.943023][T19934] bridge28: port 1(syz_tun) entered disabled state [ 812.979945][T19934] device syz_tun entered promiscuous mode [ 813.002814][T19934] device batadv_slave_0 left promiscuous mode [ 813.031578][T19934] bridge27: port 2(batadv_slave_0) entered disabled state [ 813.040242][T19934] bridge28: port 2(batadv_slave_0) entered blocking state 01:41:04 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f4248526653", 0x46, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 813.107635][T19934] bridge28: port 2(batadv_slave_0) entered disabled state [ 813.135227][T19934] device batadv_slave_0 entered promiscuous mode 01:41:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:41:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 01:41:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) [ 813.185513][T19955] loop2: detected capacity change from 0 to 256 01:41:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 813.233685][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 813.290741][T19968] device syz_tun left promiscuous mode [ 813.309693][T19968] bridge28: port 1(syz_tun) entered disabled state [ 813.331883][T19968] bridge29: port 1(syz_tun) entered blocking state [ 813.348572][T19968] bridge29: port 1(syz_tun) entered disabled state [ 813.360159][T19968] device syz_tun entered promiscuous mode [ 813.369734][T19960] device batadv_slave_0 left promiscuous mode [ 813.380071][T19960] bridge28: port 2(batadv_slave_0) entered disabled state [ 813.424292][T19960] bridge29: port 2(batadv_slave_0) entered blocking state [ 813.433891][T19960] bridge29: port 2(batadv_slave_0) entered disabled state [ 813.443842][T19960] device batadv_slave_0 entered promiscuous mode 01:41:05 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2", 0xc}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) 01:41:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 813.831448][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 813.859710][T19987] device syz_tun left promiscuous mode [ 813.865578][T19987] bridge29: port 1(syz_tun) entered disabled state 01:41:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) [ 813.878230][T19987] bridge30: port 1(syz_tun) entered blocking state [ 813.880445][T19992] loop2: detected capacity change from 0 to 256 [ 813.904324][T19987] bridge30: port 1(syz_tun) entered disabled state [ 813.915769][T19987] device syz_tun entered promiscuous mode 01:41:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 813.953453][T19996] device batadv_slave_0 left promiscuous mode [ 813.961164][T19996] bridge29: port 2(batadv_slave_0) entered disabled state [ 813.975476][T19996] bridge30: port 2(batadv_slave_0) entered blocking state [ 813.984765][T19996] bridge30: port 2(batadv_slave_0) entered disabled state [ 813.996591][T19996] device batadv_slave_0 entered promiscuous mode 01:41:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 814.070150][T20005] loop2: detected capacity change from 0 to 256 [ 814.090486][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.108375][T20007] device syz_tun left promiscuous mode 01:41:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 814.116568][T20007] bridge30: port 1(syz_tun) entered disabled state [ 814.123932][T20007] bridge31: port 1(syz_tun) entered blocking state [ 814.145920][T20007] bridge31: port 1(syz_tun) entered disabled state [ 814.155876][T20007] device syz_tun entered promiscuous mode 01:41:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 814.188083][T20015] device batadv_slave_0 left promiscuous mode [ 814.211812][T20015] bridge30: port 2(batadv_slave_0) entered disabled state [ 814.222328][T20015] bridge31: port 2(batadv_slave_0) entered blocking state [ 814.230005][T20015] bridge31: port 2(batadv_slave_0) entered disabled state 01:41:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 814.254410][T20015] device batadv_slave_0 entered promiscuous mode [ 814.343886][T20026] loop2: detected capacity change from 0 to 256 01:41:06 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2", 0xc}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) 01:41:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 814.714301][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.735828][T20038] device syz_tun left promiscuous mode [ 814.748065][T20038] bridge31: port 1(syz_tun) entered disabled state [ 814.760835][T20038] bridge32: port 1(syz_tun) entered blocking state [ 814.771264][T20038] bridge32: port 1(syz_tun) entered disabled state [ 814.778709][T20044] loop2: detected capacity change from 0 to 256 [ 814.791787][T20038] device syz_tun entered promiscuous mode [ 814.799872][T20046] device batadv_slave_0 left promiscuous mode [ 814.809356][T20046] bridge31: port 2(batadv_slave_0) entered disabled state [ 814.843423][T20046] bridge32: port 2(batadv_slave_0) entered blocking state [ 814.853104][ T36] audit: type=1804 audit(6971967666.405:57): pid=20052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1761/bus/file0" dev="sda1" ino=14070 res=1 errno=0 01:41:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 814.897322][T20046] bridge32: port 2(batadv_slave_0) entered disabled state [ 814.905340][T20046] device batadv_slave_0 entered promiscuous mode 01:41:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) [ 814.972778][ T36] audit: type=1804 audit(6971967666.524:58): pid=20059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1762/bus/file0" dev="sda1" ino=14070 res=1 errno=0 [ 814.991048][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 815.018844][T20061] device syz_tun left promiscuous mode [ 815.026259][T20061] bridge32: port 1(syz_tun) entered disabled state [ 815.065160][T20061] bridge33: port 1(syz_tun) entered blocking state [ 815.071923][ T36] audit: type=1804 audit(6971967666.614:59): pid=20066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1763/bus/file0" dev="sda1" ino=14056 res=1 errno=0 [ 815.105916][T20061] bridge33: port 1(syz_tun) entered disabled state 01:41:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:41:06 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700", 0x4a, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 815.120337][T20061] device syz_tun entered promiscuous mode [ 815.144361][T20067] device batadv_slave_0 left promiscuous mode [ 815.151786][T20067] bridge32: port 2(batadv_slave_0) entered disabled state [ 815.172417][T20067] bridge33: port 2(batadv_slave_0) entered blocking state [ 815.193146][T20067] bridge33: port 2(batadv_slave_0) entered disabled state [ 815.198552][T20076] loop2: detected capacity change from 0 to 256 [ 815.212616][T20074] overlayfs: failed to resolve './file0': -2 [ 815.217559][T20067] device batadv_slave_0 entered promiscuous mode [ 815.228696][ T36] audit: type=1804 audit(6971967666.772:60): pid=20074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1764/bus/file0" dev="sda1" ino=14103 res=1 errno=0 01:41:07 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2", 0xc}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) 01:41:07 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 815.661190][T20093] overlayfs: failed to resolve './file0': -2 [ 815.676605][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 815.688059][ T36] audit: type=1804 audit(6971967667.239:61): pid=20093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1765/bus/file0" dev="sda1" ino=14214 res=1 errno=0 [ 815.726964][T20097] loop2: detected capacity change from 0 to 256 [ 815.730586][T20103] device syz_tun left promiscuous mode [ 815.738412][T20102] overlayfs: failed to resolve './file0': -2 [ 815.751944][T20103] bridge33: port 1(syz_tun) entered disabled state 01:41:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 815.761496][ T36] audit: type=1804 audit(6971967667.298:62): pid=20102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1766/bus/file0" dev="sda1" ino=14214 res=1 errno=0 [ 815.805854][T20103] bridge34: port 1(syz_tun) entered blocking state 01:41:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:07 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) [ 815.832779][T20103] bridge34: port 1(syz_tun) entered disabled state [ 815.866873][T20103] device syz_tun entered promiscuous mode [ 815.902657][T20094] device batadv_slave_0 left promiscuous mode [ 815.912907][T20094] bridge33: port 2(batadv_slave_0) entered disabled state [ 815.934673][T20094] bridge34: port 2(batadv_slave_0) entered blocking state [ 815.963509][T20094] bridge34: port 2(batadv_slave_0) entered disabled state [ 815.982708][T20094] device batadv_slave_0 entered promiscuous mode 01:41:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 01:41:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 816.016331][T20118] loop2: detected capacity change from 0 to 256 01:41:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "a1e83167"}]}}, 0x0}, 0x0) 01:41:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e00f01ca6766c7442402050000006766c744240600000000670f0114240f01d1e38336f08301dc660f38816bad66b9ae0b000066b80000000066ba000000800f30d9ed260f01d5c9", 0x53}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000072000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xeffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 816.085247][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 816.101159][T20126] device syz_tun left promiscuous mode [ 816.106907][T20126] bridge34: port 1(syz_tun) entered disabled state [ 816.113894][T20126] bridge35: port 1(syz_tun) entered blocking state [ 816.120853][T20126] bridge35: port 1(syz_tun) entered disabled state [ 816.149428][T20126] device syz_tun entered promiscuous mode [ 816.183932][T20136] device batadv_slave_0 left promiscuous mode [ 816.201138][T20136] bridge34: port 2(batadv_slave_0) entered disabled state [ 816.230348][T20136] bridge35: port 2(batadv_slave_0) entered blocking state [ 816.244888][T20136] bridge35: port 2(batadv_slave_0) entered disabled state [ 816.264064][T20136] device batadv_slave_0 entered promiscuous mode [ 816.455738][ T9558] usb 4-1: new high-speed USB device number 34 using dummy_hcd 01:41:08 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:08 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 01:41:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000001240), &(0x7f0000001280)=0x40) [ 816.547914][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 816.572432][T20154] device syz_tun left promiscuous mode [ 816.587751][T20154] bridge35: port 1(syz_tun) entered disabled state 01:41:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:08 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000380)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x74c) [ 816.610158][T20154] bridge36: port 1(syz_tun) entered blocking state [ 816.617793][T20154] bridge36: port 1(syz_tun) entered disabled state [ 816.630272][T20164] loop2: detected capacity change from 0 to 256 [ 816.637912][T20154] device syz_tun entered promiscuous mode [ 816.645452][T20166] device batadv_slave_0 left promiscuous mode [ 816.662116][T20166] bridge35: port 2(batadv_slave_0) entered disabled state [ 816.678810][T20166] bridge36: port 2(batadv_slave_0) entered blocking state [ 816.686578][T20166] bridge36: port 2(batadv_slave_0) entered disabled state [ 816.694624][T20166] device batadv_slave_0 entered promiscuous mode 01:41:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 01:41:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x2, 0x0) [ 816.760851][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 816.796030][T20183] device syz_tun left promiscuous mode [ 816.804365][T20183] bridge36: port 1(syz_tun) entered disabled state [ 816.822793][ T9558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.839369][ T9558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.861413][ T9558] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 816.875010][ T9558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.884447][ T9558] usb 4-1: config 0 descriptor?? [ 816.891940][T20183] bridge37: port 1(syz_tun) entered blocking state [ 816.903720][T20183] bridge37: port 1(syz_tun) entered disabled state [ 816.911285][T20183] device syz_tun entered promiscuous mode [ 816.919283][T20191] device batadv_slave_0 left promiscuous mode [ 816.927824][T20191] bridge36: port 2(batadv_slave_0) entered disabled state [ 816.947014][T20191] bridge37: port 2(batadv_slave_0) entered blocking state [ 816.958040][T20191] bridge37: port 2(batadv_slave_0) entered disabled state [ 816.970988][T20191] device batadv_slave_0 entered promiscuous mode [ 817.376520][ T9558] cm6533_jd 0003:0D8C:0022.000B: item fetching failed at offset 0/1 [ 817.384876][ T9558] cm6533_jd 0003:0D8C:0022.000B: parse failed [ 817.402141][ T9558] cm6533_jd: probe of 0003:0D8C:0022.000B failed with error -22 [ 817.579409][ T3631] usb 4-1: USB disconnect, device number 34 [ 818.353892][ T9558] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 818.716855][ T9558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.729257][ T9558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.739621][ T9558] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 818.749080][ T9558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.758982][ T9558] usb 4-1: config 0 descriptor?? [ 819.060543][ T9558] cm6533_jd 0003:0D8C:0022.000C: item fetching failed at offset 0/1 [ 819.069030][ T9558] cm6533_jd 0003:0D8C:0022.000C: parse failed [ 819.085024][ T9558] cm6533_jd: probe of 0003:0D8C:0022.000C failed with error -22 01:41:10 executing program 3: add_key$fscrypt_v1(&(0x7f0000000380)='logon\x00', 0x0, &(0x7f0000000400)={0x0, "4388f759d8ad0b2848b19d602bbaf643036cb904729c79d921a5e49eb3561c4447e51d365b3c7621f2c58251aeb9e25e8bac94c3dacd12ce23a4ebcc790db6ba"}, 0x48, 0xfffffffffffffffd) 01:41:10 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07", 0x49, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:10 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x20}}, 0x0) 01:41:10 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) [ 819.152433][ T9558] usb 4-1: USB disconnect, device number 35 [ 819.200893][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 819.223769][T20242] overlayfs: failed to resolve './file1': -2 [ 819.236784][T20238] device syz_tun left promiscuous mode 01:41:10 executing program 3: keyctl$read(0x12, 0x0, 0x0, 0x0) 01:41:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 819.245687][ T36] audit: type=1804 audit(6971967670.770:63): pid=20242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1773/bus/file0" dev="sda1" ino=14595 res=1 errno=0 [ 819.289980][T20238] bridge37: port 1(syz_tun) entered disabled state 01:41:10 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 819.322001][T20251] loop2: detected capacity change from 0 to 256 [ 819.330149][T20238] bridge38: port 1(syz_tun) entered blocking state [ 819.354063][T20238] bridge38: port 1(syz_tun) entered disabled state 01:41:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 819.381804][T20238] device syz_tun entered promiscuous mode [ 819.399742][T20250] device batadv_slave_0 left promiscuous mode [ 819.412675][T20250] bridge37: port 2(batadv_slave_0) entered disabled state [ 819.424607][T20250] bridge38: port 2(batadv_slave_0) entered blocking state [ 819.433920][T20250] bridge38: port 2(batadv_slave_0) entered disabled state [ 819.467270][T20262] overlayfs: failed to resolve './file1': -2 01:41:11 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x20}}, 0x0) [ 819.484254][T20250] device batadv_slave_0 entered promiscuous mode [ 819.499809][ T36] audit: type=1804 audit(6971967671.018:64): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1774/bus/file0" dev="sda1" ino=14499 res=1 errno=0 01:41:11 executing program 4: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 819.607638][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 819.642558][T20273] device syz_tun left promiscuous mode [ 819.652039][T20273] bridge38: port 1(syz_tun) entered disabled state [ 819.667504][T20279] overlayfs: failed to resolve './file1': -2 [ 819.675720][T20273] bridge39: port 1(syz_tun) entered blocking state 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 819.688986][ T36] audit: type=1804 audit(6971967671.206:65): pid=20279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1775/bus/file0" dev="sda1" ino=14547 res=1 errno=0 [ 819.724383][T20273] bridge39: port 1(syz_tun) entered disabled state [ 819.747949][T20273] device syz_tun entered promiscuous mode 01:41:11 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 819.758803][T20286] loop2: detected capacity change from 0 to 256 [ 819.769395][T20285] device batadv_slave_0 left promiscuous mode [ 819.778438][T20285] bridge38: port 2(batadv_slave_0) entered disabled state [ 819.802108][T20291] overlayfs: failed to resolve './file1': -2 [ 819.808665][T20285] bridge39: port 2(batadv_slave_0) entered blocking state [ 819.816337][T20285] bridge39: port 2(batadv_slave_0) entered disabled state [ 819.830475][T20285] device batadv_slave_0 entered promiscuous mode [ 819.839004][ T36] audit: type=1804 audit(6971967671.355:66): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1776/bus/file0" dev="sda1" ino=14547 res=1 errno=0 01:41:11 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:11 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:11 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x20}}, 0x0) 01:41:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 820.131681][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 820.141500][T20307] overlayfs: failed to resolve './file1': -2 01:41:11 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 820.165286][ T36] audit: type=1804 audit(6971967671.672:67): pid=20307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1777/bus/file0" dev="sda1" ino=14611 res=1 errno=0 [ 820.171980][T20308] device syz_tun left promiscuous mode [ 820.209738][T20308] bridge39: port 1(syz_tun) entered disabled state [ 820.219041][T20308] bridge40: port 1(syz_tun) entered blocking state 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 820.248266][T20308] bridge40: port 1(syz_tun) entered disabled state [ 820.253396][T20316] loop2: detected capacity change from 0 to 256 [ 820.270360][T20308] device syz_tun entered promiscuous mode [ 820.278400][T20318] device batadv_slave_0 left promiscuous mode [ 820.295551][T20324] overlayfs: failed to resolve './file1': -2 [ 820.306409][ T36] audit: type=1804 audit(6971967671.821:68): pid=20324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1778/bus/file0" dev="sda1" ino=14055 res=1 errno=0 01:41:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 820.347688][T20318] bridge39: port 2(batadv_slave_0) entered disabled state [ 820.383985][T20318] bridge40: port 2(batadv_slave_0) entered blocking state 01:41:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 820.401845][T20318] bridge40: port 2(batadv_slave_0) entered disabled state [ 820.423508][T20318] device batadv_slave_0 entered promiscuous mode 01:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486"], 0x20}}, 0x0) [ 820.515654][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 820.546783][T20337] device syz_tun left promiscuous mode [ 820.559426][T20337] bridge40: port 1(syz_tun) entered disabled state [ 820.577022][T20337] bridge41: port 1(syz_tun) entered blocking state [ 820.587686][T20337] bridge41: port 1(syz_tun) entered disabled state [ 820.605183][T20337] device syz_tun entered promiscuous mode [ 820.619368][T20341] device batadv_slave_0 left promiscuous mode [ 820.637313][T20341] bridge40: port 2(batadv_slave_0) entered disabled state [ 820.685932][T20341] bridge41: port 2(batadv_slave_0) entered blocking state [ 820.700812][T20341] bridge41: port 2(batadv_slave_0) entered disabled state [ 820.718300][T20341] device batadv_slave_0 entered promiscuous mode 01:41:12 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:12 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:12 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486"], 0x20}}, 0x0) [ 820.991157][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:12 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 821.044606][T20358] loop2: detected capacity change from 0 to 256 [ 821.047463][T20362] device syz_tun left promiscuous mode 01:41:12 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 821.084195][T20362] bridge41: port 1(syz_tun) entered disabled state [ 821.099596][T20362] bridge42: port 1(syz_tun) entered blocking state [ 821.110343][T20362] bridge42: port 1(syz_tun) entered disabled state [ 821.121907][T20362] device syz_tun entered promiscuous mode [ 821.132982][T20351] device batadv_slave_0 left promiscuous mode [ 821.144833][T20351] bridge41: port 2(batadv_slave_0) entered disabled state [ 821.179371][T20351] bridge42: port 2(batadv_slave_0) entered blocking state 01:41:12 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486"], 0x20}}, 0x0) [ 821.203014][T20351] bridge42: port 2(batadv_slave_0) entered disabled state [ 821.230793][T20351] device batadv_slave_0 entered promiscuous mode [ 821.316833][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 821.357480][T20384] device syz_tun left promiscuous mode [ 821.369623][T20384] bridge42: port 1(syz_tun) entered disabled state [ 821.381951][T20384] bridge43: port 1(syz_tun) entered blocking state [ 821.400822][T20384] bridge43: port 1(syz_tun) entered disabled state [ 821.423191][T20384] device syz_tun entered promiscuous mode [ 821.438263][T20388] device batadv_slave_0 left promiscuous mode [ 821.451205][T20388] bridge42: port 2(batadv_slave_0) entered disabled state [ 821.464947][T20388] bridge43: port 2(batadv_slave_0) entered blocking state [ 821.478131][T20388] bridge43: port 2(batadv_slave_0) entered disabled state [ 821.495019][T20388] device batadv_slave_0 entered promiscuous mode 01:41:13 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:13 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f", 0x47, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:13 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:13 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) 01:41:13 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 821.898463][T20398] loop2: detected capacity change from 0 to 256 01:41:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:13 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 821.984915][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:13 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:13 executing program 0: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 822.038386][T20417] device syz_tun left promiscuous mode [ 822.075409][T20417] bridge43: port 1(syz_tun) entered disabled state 01:41:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 822.106109][T20417] bridge44: port 1(syz_tun) entered blocking state [ 822.119822][T20417] bridge44: port 1(syz_tun) entered disabled state [ 822.150248][T20417] device syz_tun entered promiscuous mode [ 822.161709][T20408] device batadv_slave_0 left promiscuous mode [ 822.172147][T20408] bridge43: port 2(batadv_slave_0) entered disabled state [ 822.214171][T20408] bridge44: port 2(batadv_slave_0) entered blocking state [ 822.229721][T20408] bridge44: port 2(batadv_slave_0) entered disabled state [ 822.250949][T20436] overlayfs: failed to resolve './file0': -2 [ 822.262343][T20408] device batadv_slave_0 entered promiscuous mode [ 822.271648][ T36] audit: type=1804 audit(6971967673.765:69): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1785/bus/file0" dev="sda1" ino=14075 res=1 errno=0 01:41:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:14 executing program 0: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:14 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) [ 822.766066][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 822.767728][T20448] overlayfs: failed to resolve './file0': -2 [ 822.789557][T20450] device syz_tun left promiscuous mode [ 822.811695][T20450] bridge44: port 1(syz_tun) entered disabled state [ 822.825450][T20450] bridge45: port 1(syz_tun) entered blocking state [ 822.831378][ T36] audit: type=1804 audit(6971967674.321:70): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1786/bus/file0" dev="sda1" ino=14325 res=1 errno=0 [ 822.836394][T20450] bridge45: port 1(syz_tun) entered disabled state 01:41:14 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 01:41:14 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:14 executing program 0: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 822.919424][T20450] device syz_tun entered promiscuous mode [ 822.933593][T20456] device batadv_slave_0 left promiscuous mode [ 822.979499][T20462] overlayfs: failed to resolve './file0': -2 [ 822.987906][T20456] bridge44: port 2(batadv_slave_0) entered disabled state 01:41:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 823.011067][ T36] audit: type=1804 audit(6971967674.499:71): pid=20462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1787/bus/file0" dev="sda1" ino=14260 res=1 errno=0 01:41:14 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 823.102082][T20456] bridge45: port 2(batadv_slave_0) entered blocking state 01:41:14 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='reskan']) 01:41:14 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 823.123473][ T36] audit: type=1804 audit(6971967674.559:72): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1788/bus/file0" dev="sda1" ino=14260 res=1 errno=0 [ 823.172266][T20456] bridge45: port 2(batadv_slave_0) entered disabled state [ 823.187365][T20456] device batadv_slave_0 entered promiscuous mode 01:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32], 0x20}}, 0x0) [ 823.284270][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.316251][T20489] device syz_tun left promiscuous mode [ 823.330615][T20489] bridge45: port 1(syz_tun) entered disabled state [ 823.341116][T20489] bridge46: port 1(syz_tun) entered blocking state [ 823.351950][T20489] bridge46: port 1(syz_tun) entered disabled state [ 823.362217][T20489] device syz_tun entered promiscuous mode [ 823.375652][T20489] device batadv_slave_0 left promiscuous mode [ 823.383461][T20489] bridge45: port 2(batadv_slave_0) entered disabled state [ 823.406548][T20489] bridge46: port 2(batadv_slave_0) entered blocking state [ 823.428953][T20489] bridge46: port 2(batadv_slave_0) entered disabled state [ 823.439993][T20489] device batadv_slave_0 entered promiscuous mode 01:41:15 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:15 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:15 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 01:41:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r10], 0x20}}, 0x0) 01:41:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) 01:41:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 823.680580][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:41:15 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 823.728628][T20514] device syz_tun left promiscuous mode [ 823.741278][T20514] bridge46: port 1(syz_tun) entered disabled state [ 823.744069][T20517] loop2: detected capacity change from 0 to 256 [ 823.768611][T20514] bridge47: port 1(syz_tun) entered blocking state [ 823.784709][T20514] bridge47: port 1(syz_tun) entered disabled state [ 823.800285][T20514] device syz_tun entered promiscuous mode [ 823.814552][T20524] device batadv_slave_0 left promiscuous mode [ 823.848886][T20524] bridge46: port 2(batadv_slave_0) entered disabled state [ 823.864325][T20524] bridge47: port 2(batadv_slave_0) entered blocking state [ 823.872918][T20524] bridge47: port 2(batadv_slave_0) entered disabled state 01:41:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 823.909505][T20524] device batadv_slave_0 entered promiscuous mode 01:41:15 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:15 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 01:41:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r10], 0x20}}, 0x0) [ 824.047075][T20540] device syz_tun left promiscuous mode [ 824.062629][T20540] bridge47: port 1(syz_tun) entered disabled state [ 824.086982][T20540] bridge48: port 1(syz_tun) entered blocking state [ 824.130707][T20540] bridge48: port 1(syz_tun) entered disabled state [ 824.141477][T20540] device syz_tun entered promiscuous mode [ 824.151270][T20547] device batadv_slave_0 left promiscuous mode [ 824.161145][T20547] bridge47: port 2(batadv_slave_0) entered disabled state [ 824.179464][T20549] loop2: detected capacity change from 0 to 256 [ 824.190379][T20547] bridge48: port 2(batadv_slave_0) entered blocking state [ 824.208330][T20547] bridge48: port 2(batadv_slave_0) entered disabled state [ 824.230272][T20547] device batadv_slave_0 entered promiscuous mode 01:41:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:16 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:16 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 01:41:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r10], 0x20}}, 0x0) 01:41:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) [ 824.574497][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 824.574511][ T36] audit: type=1804 audit(6971967676.057:77): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1793/bus/file0" dev="sda1" ino=14723 res=1 errno=0 01:41:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 824.611297][T20569] __nla_validate_parse: 1 callbacks suppressed [ 824.611312][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.658101][T20569] device syz_tun left promiscuous mode 01:41:16 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 824.666110][T20569] bridge48: port 1(syz_tun) entered disabled state [ 824.680604][T20574] loop2: detected capacity change from 0 to 256 [ 824.707814][T20569] bridge49: port 1(syz_tun) entered blocking state [ 824.722810][T20569] bridge49: port 1(syz_tun) entered disabled state [ 824.732372][T20578] overlayfs: missing 'lowerdir' [ 824.737866][T20569] device syz_tun entered promiscuous mode [ 824.755619][T20582] device batadv_slave_0 left promiscuous mode [ 824.769064][ T36] audit: type=1804 audit(6971967676.245:78): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1794/bus/file0" dev="sda1" ino=14660 res=1 errno=0 01:41:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 824.836876][T20582] bridge48: port 2(batadv_slave_0) entered disabled state 01:41:16 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:16 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[]) [ 824.874770][T20582] bridge49: port 2(batadv_slave_0) entered blocking state [ 824.943259][T20582] bridge49: port 2(batadv_slave_0) entered disabled state [ 824.962188][T20582] device batadv_slave_0 entered promiscuous mode [ 824.978918][T20594] overlayfs: missing 'lowerdir' 01:41:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}}, 0x0) [ 825.044377][ T36] audit: type=1804 audit(6971967676.503:79): pid=20594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1795/bus/file0" dev="sda1" ino=14342 res=1 errno=0 [ 825.104013][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.150935][T20599] device syz_tun left promiscuous mode [ 825.160088][T20599] bridge49: port 1(syz_tun) entered disabled state [ 825.169277][T20604] loop2: detected capacity change from 0 to 256 [ 825.182325][T20599] bridge50: port 1(syz_tun) entered blocking state [ 825.208434][T20599] bridge50: port 1(syz_tun) entered disabled state [ 825.237134][T20599] device syz_tun entered promiscuous mode [ 825.254680][T20607] device batadv_slave_0 left promiscuous mode [ 825.273557][T20607] bridge49: port 2(batadv_slave_0) entered disabled state [ 825.300883][T20607] bridge50: port 2(batadv_slave_0) entered blocking state [ 825.314701][T20607] bridge50: port 2(batadv_slave_0) entered disabled state [ 825.329730][T20607] device batadv_slave_0 entered promiscuous mode 01:41:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:16 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:41:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}}, 0x0) [ 825.467488][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.473978][T20618] overlayfs: missing 'lowerdir' [ 825.496137][T20621] device syz_tun left promiscuous mode 01:41:17 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 825.506946][T20621] bridge50: port 1(syz_tun) entered disabled state 01:41:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 825.532413][ T36] audit: type=1804 audit(6971967676.999:80): pid=20618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1796/bus/file0" dev="sda1" ino=14804 res=1 errno=0 [ 825.593325][T20621] bridge51: port 1(syz_tun) entered blocking state [ 825.622803][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 825.629620][T20621] bridge51: port 1(syz_tun) entered disabled state [ 825.646167][T20621] device syz_tun entered promiscuous mode [ 825.656596][T20628] device batadv_slave_0 left promiscuous mode [ 825.665075][T20628] bridge50: port 2(batadv_slave_0) entered disabled state [ 825.687838][T20628] bridge51: port 2(batadv_slave_0) entered blocking state [ 825.703447][T20628] bridge51: port 2(batadv_slave_0) entered disabled state [ 825.714564][T20628] device batadv_slave_0 entered promiscuous mode 01:41:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r10], 0x20}}, 0x0) 01:41:17 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 825.770555][T20648] overlayfs: missing 'lowerdir' 01:41:17 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 825.795769][ T36] audit: type=1804 audit(6971967677.267:81): pid=20648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1797/bus/file0" dev="sda1" ino=14421 res=1 errno=0 01:41:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 825.860118][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.886901][T20653] device syz_tun left promiscuous mode [ 825.898584][T20653] bridge51: port 1(syz_tun) entered disabled state [ 825.912712][T20653] bridge52: port 1(syz_tun) entered blocking state [ 825.947249][T20659] overlayfs: missing 'lowerdir' [ 825.961044][ T36] audit: type=1804 audit(6971967677.425:82): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1798/bus/file0" dev="sda1" ino=14947 res=1 errno=0 [ 825.993588][T20653] bridge52: port 1(syz_tun) entered disabled state [ 826.086770][T20653] device syz_tun entered promiscuous mode [ 826.099090][T20660] device batadv_slave_0 left promiscuous mode [ 826.114383][T20660] bridge51: port 2(batadv_slave_0) entered disabled state [ 826.129186][T20660] bridge52: port 2(batadv_slave_0) entered blocking state [ 826.155114][T20660] bridge52: port 2(batadv_slave_0) entered disabled state [ 826.166659][T20660] device batadv_slave_0 entered promiscuous mode 01:41:17 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:17 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 826.361118][T20671] overlayfs: missing 'lowerdir' [ 826.375563][ T36] audit: type=1804 audit(6971967677.832:83): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1799/bus/file0" dev="sda1" ino=14708 res=1 errno=0 [ 827.689622][ T9513] Bluetooth: hci6: command 0x1003 tx timeout [ 827.697697][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 829.786614][ T9162] Bluetooth: hci6: command 0x1001 tx timeout [ 829.801103][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 831.883580][ T9162] Bluetooth: hci6: command 0x1009 tx timeout 01:41:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:41:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100", @ANYRES32=r10], 0x20}}, 0x0) 01:41:27 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:27 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:27 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 835.940279][T20698] overlayfs: missing 'lowerdir' 01:41:27 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 835.970972][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 835.974181][ T36] audit: type=1804 audit(6971967687.354:84): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1800/bus/file0" dev="sda1" ino=14899 res=1 errno=0 01:41:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 836.015856][T20697] device syz_tun left promiscuous mode [ 836.038584][T20697] bridge52: port 1(syz_tun) entered disabled state 01:41:27 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 836.069342][T20697] bridge53: port 1(syz_tun) entered blocking state [ 836.085357][T20697] bridge53: port 1(syz_tun) entered disabled state [ 836.094559][T20712] overlayfs: missing 'lowerdir' [ 836.100716][T20697] device syz_tun entered promiscuous mode 01:41:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 836.110730][ T36] audit: type=1804 audit(6971967687.493:85): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1801/bus/file0" dev="sda1" ino=15171 res=1 errno=0 [ 836.152539][T14026] Bluetooth: hci6: Frame reassembly failed (-84) [ 836.161479][T20714] device batadv_slave_0 left promiscuous mode 01:41:27 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 836.167646][T20714] bridge52: port 2(batadv_slave_0) entered disabled state [ 836.188539][T20714] bridge53: port 2(batadv_slave_0) entered blocking state [ 836.220489][T20714] bridge53: port 2(batadv_slave_0) entered disabled state [ 836.234481][T20726] overlayfs: missing 'lowerdir' [ 836.244785][ T36] audit: type=1804 audit(6971967687.622:86): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1802/bus/file0" dev="sda1" ino=15171 res=1 errno=0 [ 836.246110][T20714] device batadv_slave_0 entered promiscuous mode [ 838.174512][ T9162] Bluetooth: hci6: command 0x1003 tx timeout [ 838.180586][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 840.271503][ T3631] Bluetooth: hci6: command 0x1001 tx timeout [ 840.278182][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 842.378528][ T3631] Bluetooth: hci6: command 0x1009 tx timeout 01:41:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:41:38 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100", @ANYRES32=r10], 0x20}}, 0x0) 01:41:38 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:38 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:38 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 846.906953][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 846.941967][T20745] device syz_tun left promiscuous mode [ 846.959184][T20745] bridge53: port 1(syz_tun) entered disabled state [ 846.963365][T20746] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 846.983795][T20746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 846.993873][T20745] bridge54: port 1(syz_tun) entered blocking state [ 847.003145][ T36] audit: type=1804 audit(6971967698.305:87): pid=20746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1803/bus/file0" dev="sda1" ino=15161 res=1 errno=0 [ 847.012078][T20745] bridge54: port 1(syz_tun) entered disabled state [ 847.046935][T20745] device syz_tun entered promiscuous mode 01:41:38 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 847.055298][T20757] device batadv_slave_0 left promiscuous mode [ 847.065072][T20757] bridge53: port 2(batadv_slave_0) entered disabled state [ 847.087033][T20757] bridge54: port 2(batadv_slave_0) entered blocking state [ 847.099279][T20757] bridge54: port 2(batadv_slave_0) entered disabled state 01:41:38 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100", @ANYRES32=r10], 0x20}}, 0x0) [ 847.116423][T20757] device batadv_slave_0 entered promiscuous mode [ 847.191370][T20766] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 847.216738][T20766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 01:41:38 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 847.236431][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 847.245737][ T36] audit: type=1804 audit(6971967698.533:88): pid=20773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1804/bus/file0" dev="sda1" ino=15161 res=1 errno=0 [ 847.281836][T20772] device syz_tun left promiscuous mode [ 847.299115][T20772] bridge54: port 1(syz_tun) entered disabled state [ 847.309097][T20772] bridge55: port 1(syz_tun) entered blocking state [ 847.315891][T20772] bridge55: port 1(syz_tun) entered disabled state [ 847.323722][T20772] device syz_tun entered promiscuous mode [ 847.335708][T20772] device batadv_slave_0 left promiscuous mode [ 847.344699][T20772] bridge54: port 2(batadv_slave_0) entered disabled state [ 847.354861][T20772] bridge55: port 2(batadv_slave_0) entered blocking state [ 847.364222][T20772] bridge55: port 2(batadv_slave_0) entered disabled state [ 847.373426][T20772] device batadv_slave_0 entered promiscuous mode [ 849.143279][ T9162] Bluetooth: hci6: command 0x1003 tx timeout [ 849.149329][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 851.240315][ T9162] Bluetooth: hci6: command 0x1001 tx timeout [ 851.246593][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 853.337277][ T9162] Bluetooth: hci6: command 0x1009 tx timeout 01:41:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:41:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:49 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000", @ANYRES32=r10], 0x20}}, 0x0) 01:41:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:49 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:41:49 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 857.833216][T20795] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 857.854163][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 857.896975][T20795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 857.909272][ T36] audit: type=1804 audit(6971967709.107:89): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1805/bus/file0" dev="sda1" ino=14098 res=1 errno=0 01:41:49 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 857.948874][T20806] device syz_tun left promiscuous mode [ 857.955035][T20806] bridge55: port 1(syz_tun) entered disabled state [ 857.967262][T20806] bridge56: port 1(syz_tun) entered blocking state 01:41:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 857.990910][T20806] bridge56: port 1(syz_tun) entered disabled state [ 858.001239][T20806] device syz_tun entered promiscuous mode [ 858.009787][T20797] device batadv_slave_0 left promiscuous mode [ 858.016726][T20797] bridge55: port 2(batadv_slave_0) entered disabled state [ 858.026573][T20797] bridge56: port 2(batadv_slave_0) entered blocking state 01:41:49 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 858.034718][T20797] bridge56: port 2(batadv_slave_0) entered disabled state [ 858.044811][T20797] device batadv_slave_0 entered promiscuous mode [ 858.065335][T14026] Bluetooth: hci6: Frame reassembly failed (-84) [ 858.078506][T14026] Bluetooth: hci6: Frame reassembly failed (-84) 01:41:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000", @ANYRES32=r10], 0x20}}, 0x0) [ 858.095692][T20819] overlayfs: unrecognized mount option "upper" or missing value 01:41:49 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 858.123181][ T36] audit: type=1804 audit(6971967709.325:90): pid=20819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1806/bus/file0" dev="sda1" ino=14003 res=1 errno=0 [ 858.178196][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 858.198516][T20825] device syz_tun left promiscuous mode [ 858.205861][T20825] bridge56: port 1(syz_tun) entered disabled state [ 858.234730][T20825] bridge57: port 1(syz_tun) entered blocking state [ 858.251953][T20825] bridge57: port 1(syz_tun) entered disabled state [ 858.262905][T20825] device syz_tun entered promiscuous mode [ 858.270416][T20833] device batadv_slave_0 left promiscuous mode [ 858.277075][T20833] bridge56: port 2(batadv_slave_0) entered disabled state [ 858.295437][T20833] bridge57: port 2(batadv_slave_0) entered blocking state [ 858.303783][T20833] bridge57: port 2(batadv_slave_0) entered disabled state [ 858.313926][T20833] device batadv_slave_0 entered promiscuous mode [ 860.112134][ T19] Bluetooth: hci6: command 0x1003 tx timeout [ 860.118183][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 862.209116][ T19] Bluetooth: hci6: command 0x1001 tx timeout [ 862.215146][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 864.306166][ T9162] Bluetooth: hci6: command 0x1009 tx timeout 01:41:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:41:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:41:59 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:41:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000", @ANYRES32=r10], 0x20}}, 0x0) 01:41:59 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:41:59 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) [ 868.811593][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 868.838201][T20851] device syz_tun left promiscuous mode [ 868.851777][T20851] bridge57: port 1(syz_tun) entered disabled state 01:42:00 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 868.859259][T20853] overlayfs: unrecognized mount option "upper" or missing value [ 868.868435][T20851] bridge58: port 1(syz_tun) entered blocking state [ 868.879052][T20851] bridge58: port 1(syz_tun) entered disabled state 01:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 868.897385][ T36] audit: type=1804 audit(6971967720.018:91): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1807/bus/file0" dev="sda1" ino=14529 res=1 errno=0 [ 868.935558][T20851] device syz_tun entered promiscuous mode [ 868.953545][T20859] device batadv_slave_0 left promiscuous mode 01:42:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:00 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 868.963254][T20859] bridge57: port 2(batadv_slave_0) entered disabled state [ 869.006738][T20859] bridge58: port 2(batadv_slave_0) entered blocking state [ 869.033104][T20872] overlayfs: unrecognized mount option "upper" or missing value [ 869.034476][T20859] bridge58: port 2(batadv_slave_0) entered disabled state 01:42:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 869.049595][ T36] audit: type=1804 audit(6971967720.166:92): pid=20872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1808/bus/file0" dev="sda1" ino=14577 res=1 errno=0 [ 869.076787][ T8405] Bluetooth: hci6: sending frame failed (-49) 01:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:00 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:00 executing program 3: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) [ 869.198583][T20859] device batadv_slave_0 entered promiscuous mode 01:42:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:00 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 869.247830][T20887] overlayfs: workdir and upperdir must be separate subtrees [ 869.268691][ T36] audit: type=1804 audit(6971967720.385:93): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1809/bus/file0" dev="sda1" ino=14577 res=1 errno=0 [ 869.351237][T20894] overlayfs: workdir and upperdir must be separate subtrees [ 869.360316][ T36] audit: type=1804 audit(6971967720.474:94): pid=20894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1810/bus/file0" dev="sda1" ino=14401 res=1 errno=0 [ 869.387571][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.393897][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 01:42:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000000000", @ANYRES32=r10], 0x20}}, 0x0) 01:42:00 executing program 3: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) 01:42:00 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 869.684275][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 869.697226][T20905] device syz_tun left promiscuous mode [ 869.705607][T20905] bridge58: port 1(syz_tun) entered disabled state [ 869.714865][T20905] bridge59: port 1(syz_tun) entered blocking state [ 869.722038][T20905] bridge59: port 1(syz_tun) entered disabled state [ 869.729150][T20905] device syz_tun entered promiscuous mode [ 869.737925][T20905] device batadv_slave_0 left promiscuous mode [ 869.744834][T20905] bridge58: port 2(batadv_slave_0) entered disabled state [ 869.753936][T20905] bridge59: port 2(batadv_slave_0) entered blocking state [ 869.761733][T20905] bridge59: port 2(batadv_slave_0) entered disabled state [ 869.769812][T20905] device batadv_slave_0 entered promiscuous mode [ 871.161667][ T19] Bluetooth: hci6: command 0x1003 tx timeout [ 871.168421][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 873.258630][ T19] Bluetooth: hci6: command 0x1001 tx timeout [ 873.264676][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 875.355617][ T19] Bluetooth: hci6: command 0x1009 tx timeout 01:42:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:10 executing program 3: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) 01:42:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000000000", @ANYRES32=r10], 0x20}}, 0x0) 01:42:10 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 879.789183][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 879.822387][T20929] overlayfs: workdir and upperdir must be separate subtrees 01:42:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 879.836512][ T36] audit: type=1804 audit(6971967730.869:95): pid=20929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1811/bus/file0" dev="sda1" ino=14050 res=1 errno=0 01:42:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 879.880911][T20933] device syz_tun left promiscuous mode [ 879.915945][T20933] bridge59: port 1(syz_tun) entered disabled state 01:42:11 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 879.945750][T20933] bridge60: port 1(syz_tun) entered blocking state [ 879.962773][T20933] bridge60: port 1(syz_tun) entered disabled state [ 879.987548][T20933] device syz_tun entered promiscuous mode [ 879.998206][T20948] overlayfs: failed to resolve './fil': -2 [ 880.012242][T20925] device batadv_slave_0 left promiscuous mode [ 880.019249][ T36] audit: type=1804 audit(6971967731.048:96): pid=20948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1812/bus/file0" dev="sda1" ino=14243 res=1 errno=0 [ 880.046533][T20925] bridge59: port 2(batadv_slave_0) entered disabled state [ 880.068941][T20925] bridge60: port 2(batadv_slave_0) entered blocking state [ 880.077057][T20925] bridge60: port 2(batadv_slave_0) entered disabled state [ 880.085928][T20925] device batadv_slave_0 entered promiscuous mode [ 882.049901][ T9488] Bluetooth: hci6: command 0x1003 tx timeout [ 882.056110][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 884.146836][ T9558] Bluetooth: hci6: command 0x1001 tx timeout [ 884.153036][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 886.243829][ T19] Bluetooth: hci6: command 0x1009 tx timeout 01:42:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:21 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010121000000000000000000", @ANYRES32=r10], 0x20}}, 0x0) 01:42:21 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:21 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 890.758702][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 890.777454][T20970] overlayfs: failed to resolve './fil': -2 [ 890.794280][T20972] device syz_tun left promiscuous mode 01:42:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 890.814711][ T36] audit: type=1804 audit(6971967741.760:97): pid=20970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1813/bus/file0" dev="sda1" ino=14609 res=1 errno=0 [ 890.857903][T20972] bridge60: port 1(syz_tun) entered disabled state 01:42:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:21 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 890.901036][T20972] bridge61: port 1(syz_tun) entered blocking state [ 890.939676][T20972] bridge61: port 1(syz_tun) entered disabled state 01:42:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 890.964249][T20972] device syz_tun entered promiscuous mode [ 890.980444][T20993] overlayfs: failed to resolve './fil': -2 [ 890.986384][T20981] device batadv_slave_0 left promiscuous mode [ 890.994706][T20981] bridge60: port 2(batadv_slave_0) entered disabled state 01:42:21 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 891.015255][ T36] audit: type=1804 audit(6971967741.958:98): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1814/bus/file0" dev="sda1" ino=14562 res=1 errno=0 [ 891.052532][T20981] bridge61: port 2(batadv_slave_0) entered blocking state 01:42:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 891.076710][T20981] bridge61: port 2(batadv_slave_0) entered disabled state 01:42:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100000000000000000084", @ANYRES32=r10], 0x20}}, 0x0) [ 891.117113][T20981] device batadv_slave_0 entered promiscuous mode [ 891.169584][T21005] overlayfs: failed to resolve './file': -2 [ 891.184465][ T36] audit: type=1804 audit(6971967742.127:99): pid=21005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1815/bus/file0" dev="sda1" ino=14498 res=1 errno=0 [ 891.187069][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 891.230017][T21007] device syz_tun left promiscuous mode [ 891.238296][T21007] bridge61: port 1(syz_tun) entered disabled state [ 891.273301][T21007] bridge62: port 1(syz_tun) entered blocking state [ 891.283723][T21007] bridge62: port 1(syz_tun) entered disabled state [ 891.291313][T21007] device syz_tun entered promiscuous mode [ 891.299275][T21012] device batadv_slave_0 left promiscuous mode [ 891.306241][T21012] bridge61: port 2(batadv_slave_0) entered disabled state [ 891.315192][T21012] bridge62: port 2(batadv_slave_0) entered blocking state [ 891.322352][T21012] bridge62: port 2(batadv_slave_0) entered disabled state [ 891.333197][T21012] device batadv_slave_0 entered promiscuous mode [ 891.401993][T21007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.431563][T21007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.465022][T21007] bond0 (unregistering): Released all slaves 01:42:22 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:22 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100000000000000000084", @ANYRES32=r10], 0x20}}, 0x0) 01:42:22 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 891.636735][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 891.637303][T21061] overlayfs: failed to resolve './file': -2 [ 891.665463][T21059] device syz_tun left promiscuous mode [ 891.677494][T21059] bridge62: port 1(syz_tun) entered disabled state 01:42:22 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 891.687116][ T36] audit: type=1804 audit(6971967742.623:100): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1816/bus/file0" dev="sda1" ino=13932 res=1 errno=0 [ 891.714099][T21059] bridge63: port 1(syz_tun) entered blocking state [ 891.723436][T21059] bridge63: port 1(syz_tun) entered disabled state 01:42:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:22 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 891.744140][T21059] device syz_tun entered promiscuous mode [ 891.775212][T21070] device batadv_slave_0 left promiscuous mode [ 891.784145][T21070] bridge62: port 2(batadv_slave_0) entered disabled state [ 891.822374][T21070] bridge63: port 2(batadv_slave_0) entered blocking state [ 891.853073][T21070] bridge63: port 2(batadv_slave_0) entered disabled state [ 891.869734][T21082] overlayfs: failed to resolve './file': -2 [ 891.876968][T21070] device batadv_slave_0 entered promiscuous mode [ 891.887247][ T36] audit: type=1804 audit(6971967742.811:101): pid=21082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1817/bus/file0" dev="sda1" ino=14211 res=1 errno=0 01:42:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:23 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) 01:42:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:23 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 01:42:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001012100000000000000000084", @ANYRES32=r10], 0x20}}, 0x0) 01:42:23 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 892.540382][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 892.568969][T21097] device syz_tun left promiscuous mode 01:42:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) [ 892.588405][T21097] bridge63: port 1(syz_tun) entered disabled state 01:42:23 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) [ 892.616686][T21097] bridge64: port 1(syz_tun) entered blocking state [ 892.634409][T21097] bridge64: port 1(syz_tun) entered disabled state [ 892.642861][T21097] device syz_tun entered promiscuous mode [ 892.668572][T21106] device batadv_slave_0 left promiscuous mode [ 892.675509][T21106] bridge63: port 2(batadv_slave_0) entered disabled state [ 892.703873][T21106] bridge64: port 2(batadv_slave_0) entered blocking state 01:42:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:23 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) [ 892.725036][T21106] bridge64: port 2(batadv_slave_0) entered disabled state [ 892.745503][T21106] device batadv_slave_0 entered promiscuous mode 01:42:24 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:24 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) 01:42:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:42:24 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) 01:42:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 01:42:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) [ 893.407794][T21128] ceph: No source 01:42:24 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) 01:42:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:24 executing program 0: socket$inet(0x2, 0x0, 0xfffffff8) 01:42:25 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) 01:42:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f00000002c0), 0x12) 01:42:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) 01:42:25 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:42:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f00000001c0)) 01:42:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local}, 0x14) 01:42:25 executing program 0: syz_emit_ethernet(0x15, &(0x7f00000005c0)={@remote, @dev, @val={@void}, {@llc={0x4, {@llc={0x0, 0x0, 'z'}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000300)={@random="5fcccd4e64a0", @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "357cc3", 0x64, 0x2f, 0x0, @mcast1, @local, {[@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}]}}}}}, 0x0) 01:42:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 01:42:25 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 01:42:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) 01:42:26 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008300)={0x0, 0x989680}) 01:42:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4091) 01:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:26 executing program 5: syz_emit_ethernet(0x14e, &(0x7f0000000300)={@random="5fcccd4e64a0", @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "357cc3", 0x114, 0x2f, 0x0, @mcast1, @local, {[@hopopts={0x0, 0x19, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @generic, @generic={0x0, 0xaf, "361abe081d0d7204ce862a3f91a86b876e14bb3952d5738eea7abebb1187bd70d61df8a680e09acc95be302917840c699de0819f6c8a1fc1824b44e53b7364b336c20ba93d812efd17235a299542ab06410d86b2a08eb3ae2cee16bf03915ee31c0a968ffb8993b5d8c0211d2c5c962901720e7bd47952e77608913d485fa982f7591ef69af42331a9ab492363c158e589d4c67968ab4620a60ee443a5e73b98903135f48578a2c18009c0ffc39d2d"}, @enc_lim]}]}}}}}, 0x0) 01:42:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x31, 0x0, &(0x7f0000000040)) 01:42:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) 01:42:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 01:42:26 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x85}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) 01:42:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)) 01:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) 01:42:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 01:42:26 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)='h', 0x1}], 0x2}, 0x0) 01:42:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, 0x0, 0x0) 01:42:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) 01:42:27 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000001240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 01:42:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtfilter={0xec4, 0x2c, 0x209, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xe84, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_POLICE={0x834, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x81, 0x7fff, 0x0, 0x0, 0x1, 0x0, 0x80, 0x1000, 0x80, 0xcc, 0x62, 0x0, 0x1000, 0x3, 0x401, 0x6, 0x800, 0x0, 0x6, 0x3, 0xffff, 0x10000, 0x1, 0x3, 0x80000000, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x400, 0x0, 0x7ff, 0x9, 0x6, 0xffffffff, 0x5, 0x9, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0xbfd, 0x6, 0xfb, 0x3f, 0x0, 0x401, 0xffffffff, 0x80000000, 0x0, 0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, 0x0, 0x80000000, 0x0, 0xffff, 0x1, 0x0, 0x381, 0x4, 0x4, 0x80000000, 0x7f, 0x0, 0x9, 0x1, 0x9, 0x0, 0x7, 0x80000000, 0x8, 0x7, 0xfff, 0x9c8, 0x6, 0x1ff, 0x0, 0x4, 0x3, 0x3, 0x8, 0x1, 0x4, 0x0, 0xa9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x557, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x215c, 0x9, 0x401, 0x0, 0x0, 0x64d, 0x4, 0x0, 0x1, 0xa13]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x5a, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x401, 0x60, 0x8, 0x0, 0x0, 0x2, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf2, 0x0, 0x5, 0x7fffffff, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x80, 0x7, 0xcd, 0x7, 0x8, 0x9, 0x0, 0x8, 0x4e, 0x7, 0x7ff, 0x7, 0x3, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x9, 0xfffff801, 0x9, 0x9, 0x76e, 0x0, 0x1000, 0x4, 0x0, 0x4e, 0xfffffff7, 0x3, 0x0, 0x7, 0x0, 0x0, 0xefcc, 0x5, 0x6, 0x8, 0x0, 0x7fffffff, 0x0, 0x7f, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d23, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xece8, 0x2162, 0x2fbc0000, 0xffff0000, 0x0, 0x7, 0x7, 0x0, 0x3, 0x0, 0x7fff, 0xffffffff, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x3ee, 0x80, 0x0, 0x6, 0x1f, 0x10000, 0x0, 0xfffffff8, 0x517, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3557, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5, 0x101, 0x4]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8}]}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_EMATCHES={0x624, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x3f, 0x8, 0xc91}, {0x0, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xc46a}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="f15595", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="52290b02c3", @TCF_META_TYPE_VAR="97b9feb1621f600bce13", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x0, 0x0, 0x0, {{}, "4b216f93a6dc42de102831d86414d63151ad83729756479570c8d57768cfb08f58d79877e680cf9ddf10cdfdc79e12115146c33ec8f4382730a9bc43e14feb89133cee15c76bb92dbb0ceba04824d5800a3ecba61429dc314e3eb38100521f208593ed0eefb71913d3bc0328e1397bcb84570b398674d48418c5b79be1aef4b553a1620436bd0f63825bc036b8920df01233597cac0107dfdbd9e4dc18b900ca0d951e83091cfcea25c4236e15d479"}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_LIST={0x4b8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4b4, 0x0, 0x0, 0x0, {{}, "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"}}]}]}]}}]}, 0xec4}}, 0x0) 01:42:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) 01:42:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:27 executing program 4: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x4}, &(0x7f0000000140)={0x0, r0+10000000}, 0x0) 01:42:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, &(0x7f0000000340)={@private0}, 0x20) 01:42:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:27 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 01:42:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000000340)={@private0}, 0x20) 01:42:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:27 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0) 01:42:27 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:42:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003580)=[{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f00000002c0)=[@prinfo={0x18}], 0x18}, {&(0x7f0000000340)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0}], 0x2, 0x0) 01:42:27 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 01:42:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:28 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:28 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:42:28 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000019c0)=0x3, 0x4) 01:42:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 01:42:28 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0), 0x0, 0x0, 0x0) 01:42:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01002f"], &(0x7f0000000200)=""/133, 0x74, 0x85, 0x1}, 0x20) 01:42:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x0, 0x1, 0x0, 0x6}, 0x20) 01:42:28 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0}}, 0x1c) 01:42:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:42:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:28 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x12000, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0xe}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000600)=""/219, 0x28, 0xdb, 0x1}, 0x20) 01:42:28 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001700)) 01:42:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x209}, 0x24}}, 0x0) 01:42:28 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', 0xffffffffffffffff) 01:42:29 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0), 0x0, 0x0, 0x0) 01:42:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/88, &(0x7f0000000180)=0x58) 01:42:29 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x10440, 0x0) 01:42:29 executing program 0: perf_event_open(&(0x7f0000000980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80000000000000, 0x1110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:42:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000940)=""/246, 0x2e, 0xf6, 0x1}, 0x20) [ 898.688208][T21359] IPVS: length: 88 != 8 01:42:29 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 01:42:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000001440)='notify_on_release\x00', 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) socketpair(0x18, 0x0, 0x0, &(0x7f0000002bc0)) 01:42:29 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000040)={'rose0\x00'}) 01:42:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000003640)={&(0x7f00000013c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000003580)=[@txtime={{0x18}}, @mark={{0x14}}], 0x30}, 0x0) 01:42:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000040)={'rose0\x00'}) 01:42:30 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0), 0x0, 0x0, 0x0) [ 900.771555][ T9162] Bluetooth: hci6: command 0x1003 tx timeout [ 900.777956][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 902.858449][ T9558] Bluetooth: hci6: command 0x1001 tx timeout [ 902.865141][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 904.955407][ T9513] Bluetooth: hci6: command 0x1009 tx timeout 01:42:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:40 executing program 5: socketpair(0x10, 0x3, 0x8, &(0x7f0000002bc0)) 01:42:40 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 01:42:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}]}}, &(0x7f0000000180)=""/237, 0x32, 0xed, 0x1}, 0x20) 01:42:40 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:40 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:42:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc020660b, 0x0) 01:42:40 executing program 5: futex(&(0x7f0000000240)=0x2, 0x0, 0x2, &(0x7f0000000280), 0x0, 0x0) [ 909.530750][ T24] Bluetooth: hci6: Frame reassembly failed (-84) 01:42:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{&(0x7f0000000000)={0xa, 0x7ff, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="1400000000000000290000000be2ffff7f00000100000000140009"], 0x48}}], 0x1, 0x0) 01:42:40 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x8c000, 0x0) 01:42:40 executing program 5: pipe(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$tun(r0, &(0x7f0000000180)={@val, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @multicast, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @random="85451d6c2088", @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x38) 01:42:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00'}) [ 911.579080][ T9513] Bluetooth: hci6: command 0x1003 tx timeout [ 911.585140][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 913.665955][ T9162] Bluetooth: hci6: command 0x1001 tx timeout [ 913.673429][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 915.772986][ T9558] Bluetooth: hci6: command 0x1009 tx timeout 01:42:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x400455c8, 0x0) 01:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0xfffffffffffffdbb) 01:42:50 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x34) 01:42:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@empty}) 01:42:50 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:42:50 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:42:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x9, 0x7}, 0x1c) 01:42:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{&(0x7f0000000000)={0xa, 0x7ff, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x800) 01:42:50 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100)={0x7}, 0x0, 0x0, &(0x7f0000000200)={r0}, 0x0) 01:42:50 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 01:42:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x20008014) [ 919.877766][ T39] Bluetooth: hci6: Frame reassembly failed (-84) 01:42:50 executing program 5: openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x111441, 0x0) [ 921.983272][ T9513] Bluetooth: hci6: command 0x1003 tx timeout [ 921.990272][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 924.070213][ T9558] Bluetooth: hci6: command 0x1001 tx timeout [ 924.076337][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 926.167275][ T9162] Bluetooth: hci6: command 0x1009 tx timeout 01:43:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) 01:43:00 executing program 4: openat$tun(0xffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) 01:43:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:43:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8}]}) 01:43:00 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) 01:43:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:43:00 executing program 0: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:43:00 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c3ea490865050300a700000080010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 01:43:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000016c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/141) [ 930.129708][ T39] Bluetooth: hci6: Frame reassembly failed (-84) 01:43:00 executing program 0: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x292, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x26, &(0x7f0000000200)=@string={0x26, 0x3, "fe88f391e5e6fd01c4fd2f4e332a2d40037ea2994fc2cd9d2aceb33a5c7a39cb1dd99bc2"}}]}) [ 930.482159][ T9162] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 930.502654][ T9558] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 930.724205][ T9162] usb 5-1: Using ep0 maxpacket: 8 [ 930.865955][ T9558] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 01:43:01 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) [ 930.916006][ T9558] usb 1-1: language id specifier not provided by device, defaulting to English [ 930.926281][ T9162] usb 5-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice= 0.a7 01:43:01 executing program 5: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0x40, 0xf1, 0x10, 0x19d2, 0x1263, 0x86f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8fbfef0887"}]}}]}}]}}]}}, 0x0) [ 930.956733][ T9162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 930.981525][ T9162] usb 5-1: SerialNumber: syz [ 930.997296][ T9162] usb 5-1: config 0 descriptor?? [ 931.057024][ T9558] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 931.073122][ T9558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.081914][ T9558] usb 1-1: Product: syz [ 931.086254][ T9558] usb 1-1: Manufacturer: 裾釳ǽﷄ丯⨳䀭縃馢ì‰é·ì¸ªãª³ç©œì¬¹ìŠ› [ 931.095896][ T9558] usb 1-1: SerialNumber: syz [ 931.118125][T21525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.269890][ T9162] kaweth 5-1:0.0: Downloading firmware... [ 931.282817][ T19] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 931.329288][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.335919][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.379590][ T9558] usbhid 1-1:1.0: can't add hid device: -22 [ 931.385535][ T9558] usbhid: probe of 1-1:1.0 failed with error -22 [ 931.398529][ T9558] usb 1-1: USB disconnect, device number 20 [ 931.530628][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 931.651953][ T19] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 931.662752][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 135, changing to 11 [ 931.674492][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 931.843533][ T19] usb 6-1: New USB device found, idVendor=19d2, idProduct=1263, bcdDevice=86.f5 [ 931.854739][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.863117][ T19] usb 6-1: Product: syz [ 931.868418][ T19] usb 6-1: Manufacturer: syz [ 931.873198][ T19] usb 6-1: SerialNumber: syz [ 931.879676][ T19] usb 6-1: config 0 descriptor?? [ 931.927007][ T19] option 6-1:0.0: GSM modem (1-port) converter detected [ 932.129244][ T3631] usb 6-1: USB disconnect, device number 39 [ 932.135543][ T9162] kaweth 5-1:0.0: Error downloading trigger code fix (-71) [ 932.138407][ T3631] option 6-1:0.0: device disconnected [ 932.148141][ T9162] kaweth: probe of 5-1:0.0 failed with error -5 [ 932.163952][ T9558] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 932.177234][ T9162] usb 5-1: USB disconnect, device number 37 [ 932.216227][ T9513] Bluetooth: hci6: command 0x1003 tx timeout [ 932.224513][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 932.528720][ T9558] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 932.579144][ T9558] usb 1-1: language id specifier not provided by device, defaulting to English [ 932.700164][ T9558] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 932.709651][ T9558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.718006][ T9558] usb 1-1: Product: syz [ 932.722270][ T9558] usb 1-1: Manufacturer: 裾釳ǽﷄ丯⨳䀭縃馢ì‰é·ì¸ªãª³ç©œì¬¹ìŠ› [ 932.731643][ T9558] usb 1-1: SerialNumber: syz [ 932.751957][T21525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 932.911804][ T9162] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 932.919789][ T19] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 933.012919][ T9558] usbhid 1-1:1.0: can't add hid device: -22 [ 933.019081][ T9558] usbhid: probe of 1-1:1.0 failed with error -22 [ 933.027182][ T9558] usb 1-1: USB disconnect, device number 21 [ 933.163898][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 933.169638][ T9162] usb 5-1: Using ep0 maxpacket: 8 [ 933.284921][ T19] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 933.284951][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 135, changing to 11 [ 933.284979][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.375590][ T9162] usb 5-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice= 0.a7 [ 933.385002][ T9162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 933.393921][ T9162] usb 5-1: SerialNumber: syz [ 933.399514][ T9162] usb 5-1: config 0 descriptor?? [ 933.447700][ T19] usb 6-1: New USB device found, idVendor=19d2, idProduct=1263, bcdDevice=86.f5 [ 933.469087][ T9162] kaweth 5-1:0.0: Downloading firmware... [ 933.475707][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.493028][ T19] usb 6-1: Product: syz [ 933.497892][ T19] usb 6-1: Manufacturer: syz [ 933.502597][ T19] usb 6-1: SerialNumber: syz [ 933.509514][ T9162] kaweth 5-1:0.0: Error downloading firmware (-71) [ 933.516160][ T9162] kaweth: probe of 5-1:0.0 failed with error -5 [ 933.529698][ T19] usb 6-1: config 0 descriptor?? [ 933.541180][ T9162] usb 5-1: USB disconnect, device number 38 [ 933.569188][ T19] option 6-1:0.0: GSM modem (1-port) converter detected [ 933.770690][ T9162] usb 6-1: USB disconnect, device number 40 [ 933.778437][ T9162] option 6-1:0.0: device disconnected [ 934.313202][ T3631] Bluetooth: hci6: command 0x1001 tx timeout [ 934.319277][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 936.410173][ T3631] Bluetooth: hci6: command 0x1009 tx timeout 01:43:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) 01:43:10 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) 01:43:10 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) 01:43:10 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5c, 0x40, 0xf1, 0x10, 0x19d2, 0x1263, 0x86f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 01:43:10 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x292, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) 01:43:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:43:11 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@exit, @exit], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x78) 01:43:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='fsi_master_aspeed_opb_read\x00', r0}, 0x10) [ 940.496124][ T39] Bluetooth: hci6: Frame reassembly failed (-84) 01:43:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='fsi_master_aspeed_opb_read\x00', r0}, 0x10) 01:43:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x1, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:43:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x40) 01:43:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 940.704936][ T9162] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 940.706481][ T9488] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 940.957009][ T9162] usb 5-1: Using ep0 maxpacket: 8 [ 940.977207][ T9488] usb 1-1: Using ep0 maxpacket: 16 [ 941.078351][ T9162] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 941.128778][ T9162] usb 5-1: language id specifier not provided by device, defaulting to English [ 941.259887][ T9162] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 941.292532][ T9162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.301531][ T9162] usb 5-1: Product: syz [ 941.307845][ T9162] usb 5-1: SerialNumber: syz [ 941.310178][ T9488] usb 1-1: New USB device found, idVendor=19d2, idProduct=1263, bcdDevice=86.f5 [ 941.322471][ T9488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.331098][ T9488] usb 1-1: Product: syz [ 941.335382][ T9488] usb 1-1: Manufacturer: syz [ 941.340926][ T9488] usb 1-1: SerialNumber: syz [ 941.348362][ T9488] usb 1-1: config 0 descriptor?? [ 941.353948][ T9162] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 941.423010][ T9488] option 1-1:0.0: GSM modem (1-port) converter detected [ 941.555480][ T9488] usb 5-1: USB disconnect, device number 39 [ 941.624964][ T9513] usb 1-1: USB disconnect, device number 22 [ 941.632044][ T9513] option 1-1:0.0: device disconnected [ 942.328143][ T9162] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 942.418823][ T9488] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 942.549976][ T9513] Bluetooth: hci6: command 0x1003 tx timeout [ 942.557590][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 942.570066][ T9162] usb 5-1: Using ep0 maxpacket: 8 [ 942.670870][ T9488] usb 1-1: Using ep0 maxpacket: 16 [ 942.691668][ T9162] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 942.741852][ T9162] usb 5-1: language id specifier not provided by device, defaulting to English [ 942.872544][ T9162] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 942.883404][ T9162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.893262][ T9162] usb 5-1: Product: syz [ 942.893280][ T9162] usb 5-1: SerialNumber: syz [ 942.934873][ T9162] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 942.974728][ T9488] usb 1-1: New USB device found, idVendor=19d2, idProduct=1263, bcdDevice=86.f5 [ 942.986009][ T9488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.997582][ T9488] usb 1-1: Product: syz [ 943.002311][ T9488] usb 1-1: Manufacturer: syz [ 943.007850][ T9488] usb 1-1: SerialNumber: syz [ 943.013462][ T9488] usb 1-1: config 0 descriptor?? [ 943.065983][ T9488] option 1-1:0.0: GSM modem (1-port) converter detected [ 943.135744][ T9162] usb 5-1: USB disconnect, device number 40 [ 943.275971][ T9558] usb 1-1: USB disconnect, device number 23 [ 943.282967][ T9558] option 1-1:0.0: device disconnected [ 944.636770][ T9488] Bluetooth: hci6: command 0x1001 tx timeout [ 944.643102][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 946.735668][ T9488] Bluetooth: hci6: command 0x1009 tx timeout 01:43:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x400455c8, 0x0) 01:43:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000001ec0)='/proc/keys\x00', 0x0, 0x0) 01:43:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) 01:43:21 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) 01:43:21 executing program 4: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vcan0\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd2a, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:43:21 executing program 0: r0 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000080)={0x5}) sched_rr_get_interval(r0, &(0x7f0000000180)) r1 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r1, &(0x7f0000000180)) sync() getpgrp(r1) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_dev$dri(&(0x7f0000000580)='/dev/dri/card#\x00', 0x0, 0x0) 01:43:21 executing program 5: getpgrp(0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:43:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 01:43:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/stat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 01:43:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsync(r0) 01:43:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) [ 950.887487][ T39] Bluetooth: hci6: Frame reassembly failed (-84) 01:43:21 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cachefiles\x00', 0x0, 0x0) [ 952.954179][ T9488] Bluetooth: hci6: command 0x1003 tx timeout [ 952.962266][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 955.041101][ T9488] Bluetooth: hci6: command 0x1001 tx timeout [ 955.047236][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 957.138082][ T9575] Bluetooth: hci6: command 0x1009 tx timeout 01:43:31 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x0, 0x0) 01:43:31 executing program 4: getpgrp(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:43:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000003c0)={0x1, 0x2, 0x0, 0x0, &(0x7f0000000140)=[{}, {}]}) 01:43:31 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cachefiles\x00', 0xbe2b60b7201f6516, 0x0) 01:43:31 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) 01:43:31 executing program 2: keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x3}) 01:43:31 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f11a"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x2}, [@obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0xfa, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7f, 0xf5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xbb, 0x20, 0x6, 0x8}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x4, 0x7, 0xc}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80a}}, {0x6c, &(0x7f00000001c0)=@string={0x6c, 0x3, "197e72611d91e65e82e3fc8dc47522ef60ec46da78609da489edc7dc1fcdfe3386cefc9b91bfb916884ae5af5fe78e356a2a3d6d0b1c3d9cbee0e292f05daa4bfe504f4971c33e97591edceed1ca04e6f3f0b47be8b89b24e28876608766afd7779286eb3d1dae2bcfdf"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x810}}, {0xb, &(0x7f00000002c0)=@string={0xb, 0x3, "10f1f5cf623a8647e0"}}, {0xbc, &(0x7f0000000300)=@string={0xbc, 0x3, "5f43db7aac5efaaf3bddb63388b5728fb82e8db05dde7b709d21331c61db9aa31905391ef8703d4f0adcf82767b6e83a586c8f10b743f1f4aefd63993d06c7992dd254ce77426247d6ccfbf54c109f998e0f9bba20e7708715ba7e182a306bb982a3e87d13d43cd4b99c911b5f4c064d840d1045e7693baf2c5b384439d36d28fedf94bc8ee0b2fe9841a877a6fff3c882a35ecad4dd9eab01d5942e9a21bc7e75fa097a019863e3119287b0c0d29c89e9831ea1942d4caf5235"}}]}) 01:43:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 01:43:31 executing program 4: getpgrp(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:43:31 executing program 4: getpgrp(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:43:31 executing program 4: getpgrp(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:43:31 executing program 2: pipe(&(0x7f0000000040)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 961.402581][ T9162] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 961.644586][ T9162] usb 1-1: Using ep0 maxpacket: 32 [ 961.765841][ T9162] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 961.777440][ T9162] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 01:43:32 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:43:32 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "295e1082a86f73ac3ec8a78b23b8b16518d168fde80a192debc1149aa0f12d28"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "26e6a64f4cf2d9672829db3aacf275e7"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0xc050) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x440}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0)='802.15.4 MAC\x00', r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0xc000) 01:43:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x3, &(0x7f0000000980)=@framed, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:43:32 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) [ 961.947370][ T9162] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.960212][ T9162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.969888][ T9162] usb 1-1: Product: 縙慲é„廦跼痄æ¸ê’촟ã¾ìº†é¯¼ë¾‘ᚹ䪈꿥îŸã–Žâ©ªæ´½á°‹é°½î‚¾é‹¢å·°ä®ªåƒ¾ä¥ì±éœ¾á¹™î»œì«‘箴루⒛裢æ¶æš‡íž¯é‰·î®†á´½â®® [ 961.991094][ T9162] usb 1-1: Manufacturer: à Š [ 961.996820][ T9162] usb 1-1: SerialNumber: င 01:43:32 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) 01:43:32 executing program 4: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x0) syz_mount_image$efs(0x0, 0x0, 0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f0000000080)="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", 0xf81, 0x8be}], 0x0, 0x0) [ 962.279701][ T9162] cdc_ncm 1-1:1.0: bind() failure [ 962.287362][ T9162] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 962.305877][ T9162] cdc_ncm 1-1:1.1: bind() failure [ 962.323101][ T9162] usb 1-1: USB disconnect, device number 24 [ 963.025756][ T9513] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 963.307997][ T9513] usb 1-1: Using ep0 maxpacket: 32 [ 963.449561][ T9513] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 963.459755][ T9513] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 963.631118][ T9513] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.641040][ T9513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.649057][ T9513] usb 1-1: Product: 縙慲é„廦跼痄æ¸ê’촟ã¾ìº†é¯¼ë¾‘ᚹ䪈꿥îŸã–Žâ©ªæ´½á°‹é°½î‚¾é‹¢å·°ä®ªåƒ¾ä¥ì±éœ¾á¹™î»œì«‘箴루⒛裢æ¶æš‡íž¯é‰·î®†á´½â®® [ 963.666615][ T9513] usb 1-1: Manufacturer: à Š [ 963.673092][ T9513] usb 1-1: SerialNumber: င 01:43:34 executing program 0: syz_mount_image$gfs2meta(&(0x7f0000000e40)='gfs2meta\x00', &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)) 01:43:34 executing program 2: syz_open_dev$I2C(&(0x7f00000002c0)='/dev/i2c-#\x00', 0x100000001, 0x109040) 01:43:34 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 01:43:34 executing program 4: get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x6, &(0x7f0000ffc000/0x4000)=nil, 0x2) 01:43:34 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:43:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 01:43:34 executing program 0: get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2) [ 963.953328][ T9513] cdc_ncm 1-1:1.0: bind() failure [ 963.969175][ T9513] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found 01:43:34 executing program 4: syz_mount_image$efs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)='i', 0x1}, {&(0x7f0000000180)='nD', 0x2, 0x7fffffff}, {&(0x7f00000001c0)="89", 0x1}], 0x0, 0x0) 01:43:34 executing program 5: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$efs(&(0x7f0000000000)='efs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x1, &(0x7f00000010c0)=[{0x0, 0x0, 0x8be}], 0x0, &(0x7f0000001200)={[{}]}) [ 964.002550][ T9513] cdc_ncm 1-1:1.1: bind() failure 01:43:34 executing program 0: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) syz_mount_image$efs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f0000000080)="d6", 0x1}, {&(0x7f0000000100)='!', 0x1, 0xfffffffffffffffb}, {&(0x7f0000000180)="a7", 0x1}], 0x0, 0x0) 01:43:34 executing program 2: openat$vsock(0xffffffffffffff9c, 0x0, 0x412a00, 0x0) [ 964.042787][ T9513] usb 1-1: USB disconnect, device number 25 [ 964.071398][T21914] loop4: detected capacity change from 0 to 264192 [ 964.081118][T21915] loop5: detected capacity change from 0 to 8 01:43:34 executing program 2: get_mempolicy(0x0, &(0x7f0000000180), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:43:34 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 01:43:34 executing program 2: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x0) syz_mount_image$efs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)='i', 0x1}, {&(0x7f0000000180)='nD', 0x2, 0x7fffffff}, {&(0x7f00000001c0)="89", 0x1}], 0x0, 0x0) 01:43:34 executing program 5: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x1, &(0x7f0000001080)=[{0x0, 0x0, 0x2de}], 0x0, 0x0) 01:43:34 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) syz_io_uring_setup(0x3596, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 964.212239][T21914] loop4: detected capacity change from 0 to 264192 [ 964.243425][T21949] loop5: detected capacity change from 0 to 2 [ 964.326534][T21949] loop5: detected capacity change from 0 to 2 01:43:35 executing program 0: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x8292801a93c3920b) 01:43:35 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000008c0)=0x1, 0x4) 01:43:35 executing program 4: syz_mount_image$gfs2meta(0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="9c", 0x1}, {&(0x7f0000000140)="a7f76ee858e7fcae7f32a149ad735f2f0b6c9fcc5c2d509d1614d2a04a67d279403cd7946a3e60f4433d2c4aee485b396758daf0f758209fedfed866fe", 0x3d, 0xffffffffffffffc4}], 0x0, 0x0) 01:43:35 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 01:43:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x9}, 0x8) 01:43:35 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "4e7071db49f43b0c", "0c53be46428804d549e30a5a0000200000e76b00000000000500", "66889e1f", "cf1bfdd018b5f471"}, 0x38) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a80)=""/194, 0xc2}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="997245d639f26a288a7103a2ce", 0xd}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:43:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00', r0) [ 964.859633][T21983] loop4: detected capacity change from 0 to 16383 01:43:35 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vsock\x00', 0xe0a00, 0x0) 01:43:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:43:35 executing program 0: syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000027c0)) 01:43:35 executing program 5: io_setup(0x4366, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) [ 964.982359][T21983] loop4: detected capacity change from 0 to 16383 [ 965.017386][T22011] Mount JFS Failure: -22 01:43:35 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) 01:43:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5430a595721d1ee5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 965.034682][T22011] jfs_mount failed w/return code = -22 01:43:35 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x0) [ 965.082766][T22011] Mount JFS Failure: -22 [ 965.087522][T22011] jfs_mount failed w/return code = -22 01:43:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 01:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:43:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="3fde5b164c3b067818725b82640f1e", 0xf}, {&(0x7f0000000040)='\x00', 0x1}], 0x2, &(0x7f0000000340)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 01:43:36 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '\'^&'}}]}}) syz_open_dev$mouse(0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 01:43:36 executing program 5: socketpair(0xa, 0x3, 0x7, &(0x7f00000008c0)) 01:43:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xd1c, 0x0, 0x8, 0x9}, 0x8) 01:43:36 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:43:36 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x24c40, 0x0) 01:43:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="d8"], 0x0, 0x1000) 01:43:36 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ocfs2_control\x00', 0x200142, 0x0) 01:43:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x14}, 0x14}}, 0x0) 01:43:36 executing program 4: io_setup(0xccf, &(0x7f0000000480)=0x0) io_submit(r0, 0x0, 0x0) 01:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000046c0)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={&(0x7f0000004680), 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}}, 0x0) 01:43:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000140)) 01:43:36 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/fb0\x00', 0x0, 0x0) 01:43:36 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8002, &(0x7f0000000040), 0x8) 01:43:36 executing program 3: syz_io_uring_setup(0x438, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 01:43:36 executing program 0: syz_open_dev$mouse(&(0x7f0000002cc0)='/dev/input/mouse#\x00', 0x8, 0x24a0c0) 01:43:36 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000000d00)) 01:43:36 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) 01:43:36 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000001040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x0, 0x5}, 0x8, 0x10, 0x0}, 0x78) socket$can_j1939(0x1d, 0x2, 0x7) 01:43:36 executing program 4: bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed}, 0x8) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 01:43:36 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000003e40), 0x8) 01:43:36 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001700)) 01:43:36 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 01:43:36 executing program 5: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000008c0)=0x1, 0x4) 01:43:36 executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:43:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x41) 01:43:36 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 01:43:36 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 01:43:36 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) 01:43:36 executing program 5: clone3(&(0x7f0000001340)={0x8008600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0x0], 0x1}, 0x58) 01:43:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x8) 01:43:36 executing program 1: clone3(&(0x7f0000001340)={0x8008600, 0x0, 0x0, 0x0, {}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0)=""/43, &(0x7f0000001300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 01:43:36 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 01:43:36 executing program 5: syz_io_uring_setup(0x1281, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:43:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/45) 01:43:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:43:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2911}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 01:43:36 executing program 5: syz_open_dev$audion(&(0x7f0000002280)='/dev/audio#\x00', 0x0, 0x248100) 01:43:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000001040)=@raw=[@map_val], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:43:37 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x7a69, &(0x7f0000001880), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001900), &(0x7f0000001940)) 01:43:37 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) 01:43:37 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @generic={0x0, "c0e96175c40c7fc5dd7bb46213e8"}, @generic={0x0, "b478087a3add5a7a232a27a3b7cf"}, @sco}) 01:43:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x80282) pwrite64(r0, 0x0, 0x0, 0x0) 01:43:37 executing program 2: syz_io_uring_setup(0x679c, &(0x7f0000001e40)={0x0, 0xa2a9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001ec0), &(0x7f0000001f00)) syz_io_uring_setup(0x17d4, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002040)=0x0, &(0x7f0000002080)) syz_io_uring_complete(r0) 01:43:37 executing program 4: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00), 0x8}) syz_io_uring_setup(0x3ce0, &(0x7f00000011c0)={0x0, 0x63fa}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 01:43:37 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x2, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "69120900f54f5324a080646cec7b71213c907f91195fd39dc8c42aa3e8094bea4576d7da2bbbc569950daa7132f407a3281dd4438e57277a63a86245ffdf7ec6ff8779dc7db135e9a1ff34e4a1ba24a3d57f10fb0f08824a7c2184ccfb119ec0a3694def4ddf5c4e821b5ff13c0b0a9ec00e709f47aba6b48c178fa44ea22d80bb38f30a113b2b175f755089460e6da388ac96193c6e9e7b62be193c6e98ec60b6751ecd7d8f67f76ae62e40c66e7341532dfc3f0a9a9295f80f13ef12a9ed7132a536d1185ddca78cbeed7009200807328c6992f114af20a1e60c26ded70e29b0cc8d0fa210eeb23fdff9b9a9101782ce0ac5da93ba5e3f94bdb2d246cbddb3d2a2985ac488eb965becb69167dceeb007482b673008a685c2b8528843d0d191085fdef25bbb8b920f250f12b33278f9c593506fa577d5d94f8305f517c33ee6a8f961224cf24dc816a770cb6c20210525ac15012951c1554aae3456bb4c5627d2c2543f4f6279b83a270d855b3b288e06c695f5dbe0a69c71ad7c8d69603d26f92a5249ba54525c767f4c03dddbdb9e5813e74b2003d538014b425e542f1cc631c354f873f5b7d0b8c463bca854fae888a3f70423ebdce01f5e2592e00495b6e32796b19e71e3a6c9e9ea9a2f8525519a121ef9495fa9b6d1d059a3853117bd81199b792877863a045d9ab93463fa579c93f12fda69b925efaa41b7976cc159454ae21af206121e3368d6e91d7c80fe2f3b3e5c5037c4ea9b610f4ba2725909c6d57bfff42b47ad9381fdb76775f24d8b76e5b6b58fa4036ff90e179712a2bd34e84c892bafa2876769ec13f0c859070a3b3690a813badee550b7b9bda2ef8b172fad0a507c7662d5ae1a21d12c6e93b751546e9f23ff427d64caf68fa7256d04dda1c0b1a0493ba91b1fae8270046643ce6ee1a0e1ceb604d8c54be35ca2db26d2ef64fc55ed7637352fe41978d3f24542bf6400f54033f13c905ece46159d52d69345e480395ffc7e50619deaa255c553c7de5c45256fbd588e393d5c06e0898d1c2f347477082c21599fb2f3d4a0691833d7e8c6f2e9f91d99085121c3b1ccba616ebe4260230c1dea07250bad14874289edb4849b0b2d4658e8920beeb3a3660d57b92cde51a989d1196caa7a8b952f686d13a34be8949fa7dc8e759ea319188588c7a341e3e268b3b727af9571c8f9c2e04489ee37441a3c32dfcd7c2ba9a396fa1893a915ca9be21e95ac53f7d34297dd13f701381a28365ef1a2bd77f39644af2a2ab50f678c777e2807a0eb00544d4738877a98beae113771c057ac5fa5f0bad3eeaae45d75a4326b0562c8873cd318b6beaa37256b8beb316fa0a5b59a810fc67aae7a5bffc1eb9af6d41b64e7cc6e258a1cab0d780bb9c1db119c80179c8132afa19bef095c6c1518fb5ef370d93d330aad78536f80adcfcfb90664bd10a6cd9f96abad5cda425d4b0a4b55c4bf845a9b23808232b0cb0cbbc1903c1ef3285e972a64f518e1876eb85c88c5c25f56b762e3b022022c574a8367fca531a991e499de50462e58dc3f88cd3b370b4760f180c9318e231f4a23e808dabbaa13b5e757a8219f1b035aaf5fccab67e8ffe631dd7e4576dae78491eeb519cc4f428b095ba495b918df9ed3e4ef49edd94dfa3ece2d240875a30e91cbc4d4d44dde79f7da0ee202aac201ffcbc862e7963598ce8dcd8f35142e62d55b9079f8344724952c2080e5408c5d189f0358f709082032c6bc2bde26f55192c063d9f906a87e0f6fc6c5c72c278e2ac641556beef93c630065a674b4553fc9b7f42231e3d5d5922081e4ad83539926a2c2ff482322119c0dd388e73dbba88873e95c22e809a40494fa1ffed2934db5af1087e303fc506e8307e8bd84511ee47498e616e2f194cb2e6b0fd27ba2df4a1f24d014d8089157d683d76ee037aafe033a9af6987906a252a4d64f782b4556d0fd8f1c4598c7398262d668f80395659d126f117440b912102e27ce48f3532f0c7a4b4835bc552f5443393461f56d14728809617261149d80b2108dbb2ccabe263c8dce972e2203e51153fc3fdca1cf7bf672057d904d2c77a3972b1733c30e285264bc90125b1b96653aa91c9f7effd616f7ee3bb8324be7d623b755a41d5833ab642e474de0058a078474d963994e8172a1fa5ba9cc2b0de4c21b19e6c0452b807b5e04fc8b933d57a750396f8409c647779aca32e98b4a872e87a928569f5d8e4d44ee572f2e213f07980a8b5528c74c909f7f852eff0f1ff6f219f06737dfd38c57ef1f259e78a6bf7e522971af0425888e247fd631ee813034482295f6084f8f5eb61dd4a1c5d22608ff443700176139ae106df65f64e758ee497f714ec226d83270cbf71bf5c0502afba03dd79608207cf2c6a0ef0da58a678d3e35f6e2aebf14a8d2529567b14034ad064fb3c601f737e14c157aab07b16eff998b019b265e5a0564c22aabbd1972129cc4b2c4411fb4fe1c1bb6c02c1f5288bb7263ef1f03d03b36f701790cde995a6435e91d0880b20cc044bb136c0a2e37db626416e4593830f4775af89d1ad7497cbb1bd5a478b0a62991b8b4be3de8dc9687230d1e3e80a2eb64b0487666557cfabb1603368853ec6c679ef4e60734bf98b51b6a1cb77f98bce82f64b694aa4759b91e2b0204702dc5b2451f5d5443d2eb501371046eabb0361ce30477696df0f1ab08df647178685a21699ce5d0f89b4cfae7119f453daa60db7a674da4dc406864e6e6a93dba23049725870592cccddaeb5cfb671cf885831e7773e5136b9f383c38317ca4578eae75a43a3d00b95ff35c20b1561e3dd0a98598dc816fa97295ff29140b38d39bbe76d359d28b626566ccd12d0f8a5470544b70f9f9618047f6cfe5ebf980763150d478b38a9a9ac525225c25aad617e12fc32acd6769490bd9aade5b89ead7c87e21effd90c9320a0d8ae46e3a6108c20144281dee675a875b965d3a040d7a39d5364c866b2dbcfa9a53efc26764cfa1cd72f2a6795be09758e7378d0b17132864e8f61427d1ad91089fe49fa760086cb858f09cc7ad8db256f5175be89f38de99c1666b33fe1396469009972da960d0978943a8a47ddb84f174c133a23ec5c2d960eb995d3fbecca79f44b973012cda49a30fcb4784e5f63f89ef8283f541785bb40df8a31a5b8e342e4587c1db5b7562503b766145fffd97f37482ea042eaac609ea7f356fb829e4e3c150ec3da89e92da6c94aafd8602a33d62d94d8c7d1a114459168461efbf7cedb193aa0d294984e63b29f3be47a115d9e95d1de2b863f6a96f317fd668e397da4605b9e3ef3b8ba9ccac1703dccecfbf4f268dee6024deb705543c41f015f9be867c3ed548b030d6b05964058821308370f8421a7190e689865fb0a892bbfabdfe1be7434807a0bee1932efe1b294d23748917570632fd700daedaaf8a243a7a02369a684124434a09ddd1887b0e525d943f1f8195cd38367e29b0d83c73390ddedeea21d682ab08c4a12d08871886c6cb46bde42ef28c8ec36d208b56d04652faf4f02fa677943fb98462110a4d393d0eaaf93a44b596ccec20475ae14cf77e0513c728af8e864070372411b0208dcaca6b8da761ad35b861722676ca60edff38caf64612003889b73f29ef0127fcb51f2e38029cd7be2920792aac1e3afd368a3f7b5ab261e88f86f0a02948fee2c1ef523d8d7fadb25e029f377968429aa0ec5fb1e15fb5704fb1ffb5bd89e6e4dfa97ffdb4079984a9893af3ffcbae438ca91bce59fba1541056edc8fab46b66d8188705bf0cc6298fbc725d600928b43192afea201a0877258efb163436e5bb97b5064315a1175a90d0750b8e831561421ffca4ef22623f2adcf885906f955a719beaf5fd4a3a6aa11dec73db998fb76a6572a7c650e74a7d2b8a1aad3eacc55eaee393290e4039fbaaec8275a850de42d43b535a0adc3fda74909d23ded3c1b8b1a7528ceb89ee72dacd77e3de58c0d1833e6cba81aa504584a9f60c6d09eadd82bcc038be6eb545825b59857d3655413de0099377ff28faa081bf2aa9b52e72b87544aa05796ad30fbb6058522de1a412dc90e52b11871ff3ad9dbe7c0c7ffd7a39eb2efc71f9ca653560a47c06d49673538d26fd8b7fc0d27df83ba0e0882deac6fe86bcf24ac341d5c330dd4c46acddd26bf5fb9870f63cd375392ed8e703571f9d4a45f9bf7c7aca3d064930a34214f3dc8cc6d2ee0aea357b93afb399d23a6216157f09ecc6898da0174c6a52598c822e3e05eaf94c354bea8f05e7b32cf47dcaaef84e58572b053aa4d27827c894484bd54d518a43d87c75fd83fbae7282f4bde9274312bd042568da9617e09f979cc8280f9692b31408d5fefb641e8b1841229aac0e3914b2a4344ddcb45ce5d273eb66b052ad6ec9e46c63d2b77364ec361a4d490ecb141ae8dba076a1343386809df4388cbadb0a33cd1079e0f7ab0f9f83f29361cae9921924671f690cb8c8717ffe2e34fab1098e2561cb78bbf3c4ac5629febcb59f3afd2917759e17126d6621b1e8a581d1b3e2ff0c2ec00d35ff1b5feaa2adf77395744cde7bc979d4630800fdffb649707b2f87c7ed2e104cc111a7e3254a7b7844de344642f33f42ee08bb11b6d31942b351875483b2426be092423b042e7ab5be92abf4b7ba1845dbde9de4b66f74e653423a708a8e0fdccfd85eededa8e25ab9e30af913e43dcd6e26e3e04c676deeb689b5d870f1887b8a8d9a13637937af9f87e36f8eb3cf84fdbf077281f78b649fcd5273faa2120bc8669df9a7e94e585b4c5915b4b0fa47a03f90252a88e840a5b80bb973375ae6dbd80c897d27fe94a88217ab6939b27bea7c5a059de4a74e938825917109478e7488aa3e6ce37a7c0c6214a29721baf8d4ce3fce2826b65521f927d3cca411cf87b210272a5378908d133a513910641f118f008bfc2acdea203232c8eafbc7f40e4f37fd6ef980aea5dcd404cdc2c483a04f37a56fa40b4ef53d19d427ca202909ec8f780301975b18778265a0ca5f203e4b883dd37424b68933cbdacc9fbe70657929e3de75eceeb0914983a12dd024cfab6424c0dbb3cc903477b9acadb7772f843c63e9382ef77b56a10242c24a15feb9cb9ffe5cc56cfa8a17e95641dfc301c86dffc1d94fb76ad97224eb216ba654143beb4b312c26d4d14add1062227c3b5d28b8683c46ec650e93a2d154d7f182a4011b1f0fdb139c7e81120f88c4cabc0c160613d6f859f2c8d60245ceef190160ef5a911952446179c6e65a0b86a62fef1c89dcf33ad03dfd999d7401d7984f25a649b3e42e83c45a24b43131bc74bf958194edc6145f04449a5132f6b38f668d4d653169ab893dca3ea07c89b5892ff77835612444454b1f548e733edd8d902b9d78"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000001040)=@raw=[@map_val], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:43:37 executing program 3: r0 = io_uring_setup(0x58b6, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 01:43:37 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uhid\x00', 0x0, 0x0) 01:43:37 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000001880), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001900), &(0x7f0000001940)) 01:43:37 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000180)) 01:43:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x7, 0x8, 0x9}, 0x8) 01:43:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000018c0)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 01:43:37 executing program 1: io_setup(0x8001, &(0x7f0000000000)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x2a0400, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[0x0]) 01:43:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) 01:43:37 executing program 0: getresuid(&(0x7f0000001e00), 0xffffffffffffffff, 0x0) 01:43:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) 01:43:38 executing program 4: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 01:43:38 executing program 5: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000001dc0)={0x0, 0x5, 0x0, 0x0, 0xc000000000, 0x7ff, 0x2, 0xffff}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x9}, 0x0, 0x0, 0x0) 01:43:38 executing program 0: io_uring_setup(0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 01:43:38 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) 01:43:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) 01:43:38 executing program 1: setfsgid(0xee01) syz_open_dev$audion(0x0, 0x0, 0x0) 01:43:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}}, 0x0) 01:43:38 executing program 1: io_setup(0x4366, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 01:43:38 executing program 4: clone3(&(0x7f0000001340)={0x8008600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:43:38 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fb1\x00', 0x0, 0x0) 01:43:38 executing program 2: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 01:43:38 executing program 0: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 01:43:38 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 01:43:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) 01:43:39 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000003e80)) 01:43:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000001040)=@raw=[@map_val={0x18, 0x1}], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) 01:43:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) 01:43:39 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000440)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, [], @value64}}) 01:43:39 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0xfed4) 01:43:39 executing program 4: syz_io_uring_setup(0x52de, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000440)) 01:43:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 01:43:39 executing program 5: clone3(&(0x7f0000001340)={0x8008600, 0x0, &(0x7f0000000100), 0x0, {}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0)=""/43, &(0x7f0000001300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 01:43:39 executing program 1: syz_io_uring_setup(0x7de6, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) 01:43:39 executing program 4: syz_io_uring_setup(0xf75, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 01:43:39 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/ocfs2_control\x00', 0x0, 0x0) 01:43:39 executing program 3: clone3(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) 01:43:39 executing program 2: syz_io_uring_setup(0x7a69, &(0x7f0000001880)={0x0, 0x6ed3, 0x0, 0x0, 0x381}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001900), &(0x7f0000001940)) 01:43:39 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 01:43:39 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 01:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004700)={0x14}, 0x14}}, 0x0) 01:43:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000069c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 01:43:39 executing program 4: pselect6(0x40, &(0x7f0000001dc0), 0x0, &(0x7f0000001e40)={0x5}, &(0x7f0000001ec0), 0x0) 01:43:39 executing program 1: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={0x0}) syz_io_uring_setup(0x3ce0, &(0x7f00000011c0)={0x0, 0x63fa}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 01:43:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="f97637bf8a1bf642abf6", 0xa) 01:43:39 executing program 4: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 01:43:39 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{0x0}], 0x800880, &(0x7f0000000600)={[{@discard='discard'}, {@gid={'gid', 0x3d, 0xee01}}, {@usrquota='usrquota'}], [{@measure='measure'}]}) 01:43:39 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcsa\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x42013, r0, 0x0) 01:43:39 executing program 0: socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={0x0}}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) 01:43:39 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x7fff}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffff]}, 0x8}) 01:43:39 executing program 2: clone3(&(0x7f0000000640)={0x20000, &(0x7f00000003c0), &(0x7f0000000400), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], 0x1}, 0x58) [ 969.516592][T22363] jfs: Unrecognized mount option "measure" or missing value 01:43:39 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "69120900f54f5324a080646cec7b71213c907f91195fd39dc8c42aa3e8094bea4576d7da2bbbc569950daa7132f407a3281dd4438e57277a63a86245ffdf7ec6ff8779dc7db135e9a1ff34e4a1ba24a3d57f10fb0f08824a7c2184ccfb119ec0a3694def4ddf5c4e821b5ff13c0b0a9ec00e709f47aba6b48c178fa44ea22d80bb38f30a113b2b175f755089460e6da388ac96193c6e9e7b62be193c6e98ec60b6751ecd7d8f67f76ae62e40c66e7341532dfc3f0a9a9295f80f13ef12a9ed7132a536d1185ddca78cbeed7009200807328c6992f114af20a1e60c26ded70e29b0cc8d0fa210eeb23fdff9b9a9101782ce0ac5da93ba5e3f94bdb2d246cbddb3d2a2985ac488eb965becb69167dceeb007482b673008a685c2b8528843d0d191085fdef25bbb8b920f250f12b33278f9c593506fa577d5d94f8305f517c33ee6a8f961224cf24dc816a770cb6c20210525ac15012951c1554aae3456bb4c5627d2c2543f4f6279b83a270d855b3b288e06c695f5dbe0a69c71ad7c8d69603d26f92a5249ba54525c767f4c03dddbdb9e5813e74b2003d538014b425e542f1cc631c354f873f5b7d0b8c463bca854fae888a3f70423ebdce01f5e2592e00495b6e32796b19e71e3a6c9e9ea9a2f8525519a121ef9495fa9b6d1d059a3853117bd81199b792877863a045d9ab93463fa579c93f12fda69b925efaa41b7976cc159454ae21af206121e3368d6e91d7c80fe2f3b3e5c5037c4ea9b610f4ba2725909c6d57bfff42b47ad9381fdb76775f24d8b76e5b6b58fa4036ff90e179712a2bd34e84c892bafa2876769ec13f0c859070a3b3690a813badee550b7b9bda2ef8b172fad0a507c7662d5ae1a21d12c6e93b751546e9f23ff427d64caf68fa7256d04dda1c0b1a0493ba91b1fae8270046643ce6ee1a0e1ceb604d8c54be35ca2db26d2ef64fc55ed7637352fe41978d3f24542bf6400f54033f13c905ece46159d52d69345e480395ffc7e50619deaa255c553c7de5c45256fbd588e393d5c06e0898d1c2f347477082c21599fb2f3d4a0691833d7e8c6f2e9f91d99085121c3b1ccba616ebe4260230c1dea07250bad14874289edb4849b0b2d4658e8920beeb3a3660d57b92cde51a989d1196caa7a8b952f686d13a34be8949fa7dc8e759ea319188588c7a341e3e268b3b727af9571c8f9c2e04489ee37441a3c32dfcd7c2ba9a396fa1893a915ca9be21e95ac53f7d34297dd13f701381a28365ef1a2bd77f39644af2a2ab50f678c777e2807a0eb00544d4738877a98beae113771c057ac5fa5f0bad3eeaae45d75a4326b0562c8873cd318b6beaa37256b8beb316fa0a5b59a810fc67aae7a5bffc1eb9af6d41b64e7cc6e258a1cab0d780bb9c1db119c80179c8132afa19bef095c6c1518fb5ef370d93d330aad78536f80adcfcfb90664bd10a6cd9f96abad5cda425d4b0a4b55c4bf845a9b23808232b0cb0cbbc1903c1ef3285e972a64f518e1876eb85c88c5c25f56b762e3b022022c574a8367fca531a991e499de50462e58dc3f88cd3b370b4760f180c9318e231f4a23e808dabbaa13b5e757a8219f1b035aaf5fccab67e8ffe631dd7e4576dae78491eeb519cc4f428b095ba495b918df9ed3e4ef49edd94dfa3ece2d240875a30e91cbc4d4d44dde79f7da0ee202aac201ffcbc862e7963598ce8dcd8f35142e62d55b9079f8344724952c2080e5408c5d189f0358f709082032c6bc2bde26f55192c063d9f906a87e0f6fc6c5c72c278e2ac641556beef93c630065a674b4553fc9b7f42231e3d5d5922081e4ad83539926a2c2ff482322119c0dd388e73dbba88873e95c22e809a40494fa1ffed2934db5af1087e303fc506e8307e8bd84511ee47498e616e2f194cb2e6b0fd27ba2df4a1f24d014d8089157d683d76ee037aafe033a9af6987906a252a4d64f782b4556d0fd8f1c4598c7398262d668f80395659d126f117440b912102e27ce48f3532f0c7a4b4835bc552f5443393461f56d14728809617261149d80b2108dbb2ccabe263c8dce972e2203e51153fc3fdca1cf7bf672057d904d2c77a3972b1733c30e285264bc90125b1b96653aa91c9f7effd616f7ee3bb8324be7d623b755a41d5833ab642e474de0058a078474d963994e8172a1fa5ba9cc2b0de4c21b19e6c0452b807b5e04fc8b933d57a750396f8409c647779aca32e98b4a872e87a928569f5d8e4d44ee572f2e213f07980a8b5528c74c909f7f852eff0f1ff6f219f06737dfd38c57ef1f259e78a6bf7e522971af0425888e247fd631ee813034482295f6084f8f5eb61dd4a1c5d22608ff443700176139ae106df65f64e758ee497f714ec226d83270cbf71bf5c0502afba03dd79608207cf2c6a0ef0da58a678d3e35f6e2aebf14a8d2529567b14034ad064fb3c601f737e14c157aab07b16eff998b019b265e5a0564c22aabbd1972129cc4b2c4411fb4fe1c1bb6c02c1f5288bb7263ef1f03d03b36f701790cde995a6435e91d0880b20cc044bb136c0a2e37db626416e4593830f4775af89d1ad7497cbb1bd5a478b0a62991b8b4be3de8dc9687230d1e3e80a2eb64b0487666557cfabb1603368853ec6c679ef4e60734bf98b51b6a1cb77f98bce82f64b694aa4759b91e2b0204702dc5b2451f5d5443d2eb501371046eabb0361ce30477696df0f1ab08df647178685a21699ce5d0f89b4cfae7119f453daa60db7a674da4dc406864e6e6a93dba23049725870592cccddaeb5cfb671cf885831e7773e5136b9f383c38317ca4578eae75a43a3d00b95ff35c20b1561e3dd0a98598dc816fa97295ff29140b38d39bbe76d359d28b626566ccd12d0f8a5470544b70f9f9618047f6cfe5ebf980763150d478b38a9a9ac525225c25aad617e12fc32acd6769490bd9aade5b89ead7c87e21effd90c9320a0d8ae46e3a6108c20144281dee675a875b965d3a040d7a39d5364c866b2dbcfa9a53efc26764cfa1cd72f2a6795be09758e7378d0b17132864e8f61427d1ad91089fe49fa760086cb858f09cc7ad8db256f5175be89f38de99c1666b33fe1396469009972da960d0978943a8a47ddb84f174c133a23ec5c2d960eb995d3fbecca79f44b973012cda49a30fcb4784e5f63f89ef8283f541785bb40df8a31a5b8e342e4587c1db5b7562503b766145fffd97f37482ea042eaac609ea7f356fb829e4e3c150ec3da89e92da6c94aafd8602a33d62d94d8c7d1a114459168461efbf7cedb193aa0d294984e63b29f3be47a115d9e95d1de2b863f6a96f317fd668e397da4605b9e3ef3b8ba9ccac1703dccecfbf4f268dee6024deb705543c41f015f9be867c3ed548b030d6b05964058821308370f8421a7190e689865fb0a892bbfabdfe1be7434807a0bee1932efe1b294d23748917570632fd700daedaaf8a243a7a02369a684124434a09ddd1887b0e525d943f1f8195cd38367e29b0d83c73390ddedeea21d682ab08c4a12d08871886c6cb46bde42ef28c8ec36d208b56d04652faf4f02fa677943fb98462110a4d393d0eaaf93a44b596ccec20475ae14cf77e0513c728af8e864070372411b0208dcaca6b8da761ad35b861722676ca60edff38caf64612003889b73f29ef0127fcb51f2e38029cd7be2920792aac1e3afd368a3f7b5ab261e88f86f0a02948fee2c1ef523d8d7fadb25e029f377968429aa0ec5fb1e15fb5704fb1ffb5bd89e6e4dfa97ffdb4079984a9893af3ffcbae438ca91bce59fba1541056edc8fab46b66d8188705bf0cc6298fbc725d600928b43192afea201a0877258efb163436e5bb97b5064315a1175a90d0750b8e831561421ffca4ef22623f2adcf885906f955a719beaf5fd4a3a6aa11dec73db998fb76a6572a7c650e74a7d2b8a1aad3eacc55eaee393290e4039fbaaec8275a850de42d43b535a0adc3fda74909d23ded3c1b8b1a7528ceb89ee72dacd77e3de58c0d1833e6cba81aa504584a9f60c6d09eadd82bcc038be6eb545825b59857d3655413de0099377ff28faa081bf2aa9b52e72b87544aa05796ad30fbb6058522de1a412dc90e52b11871ff3ad9dbe7c0c7ffd7a39eb2efc71f9ca653560a47c06d49673538d26fd8b7fc0d27df83ba0e0882deac6fe86bcf24ac341d5c330dd4c46acddd26bf5fb9870f63cd375392ed8e703571f9d4a45f9bf7c7aca3d064930a34214f3dc8cc6d2ee0aea357b93afb399d23a6216157f09ecc6898da0174c6a52598c822e3e05eaf94c354bea8f05e7b32cf47dcaaef84e58572b053aa4d27827c894484bd54d518a43d87c75fd83fbae7282f4bde9274312bd042568da9617e09f979cc8280f9692b31408d5fefb641e8b1841229aac0e3914b2a4344ddcb45ce5d273eb66b052ad6ec9e46c63d2b77364ec361a4d490ecb141ae8dba076a1343386809df4388cbadb0a33cd1079e0f7ab0f9f83f29361cae9921924671f690cb8c8717ffe2e34fab1098e2561cb78bbf3c4ac5629febcb59f3afd2917759e17126d6621b1e8a581d1b3e2ff0c2ec00d35ff1b5feaa2adf77395744cde7bc979d4630800fdffb649707b2f87c7ed2e104cc111a7e3254a7b7844de344642f33f42ee08bb11b6d31942b351875483b2426be092423b042e7ab5be92abf4b7ba1845dbde9de4b66f74e653423a708a8e0fdccfd85eededa8e25ab9e30af913e43dcd6e26e3e04c676deeb689b5d870f1887b8a8d9a13637937af9f87e36f8eb3cf84fdbf077281f78b649fcd5273faa2120bc8669df9a7e94e585b4c5915b4b0fa47a03f90252a88e840a5b80bb973375ae6dbd80c897d27fe94a88217ab6939b27bea7c5a059de4a74e938825917109478e7488aa3e6ce37a7c0c6214a29721baf8d4ce3fce2826b65521f927d3cca411cf87b210272a5378908d133a513910641f118f008bfc2acdea203232c8eafbc7f40e4f37fd6ef980aea5dcd404cdc2c483a04f37a56fa40b4ef53d19d427ca202909ec8f780301975b18778265a0ca5f203e4b883dd37424b68933cbdacc9fbe70657929e3de75eceeb0914983a12dd024cfab6424c0dbb3cc903477b9acadb7772f843c63e9382ef77b56a10242c24a15feb9cb9ffe5cc56cfa8a17e95641dfc301c86dffc1d94fb76ad97224eb216ba654143beb4b312c26d4d14add1062227c3b5d28b8683c46ec650e93a2d154d7f182a4011b1f0fdb139c7e81120f88c4cabc0c160613d6f859f2c8d60245ceef190160ef5a911952446179c6e65a0b86a62fef1c89dcf33ad03dfd999d7401d7984f25a649b3e42e83c45a24b43131bc74bf958194edc6145f04449a5132f6b38f668d4d653169ab893dca3ea07c89b5892ff77835612444454b1f548e733edd8d902b9d78"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f0000001040)=@raw=[@map_val], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x4, 0x0, 0x7f}, 0x10}, 0x78) socket$can_j1939(0x1d, 0x2, 0x7) 01:43:39 executing program 3: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/95, 0x5f, 0x0, 0x0}, 0x58) 01:43:39 executing program 5: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) 01:43:39 executing program 4: read$fb(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000005e00)='batadv\x00', 0xffffffffffffffff) 01:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={0x0}}, 0x0) 01:43:40 executing program 0: clone3(&(0x7f00000002c0)={0x28000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}, 0x58) 01:43:40 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 01:43:40 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) 01:43:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=@raw=[@map_val], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:43:40 executing program 2: capget(&(0x7f0000000480), 0x0) 01:43:40 executing program 3: pselect6(0x40, &(0x7f0000001dc0), 0x0, &(0x7f0000001e40)={0x5}, 0x0, 0x0) 01:43:40 executing program 0: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000001e00), &(0x7f0000001e40)={0x0, 0x0, 0x80, 0x100, 0x7, 0x9, 0x3, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f40)={&(0x7f0000001f00), 0x8}) 01:43:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @generic={0x0, "72a987f12efffffff28985970004"}, @isdn, @xdp}) 01:43:40 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, 0x0, 0x0) 01:43:40 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:43:40 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000180)) 01:43:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x6, 0x4) 01:43:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4800, 0x0) 01:43:40 executing program 5: io_setup(0x4366, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0xfff]}, 0x8}) 01:43:40 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, &(0x7f0000000940)={&(0x7f0000000900)={[0xffff]}, 0x8}) 01:43:40 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:43:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/16) 01:43:41 executing program 3: socket$unix(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40880c0) r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 01:43:41 executing program 5: syz_open_dev$video4linux(&(0x7f0000004b80)='/dev/v4l-subdev#\x00', 0x0, 0x10400) 01:43:41 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440), {}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], 0x1}, 0x58) 01:43:41 executing program 0: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001ec0), &(0x7f0000001f40)={&(0x7f0000001f00), 0x8}) 01:43:41 executing program 4: syz_io_uring_setup(0x7b8, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000001dc0)={0x9}, &(0x7f0000001e00), &(0x7f0000001e40)={0x5}, &(0x7f0000001ec0), &(0x7f0000001f40)={&(0x7f0000001f00)={[0x8]}, 0x8}) 01:43:41 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair(0x27, 0x0, 0x0, &(0x7f0000003e80)) 01:43:41 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00']) r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000280)=""/4096) 01:43:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000007280)={0x0, 0x0, 0x0, 0x0, 0x224}, 0x40) 01:43:41 executing program 1: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) 01:43:41 executing program 5: syz_io_uring_setup(0x679c, &(0x7f0000001e40), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001ec0), &(0x7f0000001f00)) 01:43:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0xfffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x24}}, 0x40840) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) setns(r0, 0x0) 01:43:41 executing program 4: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000001d00)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/sequencer2\x00', 0x0, 0x0) 01:43:41 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) 01:43:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) 01:43:41 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 01:43:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0xfffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x24}}, 0x40840) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) setns(r0, 0x0) 01:43:41 executing program 5: clone3(&(0x7f0000000640)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:43:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x40000}], 0x1, 0x0) 01:43:41 executing program 1: r0 = fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 01:43:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000100)=0x300) 01:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/53, &(0x7f0000000040)=0x35) 01:43:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)='o', 0x1}], 0x0, &(0x7f00000003c0)) 01:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:43:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffffffffffffdf, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x0) 01:43:42 executing program 5: syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x0) 01:43:42 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000280)='./file0\x00', 0xae, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x60000000000000}], 0x9040, &(0x7f00000003c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute'}}]}) 01:43:42 executing program 2: getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) 01:43:42 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) [ 971.740092][T22509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 971.772793][T22509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 01:43:42 executing program 2: sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) 01:43:42 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001100)={[{@codepage={'codepage', 0x3d, 'iso8859-2'}}, {@file_umask={'file_umask'}}, {@dir_umask={'dir_umask'}}, {@gid={'gid', 0x3d, 0xee00}}, {@session={'session'}}, {@quiet='quiet'}], [{@dont_hash='dont_hash'}]}) syz_mount_image$vxfs(&(0x7f00000012c0)='vxfs\x00', 0x0, 0x0, 0x3, &(0x7f0000004780)=[{0x0}, {0x0}, {0x0}], 0x0, 0x0) getresuid(&(0x7f0000005a80), &(0x7f0000005ac0), 0x0) syz_mount_image$hfs(&(0x7f0000005c00)='hfs\x00', &(0x7f0000005c40)='./file1\x00', 0x0, 0x1, &(0x7f0000006e40)=[{0x0}], 0x0, 0x0) [ 971.810944][T22525] loop0: detected capacity change from 0 to 264192 01:43:42 executing program 4: syz_io_uring_setup(0x4420, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x3bf0, &(0x7f0000000100)) 01:43:42 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001ac0)='reiserfs\x00', &(0x7f0000001b00)='./file0\x00', 0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)={[{@grpquota='grpquota'}]}) 01:43:42 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f0000001b00)='./file0\x00', 0x0, 0x2, &(0x7f0000001e00)=[{&(0x7f0000001b40)='a', 0x1}, {&(0x7f0000001d40)="4d3a987386784e282ca3a5845c463c82e3ed0d6cfe99c2dda449d0", 0x1b, 0xae05}], 0x0, 0x0) [ 971.905963][T22525] loop0: detected capacity change from 0 to 264192 [ 971.917491][T22539] hfs: unable to parse mount options 01:43:42 executing program 0: syz_mount_image$vxfs(&(0x7f00000012c0)='vxfs\x00', &(0x7f0000001300)='./file0\x00', 0x0, 0x0, &(0x7f0000004780), 0x0, &(0x7f0000004880)) [ 972.032058][T22557] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 972.051077][T22539] hfs: unable to parse mount options [ 972.052523][T22570] vxfs: WRONG superblock magic 00000000 at 1 [ 972.064394][T22563] loop5: detected capacity change from 0 to 174 [ 972.074250][T22570] vxfs: WRONG superblock magic 00000000 at 8 [ 972.080525][T22570] vxfs: can't find superblock. [ 972.093361][T22579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 972.103237][T22579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 01:43:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) 01:43:42 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 972.134047][T22570] vxfs: WRONG superblock magic 00000000 at 1 [ 972.141058][T22570] vxfs: WRONG superblock magic 00000000 at 8 [ 972.147913][T22563] loop5: detected capacity change from 0 to 174 01:43:42 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00', 0xffffffffffffffff) [ 972.175705][T22557] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 972.194580][T22570] vxfs: can't find superblock. 01:43:42 executing program 2: getresuid(&(0x7f0000000700), &(0x7f0000000740), 0x0) 01:43:42 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00', r0) 01:43:42 executing program 4: syz_mount_image$nfs(&(0x7f00000054c0)='nfs\x00', 0x0, 0x0, 0x1, &(0x7f00000059c0)=[{&(0x7f0000005600)="d9b9", 0x2, 0x7fffffff}], 0x0, &(0x7f0000005b40)) 01:43:42 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$bfs(0x0, 0x0, 0x0, 0x5, &(0x7f0000001400)=[{&(0x7f0000001000)='z', 0x1}, {&(0x7f0000001100)="1b", 0x1}, {&(0x7f0000001180)="d2", 0x1}, {&(0x7f0000001240)="d6dd33c964a87deca3", 0x9, 0xfffffffffffffff8}, {&(0x7f0000001300)="86", 0x1, 0x10000}], 0x0, 0x0) 01:43:42 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x0, 0x0) 01:43:42 executing program 5: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 01:43:42 executing program 0: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) 01:43:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/168, &(0x7f0000000100)=0xa8) 01:43:42 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000c00)='/dev/snd/controlC#\x00', 0x0, 0x20040) [ 972.367021][T22616] loop4: detected capacity change from 0 to 264192 [ 972.382466][T22619] loop1: detected capacity change from 0 to 16383 01:43:42 executing program 1: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x9040, &(0x7f00000003c0)) [ 972.438698][T22616] loop4: detected capacity change from 0 to 264192 01:43:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 01:43:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="6fd80b86097d9b188fc49bb285cdd199f6ed262078fa1a4557355bca802c76c83382443a97374155", 0x28, 0x60000000000000}], 0x9040, &(0x7f00000003c0)) 01:43:42 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x6100, 0x0) 01:43:42 executing program 5: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)='o', 0x1, 0x60000000000000}], 0x0, &(0x7f00000003c0)={[], [{@smackfstransmute={'smackfstransmute'}}, {@uid_eq={'uid'}}]}) 01:43:42 executing program 0: syz_mount_image$hfs(0x0, &(0x7f0000005c40)='./file1\x00', 0x3, 0x2, &(0x7f0000006e40)=[{0x0, 0x0, 0x8000}, {&(0x7f0000006d80)="427ce07e247c71ecae8230cb743a8fec659a4430671ab96ece10006edf0a1e90dd5cda406adfc2c813c1994eae864d2b4876d4577c5d8912207f8536f3959b6ef89627e847e58fcad9c0364ee1d00d9c89f9359b14c2feb0e5d0f555747cd222914cfac4c42199a018b529314934b4040c3c9118020fdb9bf8f8d271c3c584e2a74e60078f2602282c8734110c", 0x8d, 0x6}], 0xc01, &(0x7f0000006ec0)={[{@file_umask={'file_umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x7}}], [{@obj_type={'obj_type', 0x3d, 'fsname'}}, {@subj_user={'subj_user', 0x3d, 'root'}}]}) 01:43:42 executing program 3: sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x80c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x30c, 0x0, 0x4, 0x70bd27, 0x0, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x4, 0x4d, 0x8, 0x1}, {0xc, 0x3, 0x0, 0x5}, {0x3, 0x2, 0x80, 0x6}, {0x2, 0x4, 0x7f, 0x5}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x9, 0x81, 0x0, 0x1}, {0x25a, 0x3f, 0x9, 0x8}, {0x4, 0x4, 0x1}, {0xf0d3, 0x80, 0x2, 0xfff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x6, 0x2, 0x3, 0x3}, {0x0, 0x17, 0x5}, {0x0, 0x0, 0x6, 0x6}, {0x400, 0x4, 0x5, 0x80000000}, {0x0, 0x7f, 0xba, 0xfff}, {0x8, 0xac, 0x4, 0x80000000}, {0x8, 0xff, 0x1, 0x9}, {0x4, 0x1f, 0x6, 0x5}, {0x800, 0x3f, 0x81, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffc0000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) syz_mount_image$bfs(0x0, &(0x7f0000000fc0)='./file0\x00', 0x6, 0x4, &(0x7f0000001400)=[{&(0x7f0000001000)="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", 0xff, 0x200}, {&(0x7f0000001100)="1b33a76909aa39b57bf82f6aaec6143f7705b41fb8ec9de1ac726a7ff2894291f99f2aa79150def63d054e90ea2511915c535a8e09f11c818c2914f69ffedce84cf17d7049664b5c6d770bf1456f2e", 0x4f, 0x7}, {&(0x7f0000001240)="d6dd33c964a87deca3c4564b12dbdd513885f5120ac51a314b685051cf7e4d26fd5d3d5c569de0a78449945713a90e0416bc608b402b87db5d020c7060d1204739567be7d0476903a65b85322e2dfc2edebce80a127381f6169139", 0x5b, 0xfffffffffffffff8}, {&(0x7f0000001300)="86246b5aa8c85e53f659e12395a775bba06fc2669dd39ea6660e391efdc77808c431754f07f4b546d48b9295fd8d72100c18358850e90d20b57ab2ba8743451d3092d882ae3db9deaee4b7337e92c99d0e988963250db2a5d96cf6d9521312de7faaf1060a883d01d255e0c2f48f5412042947dc5b94aade36a5129edef0b4f0b6c8bf96f2ca9bac6ad94f6a68ae5780ddaaa6f689375012e7d5305897879a2d4543bda27064a72ebec887b3bc8d6c31c1c9641dd3082aa32fc57d940d19a5bb8a91365e93bb6d", 0xc7, 0x10000}], 0x800000, &(0x7f0000001480)={[{'notify_peers_count\x00'}, {'\n!:)'}, {':'}, {'mcast_rejoin_interval\x00'}, {'bpf_hash_func\x00'}, {'queue_id\x00'}, {}, {'queue_id\x00'}], [{@seclabel='seclabel'}, {@fowner_gt={'fowner>'}}, {@fowner_gt={'fowner>', 0xee00}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'hash_to_port_mapping\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 01:43:42 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)='o', 0x1}], 0x0, 0x0) [ 972.594834][T22655] loop4: detected capacity change from 0 to 264192 [ 972.618738][T22658] loop0: detected capacity change from 0 to 128 [ 972.623768][T22664] loop5: detected capacity change from 0 to 264192 [ 972.644289][T22660] loop3: detected capacity change from 0 to 16383 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:43 executing program 4: creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) close(r0) [ 972.700674][T22664] loop5: detected capacity change from 0 to 264192 [ 972.710379][T22655] loop4: detected capacity change from 0 to 264192 [ 972.729241][T22658] loop0: detected capacity change from 0 to 128 [ 972.739234][T22679] loop3: detected capacity change from 0 to 16383 01:43:43 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xff86) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 01:43:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000d00)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) 01:43:43 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='],-{)[%\\++*)\\-\x1a\x00', 0x0, r1) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) [ 972.792682][ T36] audit: type=1804 audit(6971967823.066:102): pid=22700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir631973689/syzkaller.zrhnWj/1893/bus" dev="sda1" ino=14366 res=1 errno=0 01:43:43 executing program 4: r0 = syz_io_uring_setup(0x4420, &(0x7f0000000000)={0x0, 0x560b, 0x0, 0x0, 0x301}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x3bf0, &(0x7f0000000100)={0x0, 0xe32c, 0x0, 0x0, 0x0, 0x0, r0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x3b}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048c0}, 0xc000) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) 01:43:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000440)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x2, 0x0) 01:43:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{}, {}]}) 01:43:43 executing program 3: clone(0x3a3dd4008480af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) clone(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:43 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x10000, 0x1, &(0x7f0000000580)=[{0x0}], 0x800880, &(0x7f0000000600)={[{@discard='discard'}, {@gid={'gid', 0x3d, 0xee01}}, {@usrquota='usrquota'}], [{@measure='measure'}]}) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25e47204bc42c1a2) 01:43:43 executing program 5: syz_io_uring_setup(0x157, &(0x7f0000000100), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:43:43 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x80000) [ 973.004063][T22728] ubi0: attaching mtd0 [ 973.018897][T22728] ubi0: scanning is finished [ 973.038316][T22728] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 01:43:43 executing program 0: openat$fb1(0xffffffffffffff9c, 0x0, 0x402180, 0x0) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = memfd_create(&(0x7f0000000340)='/vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\xe9\xb0\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60\xfc\xff\xff\xff\xff\xff\xff\xff\xf7\a^L,\x98\xa2(2,\x8c\"\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\x00'/187, 0x0) ftruncate(r1, 0x1000000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101202, 0x0) sendfile(r2, r1, 0x0, 0xeefffdef) [ 973.054366][T22728] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 973.067738][T22728] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 973.089770][T22728] ubi0: VID header offset: 64 (aligned 64), data offset: 128 01:43:43 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) syz_io_uring_setup(0x157, &(0x7f0000000100)={0x0, 0xaaba, 0x1, 0x0, 0x2c5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) socket$bt_bnep(0x1f, 0x3, 0x4) socketpair(0x1d, 0x80000, 0x40, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) 01:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000815) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=""/244, 0xf4}, 0x40) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000640)={r0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x7fff, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001e00)='l2tp\x00', 0xffffffffffffffff) [ 973.127534][T22728] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 973.156423][T22728] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) [ 973.192714][T22728] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3928551946 [ 973.216249][T22728] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 01:43:43 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f000000fc40)='/dev/fb0\x00', 0x101001, 0x0) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) [ 973.247688][T22736] ubi0: background thread "ubi_bgt0d" started, PID 22736 [ 973.257561][T22734] ubi: mtd0 is already attached to ubi0 [ 973.283530][T22761] loop2: detected capacity change from 0 to 128 01:43:43 executing program 0: r0 = syz_open_dev$char_raw(&(0x7f000000fe80)='/dev/raw/raw#\x00', 0x1, 0x0) read$char_raw(r0, 0x0, 0x0) [ 973.293931][T22761] JFS: discard option not supported on device [ 973.310970][T22761] jfs: Unrecognized mount option "measure" or missing value 01:43:43 executing program 2: r0 = eventfd(0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 01:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f000001e140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)) 01:43:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0xffff, 0x0, 0x0, 0x90}]}) 01:43:43 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @dev}, 0x8, {0x2, 0x0, @multicast1}, 'wlan0\x00'}) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) 01:43:43 executing program 5: syz_io_uring_setup(0x157, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2c5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x899cf36) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x6, 0x4) 01:43:43 executing program 0: eventfd(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000640)={r0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c80)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000001c40)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x101) syz_genetlink_get_family_id$l2tp(&(0x7f0000001e00)='l2tp\x00', 0xffffffffffffffff) 01:43:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 01:43:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 2: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0xffff}]}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x1) 01:43:44 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f000001e100)=0xffffffffffffffff, 0x8) 01:43:44 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000640)) syz_io_uring_setup(0x157, &(0x7f0000000100)={0x0, 0xaaba, 0x1, 0x0, 0x2c5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:43:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000480)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast2}, {@in6=@private0, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}, 0x63}}]}, 0x138}}, 0x0) 01:43:44 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000fe00)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 01:43:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000cc0)=@assoc_value, &(0x7f0000000d00)=0x8) 01:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:43:44 executing program 5: openat$fb1(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/fb1\x00', 0x0, 0x0) 01:43:44 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 01:43:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 5: syz_open_dev$char_raw(&(0x7f000000fe80)='/dev/raw/raw#\x00', 0x1, 0x20040) 01:43:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 01:43:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 01:43:44 executing program 4: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001380)={&(0x7f0000001340)='./file0\x00'}, 0x10) 01:43:44 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1) 01:43:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:43:44 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1) 01:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0) [ 974.107272][ T3012] Bluetooth: hci6: Frame reassembly failed (-84) 01:43:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 4: getrandom(&(0x7f0000000000)=""/200, 0xc8, 0x3) 01:43:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2dc, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/138) 01:43:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000), 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="0e", 0x1}, {&(0x7f0000000400)='#', 0x1}], 0x2}}, {{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D'], 0x40}}], 0x2, 0x0) [ 976.172216][ T9488] Bluetooth: hci6: command 0x1003 tx timeout [ 976.178378][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 978.269192][ T9488] Bluetooth: hci6: command 0x1001 tx timeout [ 978.275258][ T8405] Bluetooth: hci6: sending frame failed (-49) [ 980.366180][ T9575] Bluetooth: hci6: command 0x1009 tx timeout 01:43:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={[], [], @local}, @private1, @private1, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1220000}) 01:43:54 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=ANY=[@ANYBLOB='\\'], 0x60}}], 0x1, 0x0) 01:43:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130031000000000000000000200100000000000000000000000000017f000001000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000600000000000000000000000000000000005ee00fcfa9392f5a8b8669d002b21439000000000000000000000000008b000000000000000000000000000000001500000000000000000b0000000000000000000000010004"], 0xb8}}, 0x0) 01:43:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000600)) 01:43:54 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) accept$inet6(r0, 0x0, 0x0) 01:43:54 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 01:43:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8906, 0x0) 01:43:54 executing program 3: r0 = socket$inet6(0x2, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 01:43:54 executing program 2: add_key(&(0x7f0000006280)='cifs.idmap\x00', &(0x7f00000062c0)={'syz', 0x2}, &(0x7f0000006300)="0a908e83f45254fac929edb51e370a02243a42b46f586400cd894049fcce4c14ae", 0x21, 0xffffffffffffffff) 01:43:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006680)={0x2020, 0x0, 0x0}, 0xb7d) write$FUSE_INTERRUPT(r0, &(0x7f0000006640)={0x10, 0x0, r2}, 0x10) 01:43:54 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0), 0x10) 01:43:54 executing program 3: bpf$BPF_PROG_ATTACH(0x15, &(0x7f0000000640)={@map}, 0x14) 01:43:54 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f000000c480)={&(0x7f000000c3c0), 0xc, &(0x7f000000c440)={&(0x7f000000c400)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 01:43:54 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000ac0)={0x13, 0x10, 0xfa00, {&(0x7f0000000840), r1}}, 0x18) 01:43:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x2}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 01:43:54 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x40) 01:43:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0}}, 0xa0) 01:43:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x38) 01:43:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 01:43:54 executing program 4: bpf$BPF_PROG_ATTACH(0xe, &(0x7f0000000640)={@map}, 0x14) 01:43:54 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "88a712777dc2bc1aa58cbeca1e6c0d2c"}) 01:43:54 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x6202, 0x0) 01:43:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000000080)={0x6, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:54 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0) 01:43:54 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "96"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xea31}, {0x6, 0x24, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 01:43:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x10, 0x1a, 0x11, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x4, 0x4, 0xf, 0x20], 0x1, 0x4}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 01:43:54 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) clone3(&(0x7f0000000640)={0x20000, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/95, 0x5f, &(0x7f0000000500)=""/212, &(0x7f0000000600)=[0xffffffffffffffff], 0x1}, 0x58) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 01:43:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) [ 984.854085][T22960] x_tables: duplicate underflow at hook 2 01:43:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5411, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 01:43:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:43:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) 01:43:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, 0x0) [ 985.126391][ T9513] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 985.588564][ T9513] usb 5-1: unable to get BOS descriptor or descriptor too short 01:43:55 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x58c65bdaa13ee8f1}, 0x14) [ 985.691204][ T9513] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 985.701837][ T9513] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 986.001876][ T9513] usb 5-1: string descriptor 0 read error: -22 [ 986.008272][ T9513] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.017937][ T9513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.304320][ T9513] cdc_ncm 5-1:1.0: bind() failure [ 986.311467][ T9513] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 986.327226][ T9513] cdc_ncm 5-1:1.1: bind() failure [ 986.338823][ T9513] usb 5-1: USB disconnect, device number 41 [ 987.040276][ T9704] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 987.443541][ T9704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 987.524576][ T9704] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 987.534799][ T9704] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 987.786888][ T9704] usb 5-1: string descriptor 0 read error: -22 [ 987.793067][ T9704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 987.802599][ T9704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:43:58 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0xfffffffffffffe3e) 01:43:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)) 01:43:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x2}}, 0x20) 01:43:58 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 987.907270][ T9704] cdc_ncm 5-1:1.0: bind() failure [ 987.920697][ T9704] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found 01:43:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000b80)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 01:43:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', r0) 01:43:58 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_getevents(r0, 0x5, 0x0, 0x0, 0x0) [ 987.952301][ T9704] cdc_ncm 5-1:1.1: bind() failure [ 987.977355][ T9704] usb 5-1: USB disconnect, device number 42 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) 01:43:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'vlan0\x00', @ifru_names}) 01:43:58 executing program 0: socket$inet6(0xa, 0x3, 0x79) 01:43:58 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004600)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000004600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000006640)={0x10, 0x0, r3}, 0x10) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, r1}, 0xa0) 01:43:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000000080)={0xfffe, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:58 executing program 3: bpf$BPF_PROG_ATTACH(0x1e, &(0x7f0000000640)={@map}, 0x14) 01:43:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x40, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2644c4a0"}, 0x0, 0x0, @planes=0x0}) 01:43:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x583}, 0x14}}, 0x0) 01:43:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_getnetconf={0x3c, 0x52, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x3c}}, 0x0) 01:43:58 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 01:43:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 5: unshare(0x14000000) 01:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8904, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) [ 988.324451][T23082] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 01:43:58 executing program 2: getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) 01:43:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5450, 0x0) 01:43:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5460, 0x0) 01:43:58 executing program 5: syz_open_dev$sndpcmc(&(0x7f000000c500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:43:58 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 01:43:58 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "06e8f5fd"}, 0x0, 0x0, @fd}) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x400}, {}, {0x0, 0x81}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 01:43:58 executing program 4: bpf$BPF_PROG_ATTACH(0x11, &(0x7f0000000640)={@map}, 0x14) 01:43:58 executing program 5: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x2}}, 0x20) 01:43:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:43:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8983, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:58 executing program 3: memfd_create(&(0x7f00000000c0)='.\":\\\xa8\xe1\x1e\xa5Cn\x05;\xf7\x9f,r\xeb\xc8\x02p\'\xa6\xb5j\xd5\tz?\x93T/\xd4@\xcd#&1\x84hT\xee\x90\xab\xda\'\xbd\xc0\xc3%\xf96\xd5\n\xe6\x93\xdc\x18\x86Y\xad\x1a/\x1aqR\x05\x04\xec/\xa7\xd7\r\xa3\x95\x9d\xaf\x0e\x03\xe6t\xb2}(L5\xcf\xc1\x03\xd1\xf4L\xd6\xdc\vVQ9\"\xbcM\x04\xd5\x00\xfd\x8d\x881Q\xc3\x89E{\x11\xfbg\xb2\x0e{NC\xd5zj9\xd5\x11+\x1a\x8f\x90\f\xa7V\x84[\x05\xfc\xf3\xcf\xdb\xcbj\xb03\xe5\\\xfa\x04shX#\xda\xb2q\xda\xf6\xf2(g\xb1_\xda\x18\x9e6$\x13Q%\x1fw\'^\xa7j\xbf\x15\x1c\xfb~\x15\xabM\xeb\x9c\x92\b\xe9\xc2\xb7\xa6\xb7\xd7k\xaf\xd4\x9a\x91_\xc6\f\x9e\xc2\x17\x8e\xc7\x97\xb9\x9d\xcb\xfdFx]\xc2\x86\xce\xb3\xb7\x9eO\x91\xef!\xbe<;\xa7\xa1\x10\x96\x95\xc6,\xca\x8e\xca\x01x\xa9\xa9.Xn\x86\xb4?`\xc8]\xdfx\xe7\xa28\xa9*dx\xcf\xb9E\x90\xd7\\ya\xf29WcR\x93\xff\xa0\xe4\v?c\x1au`\xc0h3\xb2\xb1Bb,1\x06\xe713,\xdd\xcd\xd5\xdb\x9b\x95\xed\xf1k&UL.#\x14\xbaDWoR\x02[\xf4\x03\xf6\b\xc6b.\t!\xa9-\x05\xf1\xec\x96LZ\xd6+\x06\x94\xd0\x9d\x1b:\xfb\xf5\xab~\xe8\xab\x1e\xee\x03\xc0\xd7\xee\x941\x93\x1c\xdcm\xa5\xe4\xd3\xa9a&\x8f0s\x11<.#WeC\xcf\x8e\x94\xd5\x10\x86\xe1y\x8a3v\x15&x1\x85[\x87\xc3\x7fA\xc2\x80\x8c\x8c\x1a\xccY\xfb\x92\x98\x99\xf6\xac\x9c\xd1\x0e\xf7P`\xc8=\x88\x9aR\xc8\x17\xe6K\xee\xb5\xcf=\x9c]\xd4\xa1\xf3\\M\xf9!\x8b\xb6i\xea\xca\xe2,e\x1f\xda\"V\xb5\f\xc7\xd8j\xad\x17\x92~>\x93^z\xe6\xc2\xa0\x14\n\x82\v\x1bY\x1a\xfa\x16\x98\xcd\xb0\x9a\x00\x1c\xbd\xed\xdd9\x13=i\xeb\x1a$\x82\x1br\xe1\x9e_\x9fU\xf9\xfb\x7f\xe0\xf5d\x96\x88\x17U\xcc\x9f\xab\x1d[\xbf\x12\xd2==\xd2', 0x0) 01:43:58 executing program 4: r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 01:43:58 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\a'}}, 0x119) 01:43:58 executing program 0: add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 01:43:58 executing program 1: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:58 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0xc080, 0x0) [ 988.767018][ T9575] hid-generic 0000:0000:0000.000D: item fetching failed at offset 0/1 [ 988.780722][ T9575] hid-generic: probe of 0000:0000:0000.000D failed with error -22 01:43:59 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\a'}}, 0x119) 01:43:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) [ 988.910944][ T9558] hid-generic 0000:0000:0000.000E: item fetching failed at offset 0/1 [ 988.932141][ T9558] hid-generic: probe of 0000:0000:0000.000E failed with error -22 01:43:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:43:59 executing program 1: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:59 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:43:59 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x800]}, 0x8}) 01:43:59 executing program 0: getresgid(&(0x7f0000002080), 0x0, 0x0) 01:43:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:59 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0xfffffffffffffe9b}) 01:43:59 executing program 1: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 01:43:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$can_j1939(r0, &(0x7f0000000140), 0x18) 01:43:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x4020940d, 0x0) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 01:43:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:43:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000000080)={0xfeff, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:59 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) 01:43:59 executing program 0: bpf$BPF_PROG_ATTACH(0x14, 0x0, 0x0) 01:43:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 01:43:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 0: pselect6(0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 01:43:59 executing program 4: clock_adjtime(0x5, &(0x7f0000000100)) 01:43:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 01:43:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/zero\x00', 0x0, 0x0) accept(r0, 0x0, 0x0) 01:43:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:43:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 01:43:59 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 01:43:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x40049409, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:43:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) 01:43:59 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) getresgid(0x0, 0x0, &(0x7f0000002100)) 01:43:59 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:43:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 01:43:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:43:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 01:43:59 executing program 3: r0 = socket(0x1e, 0x5, 0x0) bind$isdn(r0, 0x0, 0x0) 01:43:59 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x9f, 0x2d, 0x20, 0x2c42, 0x1602, 0xa4d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbd, 0x87, 0x70}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 01:43:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x9, 0x2, 0x0, "5f8944bba06ed82de41e4466cb5977729d1e826aa49a6909b92ea1771147a080"}) 01:43:59 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:44:00 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:44:00 executing program 0: socket(0x0, 0xf989c49e7db7e4e8, 0x0) 01:44:00 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_setup(0x7, &(0x7f0000000040)) 01:44:00 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) 01:44:00 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:44:00 executing program 0: bpf$BPF_PROG_ATTACH(0x21, &(0x7f0000000640)={@map}, 0x14) 01:44:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:00 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:44:00 executing program 0: syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x7a1500) [ 990.104104][T23282] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 990.145459][ T9558] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 990.388813][ T9558] usb 5-1: Using ep0 maxpacket: 32 [ 990.669673][ T9558] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=a4.d8 [ 990.679201][ T9558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.688583][ T9558] usb 5-1: Product: syz [ 990.693561][ T9558] usb 5-1: Manufacturer: syz [ 990.698147][ T9558] usb 5-1: SerialNumber: syz [ 990.703816][ T9558] usb 5-1: config 0 descriptor?? [ 990.740984][ T9558] f81232 5-1:0.0: f81534a converter detected [ 990.962253][ T9558] usb 5-1: f81534a converter now attached to ttyUSB0 [ 991.164666][ T9513] usb 5-1: USB disconnect, device number 43 [ 991.172191][ T9513] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 991.180607][ T9513] f81232 5-1:0.0: device disconnected [ 991.950090][ T9704] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 992.202083][ T9704] usb 5-1: Using ep0 maxpacket: 32 [ 992.484778][ T9704] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=a4.d8 [ 992.493991][ T9704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.502816][ T9704] usb 5-1: Product: syz [ 992.507340][ T9704] usb 5-1: Manufacturer: syz [ 992.511936][ T9704] usb 5-1: SerialNumber: syz [ 992.517825][ T9704] usb 5-1: config 0 descriptor?? [ 992.555902][ T9704] f81232 5-1:0.0: f81534a converter detected 01:44:02 executing program 4: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 01:44:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) 01:44:02 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0da65f57"}, 0x0, 0x0, @fd}) 01:44:02 executing program 0: add_key(&(0x7f0000004400)='blacklist\x00', 0x0, &(0x7f0000004480)='l', 0x1, 0x0) 01:44:02 executing program 1: r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='rxrpc_s\x00', 0x0, 0x0, 0x0, r1) 01:44:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 992.776712][ T9704] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 992.785175][ T9704] f81534a: probe of ttyUSB0 failed with error -5 01:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000013c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x14}, 0x14}}, 0x0) 01:44:02 executing program 0: socket(0x0, 0x800, 0x0) 01:44:03 executing program 4: bpf$BPF_PROG_ATTACH(0x10, 0x0, 0x0) 01:44:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) [ 992.845824][ T9704] usb 5-1: USB disconnect, device number 44 [ 992.877949][ T9704] f81232 5-1:0.0: device disconnected 01:44:03 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 01:44:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5452, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:44:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_mtu}) [ 992.949137][T23340] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:03 executing program 0: r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 01:44:03 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:03 executing program 1: socket(0x3, 0x0, 0x7ff) 01:44:03 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f000000c4c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c740)='nl80211\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000010840)='nl80211\x00', 0xffffffffffffffff) 01:44:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, 0x0) 01:44:03 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) 01:44:03 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 01:44:03 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f00000002c0), 0x0) 01:44:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:44:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000008580)=[{{&(0x7f0000002d40)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003f40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x2000, 0x0) 01:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r1, 0x307, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 01:44:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, 0x0) 01:44:03 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x630081, 0x0) 01:44:03 executing program 4: r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1) [ 993.270939][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.277683][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 01:44:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8918, &(0x7f0000000080)={0x0, @can, @nl=@proc, @generic={0x0, "d7ffbee3f63f803199e3e9e0fa4f"}}) 01:44:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, 0x0) 01:44:03 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004600)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004600)={0x2020}, 0x2020) 01:44:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 01:44:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) [ 993.416596][T23395] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x3, @raw_data="469c1d25fb6abf3e5b33205f1ff6e7857a53a4d74d74aa200082c44ff0387b520ae6af77476809854d04d950ba498ea877367d3659351000211bfca34ba1b2fce95c4ae3d8dbdaeb3949c11e97a680894c5f8dd7294cefd6233857e8de6530f88cf3b99939407bd6bbe422160d11543dbeac8b057e5d81457604f75025b36a4a5adc57f933cc4ca7c528d49dc3e60fe909c27f0b9854753a72fcf0c92ad6e18b0dddee170e0499c47743773aa5493eab6b81adeea0d306d11a9b15cd5b3f32d09c7f6c380c371fe4"}) [ 993.552210][T23410] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:04 executing program 3: r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, 0x0, r1) 01:44:04 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x80) 01:44:04 executing program 0: process_vm_readv(0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/131, 0xffffffffffffff5f}, {0x0}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000900)=""/155}], 0x1, 0x0) 01:44:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x100, 0x1, 0x1}) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x2, 0x0) 01:44:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x2, 0x0) 01:44:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x9, 0x0}}) 01:44:04 executing program 0: bpf$BPF_PROG_ATTACH(0x22, &(0x7f0000000640)={@map}, 0x14) 01:44:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f000000c480)={&(0x7f000000c3c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000c440)={0x0}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f000000c4c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c740)='nl80211\x00', 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000107c0)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000010840)='nl80211\x00', r0) 01:44:04 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) 01:44:04 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, &(0x7f0000000080)={0x5}, 0x0, 0x0) 01:44:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$can_j1939(r0, 0x0, 0x0) [ 994.308108][T23444] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000006600812c2cbd7000fbdbdf2500000000", @ANYBLOB='\v'], 0x2c}}, 0x0) 01:44:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8983, 0x0) 01:44:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:04 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000004380)='keyring\x00', 0x0, 0x0) [ 994.456351][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:44:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000006600812c2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b000000f1ff06000400c19003000b001e7f00021e5fb9ccdad2dc5e32e5d42cd24d363d9ecffb221911763f1b18990134565bceb6a814224c190e8d450469478539f09745bed4555bb48074f51bccdb8b1818bac240c3de6c06910a1c41ca3edef5eaae5a76d3f3b78abe2b7b635f16d985be371f2c30cae3cf4e1ea5c9940f6ce1056f4313c0a6991bbb29d3ce9bda60c64aa95529c57ebecac2ae6079ff80a289b1b583749b1f1ca4dab46870dca6f6766e426daae3f116d3664238b1a845e14b2ef797a50e97bfdb30d4676fa20ab6390c9721c7bb74e342edb163482e51eb0c0300"], 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x10) 01:44:04 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 01:44:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 01:44:04 executing program 1: r0 = add_key(&(0x7f0000004280)='keyring\x00', &(0x7f00000042c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000004300)='keyring\x00', &(0x7f0000004340)={'syz', 0x2}, 0x0, 0x0, r0) 01:44:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f000000c4c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c740)='nl80211\x00', 0xffffffffffffffff) [ 994.589813][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:44:05 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xa5}, &(0x7f0000000180)={0x77359400}, 0x0) 01:44:05 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000001ec0)='ns/mnt\x00') 01:44:05 executing program 5: add_key(&(0x7f0000006280)='cifs.idmap\x00', &(0x7f00000062c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 01:44:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x100, 0x1, 0x1}) 01:44:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:44:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004600)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000004600)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, r1}, 0xa0) 01:44:05 executing program 4: bpf$BPF_PROG_ATTACH(0xd, &(0x7f0000000640)={@map}, 0x14) 01:44:05 executing program 3: keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffffa) 01:44:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/14, 0xe) 01:44:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000cac0)={0x0, 0x0, 0x0, &(0x7f000000c8c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:44:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000140)) 01:44:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x970000000000) 01:44:05 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x7, 0x200) 01:44:05 executing program 1: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) 01:44:05 executing program 0: io_setup(0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f000000a140)='fou\x00', 0xffffffffffffffff) 01:44:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5c) 01:44:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:05 executing program 1: read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 01:44:05 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8912, 0x0) 01:44:05 executing program 3: socketpair(0x26, 0x5, 0x2, &(0x7f00000001c0)) 01:44:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00', r0) 01:44:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0xc04f00) 01:44:05 executing program 3: socket(0x0, 0xb, 0x0) 01:44:05 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc8201, 0x0) 01:44:05 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 01:44:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x40) 01:44:05 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 01:44:05 executing program 3: ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000000)) waitid(0x0, 0x0, &(0x7f0000000140), 0x61000002, 0x0) 01:44:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000000a000)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 01:44:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 01:44:06 executing program 5: socketpair(0x29, 0x5, 0xfffffffe, &(0x7f0000000000)) 01:44:06 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890c, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000009b00)='ns/user\x00') 01:44:06 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 01:44:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f000000cb80)={0x0, @ipx={0x4, 0x0, 0x0, "f0f679126562"}, @l2tp={0x2, 0x0, @multicast1}, @nfc}) 01:44:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000100)=@nl, &(0x7f0000000000)=0xfffffffffffffe64) 01:44:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000cac0)={0x0, 0x3, &(0x7f000000c880)=@framed, &(0x7f000000c8c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:44:06 executing program 3: socketpair(0x28, 0x1, 0x0, &(0x7f00000000c0)) 01:44:06 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000009b80)='/dev/snd/seq\x00', 0x208002) [ 996.102513][T23581] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:06 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x891f, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8941, 0x0) 01:44:06 executing program 1: io_setup(0x0, &(0x7f0000009b40)) 01:44:06 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) 01:44:06 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 01:44:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @loopback}, @private2}}) 01:44:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae09, 0x0) 01:44:06 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8904, 0x0) 01:44:06 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8937, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000000a000)='/dev/vcs\x00', 0x2041, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f000000a300)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 01:44:06 executing program 0: socketpair(0x28, 0x0, 0x9, &(0x7f0000000040)) 01:44:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:06 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x34}}, 0x10) 01:44:06 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f000000a140)='fou\x00', 0xffffffffffffffff) 01:44:06 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8948, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 0: socketpair(0x64, 0x0, 0x0, &(0x7f0000000340)) [ 996.421857][T23610] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000100)) 01:44:06 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8907, 0x0) 01:44:06 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8949, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 01:44:06 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8924, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f000000ca00)='/dev/null\x00', 0x0, 0x0) [ 996.641219][T23629] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:06 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8936, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 01:44:06 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 01:44:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f000000a000)='/dev/vcs\x00', 0x2041, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 01:44:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:06 executing program 5: setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) 01:44:06 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @ipv4, @local}}) 01:44:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 01:44:06 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8920, &(0x7f0000000200)={'team0\x00'}) 01:44:06 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @hyper}, 0x10) 01:44:06 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x22100, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x118) socketpair(0x10, 0x2, 0x1f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5c) 01:44:06 executing program 4: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) 01:44:07 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, 0x0) 01:44:07 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x3000000) 01:44:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x40) [ 997.003063][T23665] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:07 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b0, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x40) 01:44:07 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8921, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:07 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) 01:44:07 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000180)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x48, 0xfffffffffffffffc) 01:44:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "009124f8"}}) 01:44:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae04, 0x0) 01:44:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) 01:44:07 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140)=0x200, 0x4) 01:44:07 executing program 3: socketpair(0xa, 0x1, 0x0, &(0x7f00000000c0)) 01:44:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4008ae06, 0x0) 01:44:07 executing program 1: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000099c0)={0x0, 0x3938700}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000009b00)='ns/user\x00') io_setup(0x7fff, &(0x7f0000009b40)) io_cancel(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f000000a140)='fou\x00', 0xffffffffffffffff) 01:44:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x550000) 01:44:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil}) 01:44:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private2}}) 01:44:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000080)) 01:44:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}, @mcast2}}) [ 997.390206][T23703] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:07 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89a1, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept4$inet(r0, 0x0, 0x0, 0x0) 01:44:07 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 01:44:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x10, 0x0) 01:44:07 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0xfffffd7f, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/111, 0x70}], 0x1}, 0x0) 01:44:07 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000200)={'team0\x00'}) [ 997.641877][T23729] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xe) 01:44:07 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8983, 0x0) 01:44:07 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x4020940d, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000000) 01:44:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) 01:44:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x0) 01:44:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:44:07 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:44:07 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8942, &(0x7f0000000200)={'team0\x00'}) 01:44:07 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000014c0)={&(0x7f0000000000), 0xc, &(0x7f0000001580)=[{&(0x7f0000000040)=""/4096, 0xffffffffffffff7f}, {&(0x7f0000001040)=""/205, 0xcd}, {&(0x7f0000001140)=""/123, 0x7b}, {&(0x7f00000011c0)=""/42, 0x2a}, {&(0x7f0000001200)=""/111, 0x6f}, {&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/254, 0xfe}], 0x7}, 0x38, 0x0) 01:44:07 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8982, &(0x7f0000000200)={'team0\x00'}) [ 997.949848][T23761] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f000000cb80)={0x0, @ipx={0x4, 0x0, 0x0, "f0f679126562"}, @l2tp={0x2, 0x0, @multicast1}, @nfc={0x27, 0x0, 0x0, 0x2}}) 01:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) 01:44:08 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8927, &(0x7f0000000200)={'team0\x00'}) 01:44:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x8000) 01:44:08 executing program 0: syz_usb_connect(0x5, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x28, 0x45, 0x48, 0x40, 0x19d2, 0xff83, 0x9cde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x0, 0x0, 0x80, 0xf9, [{{0x9, 0x4, 0x0, 0x3f, 0x5, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x10, 0x20, 0xf8, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x8, 0x3f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x1, 0x7f}}, {{0x9, 0x5, 0x2, 0x3, 0x5ef, 0x29, 0x6, 0xce, [@generic={0x35, 0x21, "d64dd4abd99ea66be6d4ffe7d7430476f75ed98596289efb63e121b200863ecbeadfd591960d2fc96af4148d818aa2521d5603"}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x4, 0x2, 0x0, 0x10, 0x1}, 0x1c, &(0x7f0000000340)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "efb037ac59f9e920f158a70281c6f81a"}]}, 0x4, [{0xf9, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1409}}, {0x8, &(0x7f00000004c0)=@string={0x8, 0x3, "b801b83465b2"}}, {0xcf, &(0x7f0000000500)=@string={0xcf, 0x3, "b118c4e5859836851e357344639be04bb893753f18c38f616e2b6a7f3e6a86d08121e6c737fb19c86532b33d5f8658122f062703dbd1abbc067bdd045684eda8a577329fb8ac4f6f2521e746c619c4675042a63919b5950eb37d0a764b89694741012ea5db38227ca79ad9bbb7bbd63bdc26edd6f488a59ca6c781e8d66ce21728332a8d48cef50ccc4bab27da7b72e9d6a2d8acd0d829e7d3820a1563cbe5f69af75679bc28fc174183e652be851de7256e6c2bea13d0048eec99144b5190c48272f2863448a47f90a98c5f26"}}]}) 01:44:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f000000c800)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 01:44:08 executing program 1: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000340)) 01:44:08 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, 0x0) 01:44:08 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:44:08 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8910, &(0x7f0000000200)={'team0\x00'}) 01:44:08 executing program 1: fchownat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 01:44:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:08 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0xc0, 0x0) 01:44:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 01:44:08 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 01:44:08 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x80108907, 0x0) [ 998.259707][T23793] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 998.352044][ T9558] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 998.384399][T23805] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 998.805573][ T9558] usb 1-1: config 0 interface 0 altsetting 63 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 998.816909][ T9558] usb 1-1: config 0 interface 0 altsetting 63 has a duplicate endpoint with address 0x2, skipping [ 998.827556][ T9558] usb 1-1: config 0 interface 0 has no altsetting 0 [ 998.987440][ T9558] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff83, bcdDevice=9c.de [ 998.997389][ T9558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.005623][ T9558] usb 1-1: Product: Ƹ㒸뉥 [ 999.011101][ T9558] usb 1-1: Manufacturer: በ[ 999.015683][ T9558] usb 1-1: SerialNumber: ᢱ颅蔶㔞䑳魣䯠鎸㽵쌘æ†â­®ç½ªæ¨¾í‚†â†ìŸ¦ï¬·ì ™ã‰¥ã¶³è™Ÿá‰˜Ø¯Ì§í‡›ë²«ç¬†Ó葖꣭瞥鼲겸æ½â„¥ä›§á§†æŸ„ä‰ã¦¦ë”™àº•ç¶³ç˜Šè¥‹ä©Åꔮ㣛簢骧믙뮷㯖⛜훭裴鲥잦î¢æ³–២㌨贪칈೵䯌➫篚ꋖ곘苓ᔊ쭣祖⢼៼è勦薾îœæ¸¥â­¬áªÓᒙ克ì’犂蛲䠴群ê¦å¾Œ [ 999.049014][ T9558] usb 1-1: config 0 descriptor?? [ 999.069719][T23775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 999.090323][ T9558] option 1-1:0.0: GSM modem (1-port) converter detected [ 999.293434][ T9558] usb 1-1: USB disconnect, device number 26 [ 999.300449][ T9558] option 1-1:0.0: device disconnected [ 1000.065810][ T9575] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1000.539593][ T9575] usb 1-1: config 0 interface 0 altsetting 63 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1000.551432][ T9575] usb 1-1: config 0 interface 0 altsetting 63 has a duplicate endpoint with address 0x2, skipping [ 1000.562707][ T9575] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1000.721383][ T9575] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff83, bcdDevice=9c.de [ 1000.732511][ T9575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.740962][ T9575] usb 1-1: Product: Ƹ㒸뉥 [ 1000.746338][ T9575] usb 1-1: Manufacturer: በ[ 1000.752309][ T9575] usb 1-1: SerialNumber: ᢱ颅蔶㔞䑳魣䯠鎸㽵쌘æ†â­®ç½ªæ¨¾í‚†â†ìŸ¦ï¬·ì ™ã‰¥ã¶³è™Ÿá‰˜Ø¯Ì§í‡›ë²«ç¬†Ó葖꣭瞥鼲겸æ½â„¥ä›§á§†æŸ„ä‰ã¦¦ë”™àº•ç¶³ç˜Šè¥‹ä©Åꔮ㣛簢骧믙뮷㯖⛜훭裴鲥잦î¢æ³–២㌨贪칈೵䯌➫篚ꋖ곘苓ᔊ쭣祖⢼៼è勦薾îœæ¸¥â­¬áªÓᒙ克ì’犂蛲䠴群ê¦å¾Œ [ 1000.784016][ T9575] usb 1-1: config 0 descriptor?? [ 1000.804676][T23775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1000.825769][ T9575] option 1-1:0.0: GSM modem (1-port) converter detected 01:44:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) 01:44:11 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)=""/191, 0xbf) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:44:11 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8990, &(0x7f0000000200)={'team0\x00'}) 01:44:11 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89a3, &(0x7f0000000200)={'team0\x00'}) 01:44:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) 01:44:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1001.033656][ T9575] usb 1-1: USB disconnect, device number 27 [ 1001.041106][ T9575] option 1-1:0.0: device disconnected 01:44:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x4, 0x4) 01:44:11 executing program 4: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) 01:44:11 executing program 3: mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x29033, 0xffffffffffffffff, 0x0) 01:44:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}) 01:44:11 executing program 0: mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 1001.128997][T23864] smc: net device veth1_to_bridge applied user defined pnetid SYZ2 01:44:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r0, 0x0, 0x0) 01:44:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) [ 1001.212314][T23873] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) 01:44:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r1}}, 0x38) 01:44:11 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000180)) 01:44:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') read$FUSE(r0, 0x0, 0xc) 01:44:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '/dev/cec#\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8}]}]}, 0x30}}, 0x0) 01:44:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 01:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000000c0)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) 01:44:11 executing program 1: fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) 01:44:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 01:44:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 01:44:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}, @RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_MARK={0x8}]}, 0x34}}, 0x0) [ 1001.568651][T23914] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x1, 0x2, 0x401}, 0x14}}, 0x0) 01:44:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "feb195aa8cef80e3e968b80b60021102acbffafed80be3d7d3ad63c0805cebe4"}) 01:44:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x6fe6761aedb64387}, 0x14}}, 0x0) 01:44:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 01:44:12 executing program 5: syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x8040) 01:44:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 01:44:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000000)) 01:44:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x5}, 0x14}}, 0x0) 01:44:12 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) 01:44:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x6fe6761aedb64387}, 0x14}}, 0x0) 01:44:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 01:44:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000020c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) bind$alg(r0, &(0x7f00000010c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) [ 1002.332935][T23948] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:12 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) 01:44:12 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 01:44:12 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000000c0)) 01:44:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x6fe6761aedb64387}, 0x14}}, 0x0) 01:44:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 01:44:12 executing program 3: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000400)={0x24, @short}, 0x14) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) 01:44:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) 01:44:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:44:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) bind$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @empty}, 0x10) 01:44:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x6fe6761aedb64387}, 0x14}}, 0x0) 01:44:12 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 01:44:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 01:44:12 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x1}) 01:44:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) 01:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) 01:44:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$llc(r0, 0x0, &(0x7f00000001c0)) 01:44:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 01:44:12 executing program 4: mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/144) 01:44:12 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 01:44:12 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, 0x0, 0x0) 01:44:12 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ocfs2_control\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'security.', '++:#)@{(/}]\x00'}, 0x0, 0x0, 0x0) 01:44:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x5f88af4f12974c17, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}}, 0x0) 01:44:13 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000000c0)) 01:44:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 01:44:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) 01:44:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000000c0)={0x14, 0xd, 0x6, 0x801}, 0x14}}, 0x0) 01:44:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 01:44:13 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:44:13 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)={0x1}) 01:44:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000002180)='timerslack_ns\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:44:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, 0x0, 0x0) 01:44:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000140), 0x4) 01:44:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8}]}, 0x24}}, 0x0) 01:44:13 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:13 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 01:44:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 01:44:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x7ff}}]}, 0x28}}, 0x0) 01:44:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x1, 0x4, {0x1}}) 01:44:13 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x0) read$midi(r0, &(0x7f0000000000)=""/80, 0x50) 01:44:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000640)={0x0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x2}}) 01:44:13 executing program 5: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xffffffffffffff01, 0x28202) 01:44:13 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) accept4$alg(r0, 0x0, 0x0, 0x0) 01:44:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 01:44:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2281) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)) 01:44:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:44:14 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') read$FUSE(r0, 0x0, 0x0) 01:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7804000000050102000000000000000000000000630401"], 0x478}}, 0x0) 01:44:14 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f0000000180), 0x0) 01:44:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x29) 01:44:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfffffffc, 0x1, {0x1, @sliced={0x0, [0x0, 0x6, 0x0, 0x20, 0x0, 0xd5f, 0x9, 0x0, 0x8000, 0xd9b3, 0x3f, 0x0, 0xdbc, 0x7, 0x0, 0x8, 0x0, 0x599, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfff], 0x3}}}) 01:44:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}}, 0x0) 01:44:14 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 01:44:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000380)={0x2}) 01:44:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x27}}, 0x10) 01:44:14 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:14 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:44:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x0, "9c300ee9caa2574e381b1c824a97c38b6adf06d445ac2bddbe6ff7e6a45d4066"}) 01:44:14 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140), 0x14) 01:44:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x27}}, 0x10) 01:44:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20) 01:44:15 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0xffffffb8) signalfd(r0, &(0x7f00000022c0), 0x8) [ 1004.973632][T24122] Unsupported ieee802154 address type: 0 01:44:15 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x401) write$midi(r0, &(0x7f0000000240)='\x00', 0x1) 01:44:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x27}}, 0x10) 01:44:15 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f0000000180)) 01:44:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x3, 0x4) 01:44:15 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={0x0, 0x0, 0x18}, 0x10) 01:44:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x27}}, 0x10) 01:44:15 executing program 1: setresuid(0xee00, 0xee01, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) 01:44:15 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000019c0)='net/snmp6\x00') 01:44:15 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 01:44:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}}, 0x0) [ 1005.283207][T24149] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:15 executing program 0: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() setresuid(0x0, 0xffffffffffffffff, r0) 01:44:15 executing program 4: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x24, 0x0, 0x0) 01:44:15 executing program 5: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x1a, 0x0, 0x0) 01:44:15 executing program 3: getrusage(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00', 0xffffffffffffffff) 01:44:15 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={0x0}, 0x10) 01:44:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:15 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:44:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000007c0), 0x4) 01:44:15 executing program 5: timer_create(0x0, &(0x7f0000001640), 0x0) 01:44:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vcsu\x00', 0x240100, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 01:44:16 executing program 4: mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200000, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}, {@sq={'sq'}}, {@common=@afid={'afid'}}, {@common=@access_any='access=any'}, {@common=@nodevmap='nodevmap'}, {@timeout={'timeout', 0x3d, 0xffffffff}}, {@common=@loose='loose'}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@smackfsroot={'smackfsroot'}}, {@fowner_eq={'fowner'}}, {@pcr={'pcr', 0x3d, 0x10001}}]}}) stat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@can, &(0x7f00000004c0)=0x80, 0x80800) r1 = io_uring_setup(0xfc5, &(0x7f0000000500)={0x0, 0x8230, 0x10, 0x0, 0x0, 0x0, r0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x6, 0x1, {0x0, r1}, 0x5, 0x7, 0x1}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x10000000) socket$inet6(0xa, 0x3, 0x13) syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', &(0x7f00000009c0)='./file0\x00', 0x8, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95628653b8bb942e131c6825b81f3c8bf241e1a008f629225dc04541c848c35a306b570cc53a74f7fd630e3702ca8204c266ca73b4373c017dfd3cdc9481f3a0979f2cde75db35d145fa8ce5d7259f8ae44278798323bf4c506a90e0620feb9aa9df7b1c37bb3c504fb49edf5fee394d59203930e690e5c8a6c034ae1e5d9cbff8bb5ff2b74106243f3d53e65c2e84227d0932ac7d38623c4eafef41f206b9de2155e6fee215d27546ec447a", 0xac, 0x40}, {&(0x7f0000000b00)="122caf7af4fc8640de1274497cd917135e84ade81847fefef4765a00d0e1a9eb4cb387350c7b51d615ab31d66e698cd45fdec0f15abc8b3fe16792a57ff14efc5fc2375a18be90776cb5a5e4b1bfc0c656a44562c2de298b0c7e0bbb1abde71deacf56ca1ce16190da9a13ba5fd4cd63dfb223a9d81739d3a6a6e4803ed16f2befa189bed6e88664c11fd59f32c1840eae05", 0x92, 0x8001}, {&(0x7f0000000bc0)="d656228e4ff125302d14e7f6514c67243c51b01c21a2d679c250bdca5c9d225e7356efff19b2ee337c3d45b7881cf5cc377dfd1c20a5e32005ec541488f5d32d5b4c8981145dd897f67c890a6ea76d8f7746a77aaba3d0c1672a589c7bf57654d3fe356c6e74ff93caac8748090764206cd210a74ff3d2753efbaa1d73877af0be795a7b0519737542981d70cb48733d029ecf2e2a61a27c38573bb89f55", 0x9e, 0x7ff}], 0x802c, &(0x7f0000000e40)={[{@mode={'mode', 0x3d, 0x1}}, {@gid={'gid'}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '[&.\x00'}}, {@uid_eq={'uid'}}, {@fsname={'fsname', 0x3d, 'timeout'}}, {@dont_hash='dont_hash'}]}) 01:44:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000001780)) [ 1005.946267][T24180] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:16 executing program 3: setresuid(0xee00, 0xee01, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 01:44:16 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}}}}]}}]}}, 0x0) 01:44:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:16 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) getresgid(&(0x7f0000004700), &(0x7f0000004740), &(0x7f0000004780)) 01:44:16 executing program 0: setresuid(0xee00, 0xee01, 0x0) socket$inet(0xf, 0x0, 0x0) [ 1006.077190][T24192] loop4: detected capacity change from 0 to 128 01:44:16 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@mode={'mode'}}, {@gid={'gid'}}]}) 01:44:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) [ 1006.154531][T24210] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 01:44:16 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x19, 0x0, 0x0) 01:44:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:16 executing program 4: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() r1 = geteuid() setresuid(r1, 0x0, 0x0) setresuid(r0, 0xffffffffffffffff, 0x0) 01:44:16 executing program 3: clock_gettime(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x400) 01:44:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) [ 1006.374170][T24233] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1006.390647][ T9704] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1006.425155][ T9558] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1006.771969][ T9704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1006.785452][ T9704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1006.830590][ T9558] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1006.971756][ T9704] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.981064][ T9704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.989749][ T9704] usb 6-1: Product: syz [ 1006.994161][ T9704] usb 6-1: Manufacturer: syz [ 1006.999737][ T9704] usb 6-1: SerialNumber: syz [ 1007.013756][ T9558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1007.023214][ T9558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.024110][T24201] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.031334][ T9558] usb 2-1: Product: syz [ 1007.043111][ T9704] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1007.052133][ T9558] usb 2-1: Manufacturer: syz [ 1007.059006][ T9558] usb 2-1: SerialNumber: syz [ 1007.103175][ T9558] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1007.246744][ T9558] usb 6-1: USB disconnect, device number 41 [ 1007.306814][ T9704] usb 2-1: USB disconnect, device number 52 [ 1008.030300][ T9558] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1008.100842][ T9575] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1008.393238][ T9558] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1008.406265][ T9558] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1008.534421][ T9575] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1008.574993][ T9558] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.584065][ T9558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.592270][ T9558] usb 6-1: Product: syz [ 1008.596481][ T9558] usb 6-1: Manufacturer: syz [ 1008.601096][ T9558] usb 6-1: SerialNumber: syz [ 1008.626776][T24201] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1008.645787][ T9558] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1008.735991][ T9575] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.745590][ T9575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.755146][ T9575] usb 2-1: Product: syz [ 1008.759478][ T9575] usb 2-1: Manufacturer: syz [ 1008.764407][ T9575] usb 2-1: SerialNumber: syz [ 1008.807159][ T9575] cdc_ether: probe of 2-1:1.0 failed with error -22 01:44:18 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95", 0x1}, {&(0x7f0000000b00)="12", 0x1}, {&(0x7f0000000bc0)="d6", 0x1}], 0x0, 0x0) 01:44:18 executing program 4: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x29, 0x48f, 0x0, 0x0) [ 1008.867113][ T9575] usb 6-1: USB disconnect, device number 42 01:44:19 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb70}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x9, 0x0, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "af0be4d279413f6037926bb953fc6086"}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x0, 0x0}, {0x3, &(0x7f0000000240)=@string={0x3, 0x3, "1c"}}]}) 01:44:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 01:44:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:44:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:19 executing program 4: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x1d, 0x0, 0x0) 01:44:19 executing program 5: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() setresuid(r0, 0x0, 0x0) setresuid(0xee00, r0, 0xffffffffffffffff) [ 1009.018354][ T9704] usb 2-1: USB disconnect, device number 53 01:44:19 executing program 5: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() setresuid(0x0, 0x0, r0) 01:44:19 executing program 0: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x1e, 0x0, 0x0) 01:44:19 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) 01:44:19 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x2c, 0x0, 0x0) 01:44:19 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000b00)="12", 0x1, 0x8001}], 0x0, &(0x7f0000000e40)) 01:44:19 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af0be4d279413f6037926bb953fc6086"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa, 0x0, 0x8}]}, 0x1, [{0x0, 0x0}]}) [ 1009.227888][T24326] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1009.261570][T24331] loop0: detected capacity change from 0 to 128 [ 1009.291926][T24331] loop0: detected capacity change from 0 to 128 [ 1009.522348][ T9704] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1009.542533][ T9575] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1009.965999][ T9704] usb 2-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1009.976594][ T9704] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1010.077147][ T9575] usb 4-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1010.087227][ T9575] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1010.338971][ T9575] usb 4-1: string descriptor 0 read error: -22 [ 1010.339267][ T9704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.346103][ T9575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1010.356010][ T9704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.364851][ T9575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.371901][ T9704] usb 2-1: SerialNumber: syz [ 1010.400453][T24318] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1010.410812][T24336] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1010.641474][ T9575] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1010.642968][ T9704] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 1010.655887][ T9575] usb 4-1: USB disconnect, device number 36 [ 1010.658842][ T9704] usb 2-1: USB disconnect, device number 54 [ 1011.397566][ T9704] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1011.427810][ T9575] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1011.841501][ T9704] usb 2-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1011.851643][ T9704] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1011.912029][ T9575] usb 4-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1011.922454][ T9575] usb 4-1: config 1 interface 0 has no altsetting 0 01:44:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast1, @remote, @ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x400, 0x4, 0x4000000}) 01:44:22 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95", 0x1}], 0x0, 0x0) 01:44:22 executing program 4: setresuid(0xee00, 0xee01, 0x0) setresuid(0xee00, 0x0, 0xee01) 01:44:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000e40)) 01:44:22 executing program 4: timer_create(0x0, &(0x7f0000001640)={0x0, 0x0, 0x1}, &(0x7f0000001680)) 01:44:22 executing program 1: mount$fuseblk(0x0, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000007800)='./file0\x00', 0x0, 0x0, 0x0) [ 1012.153689][ T9704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.163781][ T9704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.169964][T24393] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1012.183927][ T9704] usb 2-1: can't set config #1, error -71 [ 1012.190286][ T9704] usb 2-1: USB disconnect, device number 55 01:44:22 executing program 4: mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:44:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 01:44:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) [ 1012.226436][ T9575] usb 4-1: string descriptor 0 read error: -22 [ 1012.233779][ T9575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 01:44:22 executing program 0: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x14, 0x0, 0x0) 01:44:22 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af0be4d279413f6037926bb953fc6086"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa, 0x0, 0x8}]}, 0x1, [{0x0, 0x0}]}) 01:44:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:44:22 executing program 0: setresuid(0xee00, 0xee01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 01:44:22 executing program 1: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x15, 0x0, 0x0) 01:44:22 executing program 4: mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=rdma,', {'port'}, 0x2c, {[{@common=@afid={'afid'}}]}}) io_uring_setup(0xfc5, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000009c0)='./file0\x00', 0x8, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95", 0x1, 0x40}, {&(0x7f0000000b00)="122caf7af4fc8640de1274497cd917135e84ade81847fefef4765a00d0e1a9eb4cb387350c7b51d615ab31d66e698cd45fdec0f15abc8b3fe16792a5", 0x3c, 0x8001}, {&(0x7f0000000bc0)="d656228e4ff125302d14e7f6514c67243c51b01c21a2d679c250bdca5c9d225e7356efff19b2ee337c3d45b7881cf5cc377dfd1c20a5e32005ec5414", 0x3c, 0x7ff}], 0x802c, &(0x7f0000000e40)={[{@mode={'mode'}}, {@gid={'gid'}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '[&.\x00'}}, {@uid_eq={'uid'}}]}) [ 1012.344048][ T9575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:44:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x37c}}, 0x0) [ 1012.425898][ T9575] usb 4-1: can't set config #1, error -71 [ 1012.435941][ T9575] usb 4-1: USB disconnect, device number 37 [ 1012.443717][T24441] loop4: detected capacity change from 0 to 128 [ 1012.456083][T24447] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 01:44:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000e40)) 01:44:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:22 executing program 5: setresuid(0xee00, 0xee01, 0x0) socket$inet(0x11, 0x0, 0x0) 01:44:22 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x35, 0x6001) [ 1012.528955][T24454] tmpfs: Unknown parameter 'func' [ 1012.534822][T24454] tmpfs: Unknown parameter 'func' [ 1012.556449][T24449] loop4: detected capacity change from 0 to 128 [ 1012.595253][T24465] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1012.819053][ T9575] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1013.343327][ T9575] usb 4-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1013.353456][ T9575] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1013.605948][ T9575] usb 4-1: string descriptor 0 read error: -22 [ 1013.612222][ T9575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1013.621468][ T9575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.647044][T24428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1013.877680][ T9575] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1013.887579][ T9575] usb 4-1: USB disconnect, device number 38 01:44:24 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af0be4d279413f6037926bb953fc6086"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa, 0x0, 0x8}]}, 0x1, [{0x0, 0x0}]}) 01:44:24 executing program 5: setresuid(0xee00, 0xee01, 0x0) fork() 01:44:24 executing program 4: setresuid(0xee00, 0xee01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) 01:44:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:44:24 executing program 0: clone(0x20101000, 0x0, 0x0, 0x0, 0x0) 01:44:24 executing program 0: r0 = epoll_create(0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000010}) 01:44:24 executing program 4: setresuid(0xee00, 0xee01, 0x0) setresuid(0xee00, 0xee01, 0xffffffffffffffff) 01:44:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200), 0x4) 01:44:24 executing program 5: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x1b, 0x0, 0x0) 01:44:24 executing program 1: setresuid(0xee01, 0xee00, 0xee00) r0 = geteuid() setresuid(r0, 0x0, 0x0) 01:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00'}) [ 1014.495766][T24516] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1014.754735][ T9575] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1015.198341][ T9575] usb 4-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1015.211049][ T9575] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1015.460893][ T9575] usb 4-1: string descriptor 0 read error: -22 [ 1015.467186][ T9575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.477403][ T9575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.501726][T24515] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.742782][ T9575] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1015.752100][ T9575] usb 4-1: USB disconnect, device number 39 01:44:26 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x1f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af0be4d279413f6037926bb953fc6086"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa, 0x0, 0x8}]}, 0x1, [{0x0, 0x0}]}) 01:44:26 executing program 4: mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 01:44:26 executing program 5: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x21, 0x0, 0x0) 01:44:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:26 executing program 0: mount$fuseblk(0x0, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, 0x0) 01:44:26 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 01:44:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 01:44:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, 0x0, 0x200}, 0x14}}, 0x0) 01:44:26 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000b00)="12", 0x1, 0x8001}], 0x0, &(0x7f0000000e40)) [ 1016.294937][T24566] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:26 executing program 4: socket(0xa, 0x1, 0x3) 01:44:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_targets\x00') write$P9_RREADDIR(r0, 0x0, 0x0) [ 1016.397663][T24576] loop0: detected capacity change from 0 to 128 [ 1016.442894][T24583] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1016.589584][ T9575] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1017.033205][ T9575] usb 4-1: config 1 interface 0 altsetting 27 bulk endpoint 0x82 has invalid maxpacket 16 [ 1017.043473][ T9575] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1017.286520][ T9575] usb 4-1: string descriptor 0 read error: -22 [ 1017.292802][ T9575] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.302746][ T9575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.326457][T24565] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.567571][ T9575] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1017.576882][ T9575] usb 4-1: USB disconnect, device number 40 01:44:27 executing program 4: setresuid(0xee00, 0xee01, 0x0) socket$inet(0xa, 0x3, 0x4) 01:44:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000b40)={&(0x7f0000000840), 0xc, &(0x7f0000000b00)={0x0}}, 0x0) 01:44:27 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95", 0x1}, {0x0}, {&(0x7f0000000bc0)="d6", 0x1}], 0x0, 0x0) 01:44:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000004100)={'sit0\x00', 0x0}) 01:44:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:27 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x10, 0x0, 0x0) 01:44:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003fc0)={'ip6_vti0\x00', 0x0}) 01:44:28 executing program 0: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) socketpair(0x2b, 0x0, 0x0, &(0x7f0000000800)) 01:44:28 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x23, 0x0, 0x0) 01:44:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000980)='tmpfs\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@mode={'mode'}}]}) 01:44:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 01:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380)='mptcp_pm\x00', r0) 01:44:28 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='/dev/loop-control\x00', 0x0, 0x0) 01:44:28 executing program 1: clock_getres(0x2, &(0x7f0000002200)) 01:44:28 executing program 5: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x711080) 01:44:28 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001680)) 01:44:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:28 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000002140)) pipe2$9p(&(0x7f0000002700), 0x80800) 01:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:44:28 executing program 1: capget(&(0x7f0000000200)={0x19980330}, &(0x7f0000000240)) 01:44:28 executing program 5: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() setresuid(0xffffffffffffffff, r0, 0xee01) 01:44:28 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 01:44:28 executing program 3: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x2a, 0x0, 0x0) 01:44:28 executing program 0: mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=rdma,', {'port'}}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 01:44:28 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x84842) 01:44:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000700), 0x4) 01:44:28 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0xea, 0x0, 0x2, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x8, &(0x7f0000000400)=@string={0x8, 0x3, "fffacad99497"}}]}) 01:44:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 01:44:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:28 executing program 0: waitid(0x0, 0xffffffffffffffff, &(0x7f0000007a80), 0x8, 0x0) 01:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380)='mptcp_pm\x00', 0xffffffffffffffff) 01:44:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x4004005) [ 1018.652416][T24685] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:28 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) [ 1018.773626][T24702] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1018.827737][ T9558] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1018.938630][ T9575] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1019.057676][ T9704] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1019.082636][ T9558] usb 2-1: Using ep0 maxpacket: 16 [ 1019.200767][ T9558] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1019.331839][ T9704] usb 6-1: Using ep0 maxpacket: 16 [ 1019.331842][ T9575] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1019.382258][ T9558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.382273][ T9575] usb 5-1: language id specifier not provided by device, defaulting to English [ 1019.401663][ T9558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.410244][ T9558] usb 2-1: Product: syz [ 1019.414498][ T9558] usb 2-1: Manufacturer: syz [ 1019.419185][ T9558] usb 2-1: SerialNumber: syz [ 1019.463399][ T9558] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1019.474212][ T9704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1019.484972][ T9704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1019.533490][ T9575] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.542541][ T9575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.551315][ T9575] usb 5-1: Product: syz [ 1019.555868][ T9575] usb 5-1: Manufacturer: ï«¿éž” [ 1019.560715][ T9575] usb 5-1: SerialNumber: syz [ 1019.615015][ T9575] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1019.654445][ T9704] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.663802][ T9704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.667824][ T9575] usb 2-1: USB disconnect, device number 56 [ 1019.684703][ T9704] usb 6-1: Product: syz [ 1019.689106][ T9704] usb 6-1: Manufacturer: syz [ 1019.693834][ T9704] usb 6-1: SerialNumber: syz [ 1019.735604][ T9704] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1019.817492][ T9513] usb 5-1: USB disconnect, device number 45 [ 1019.940047][ T9704] usb 6-1: USB disconnect, device number 43 [ 1020.440817][ T9704] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1020.592028][ T9162] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1020.682768][ T9704] usb 2-1: Using ep0 maxpacket: 16 [ 1020.723076][ T9513] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1020.803770][ T9704] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1020.954979][ T9162] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1020.975326][ T9704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.985084][ T9704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.988986][ T9513] usb 6-1: Using ep0 maxpacket: 16 [ 1020.994143][ T9704] usb 2-1: Product: syz [ 1020.994166][ T9704] usb 2-1: Manufacturer: syz [ 1020.994181][ T9704] usb 2-1: SerialNumber: syz [ 1021.013062][ T9162] usb 5-1: language id specifier not provided by device, defaulting to English [ 1021.066732][ T9704] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1021.136437][ T9513] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1021.146416][ T9513] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1021.146543][ T9162] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.166336][ T9162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.174356][ T9162] usb 5-1: Product: syz [ 1021.178578][ T9162] usb 5-1: Manufacturer: ï«¿éž” [ 1021.183432][ T9162] usb 5-1: SerialNumber: syz [ 1021.227774][ T9162] cdc_ether: probe of 5-1:1.0 failed with error -22 01:44:31 executing program 1: r0 = socket$inet(0xa, 0x3, 0x1f) setsockopt$inet_tcp_TLS_RX(r0, 0x29, 0x1c, 0x0, 0x0) 01:44:31 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000009c0)='./file0\x00', 0x8, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000a00)="95", 0x1}, {&(0x7f0000000b00)="12", 0x1, 0x8001}, {&(0x7f0000000bc0)="d6", 0x1}], 0x0, &(0x7f0000000e40)={[], [{@smackfsroot={'smackfsroot', 0x3d, '[&.\x00'}}]}) 01:44:31 executing program 3: setresuid(0xee00, 0xee01, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 01:44:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1021.277771][ T9575] usb 2-1: USB disconnect, device number 57 [ 1021.314009][T24776] loop0: detected capacity change from 0 to 128 01:44:31 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') [ 1021.326351][T24780] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1021.340252][ T9513] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.365411][ T9513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:44:31 executing program 4: syz_mount_image$vfat(&(0x7f00000017c0)='vfat\x00', &(0x7f0000001800)='./file1\x00', 0x0, 0x0, &(0x7f0000002d80), 0x0, &(0x7f0000002e40)) 01:44:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:31 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsu\x00', 0x500, 0x0) 01:44:31 executing program 1: sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) [ 1021.397709][ T9513] usb 6-1: Product: syz [ 1021.407812][ T9513] usb 6-1: Manufacturer: syz [ 1021.416836][ T9513] usb 6-1: SerialNumber: syz [ 1021.426136][T24776] loop0: detected capacity change from 0 to 128 [ 1021.439017][ T3631] usb 5-1: USB disconnect, device number 46 01:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0) [ 1021.471206][ T9513] cdc_ether: probe of 6-1:1.0 failed with error -22 01:44:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1021.532286][T24808] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1021.580436][T24810] FAT-fs (loop4): bogus number of reserved sectors [ 1021.599141][T24810] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1021.619305][T24814] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8927, &(0x7f00000000c0)={'gre0\x00', 0x0}) 01:44:31 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'gre0\x00', 0x0}) 01:44:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a0, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, &(0x7f0000000000)={@remote}, 0x20) 01:44:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1021.654661][T24810] FAT-fs (loop4): bogus number of reserved sectors [ 1021.661429][T24810] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1021.673071][ T9704] usb 6-1: USB disconnect, device number 44 01:44:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}, 0x0) 01:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='p'], 0x70}, 0x0) 01:44:31 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001214010025bd7000fbdadf25080013"], 0x48}}, 0x0) 01:44:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000011c0)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:44:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x7}, 0x1c, 0x0}, 0x0) 01:44:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x0, 0x4}, 0x40) [ 1021.838126][T24842] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1021.860916][T24844] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@tclass={{0x14}}], 0xf}, 0x0) 01:44:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x3) 01:44:31 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1021.905023][T24842] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:44:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) 01:44:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001114db"], 0x18}}, 0x0) 01:44:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f00000013c0)='y\x00', 0x2, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000002f00)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 01:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}, 0x4040000) 01:44:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x86}]}}}], 0x18}}], 0x1, 0x0) [ 1022.042606][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f0000000000)={@remote}, 0x20) 01:44:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0xf}}], 0x2, 0x0) 01:44:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x2011882, &(0x7f00000011c0)={[{@orlov='orlov'}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) 01:44:32 executing program 3: setresuid(0xee00, 0xee01, 0x0) r0 = geteuid() r1 = geteuid() r2 = geteuid() setresuid(r2, r0, 0x0) setresuid(r1, 0x0, 0x0) 01:44:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)) 01:44:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x10}}], 0x2, 0x0) 01:44:32 executing program 1: syz_mount_image$vfat(&(0x7f00000017c0)='vfat\x00', &(0x7f0000001800)='./file1\x00', 0x0, 0x0, &(0x7f0000002d80), 0x0, &(0x7f0000002e40)={[], [{@dont_measure='dont_measure'}]}) 01:44:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x30}, 0x1c, 0x0}, 0x0) 01:44:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80) 01:44:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x1c, 0x0}, 0x0) 01:44:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x10000202}, 0x80) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x68}}, 0x0) 01:44:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x94, 0x4, "0632"}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@loopback}]}, @timestamp_addr={0x44, 0x4}]}}}], 0x78}}], 0x1, 0x0) [ 1022.322371][T24906] FAT-fs (loop1): Unrecognized mount option "dont_measure" or missing value 01:44:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x5, 0x0}}}) 01:44:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002400)={'team_slave_0\x00', &(0x7f0000002380)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) [ 1022.370108][T24906] FAT-fs (loop1): Unrecognized mount option "dont_measure" or missing value 01:44:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="e0646b4e034ee733febd", 0xa}, {&(0x7f00000000c0)="58fd7548d725f5870559a8efc7be93cebed7867dfd4766fe776b57d98d12d920f28954eaeb50a5195e3a879c7ce4c38ed7ee9782687a3fde868947ca6464f18bdb981bb9159db93f957da4c29a10c46fd7671caa2e5150b2c39ca596870c1d7b76bc755c25c4e3a8a2ac0c2b7a5f257a2259", 0x72}, {&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000500)="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", 0x4fc}], 0x4}, 0x0) 01:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x10000202}, 0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 01:44:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:44:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') write$char_usb(r0, 0x0, 0x0) 01:44:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x20}}, 0x0) 01:44:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) 01:44:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000), 0x4) 01:44:32 executing program 1: syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/vlan1\x00') 01:44:32 executing program 4: r0 = socket$inet(0x2, 0xa, 0xfff) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) 01:44:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8903, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:32 executing program 1: pipe2$9p(&(0x7f0000001640), 0x0) [ 1022.648285][T24951] veth1_to_team: mtu less than device minimum 01:44:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') read$char_usb(r0, 0x0, 0x273) 01:44:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)) 01:44:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) 01:44:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000026c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @loopback}}}], 0x20}}], 0x1, 0x0) 01:44:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002140)=[{{&(0x7f0000001ec0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 01:44:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:33 executing program 0: clock_gettime(0x0, &(0x7f00000019c0)) syz_open_procfs$namespace(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/null\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000002380)='/dev/null\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) 01:44:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:33 executing program 3: r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x1e, 0x0, 0x0) 01:44:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) connect(r0, &(0x7f00000030c0)=@sco={0x1f, @none}, 0x80) 01:44:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x200003}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:33 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f00000043c0)=[{&(0x7f0000004240)='X', 0x1}], 0x0, &(0x7f0000004400)) 01:44:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 01:44:33 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140b, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="fd000000051401"], 0x38}}, 0x0) sendfile(r2, r1, 0x0, 0x1f000000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 01:44:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 01:44:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="08e395b97247b3b80620d0fa162d2d113278518a94a2c8ee6b26a143", 0x1c}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2}, 0x20) 01:44:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f00000000c0)={'gre0\x00', 0x0}) 01:44:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@nl=@unspec, 0x80) [ 1023.780169][ T36] audit: type=1804 audit(6971967873.643:103): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir872546285/syzkaller.jtHWrI/2071/cgroup.controllers" dev="sda1" ino=14978 res=1 errno=0 [ 1023.786957][T25013] netlink: 229 bytes leftover after parsing attributes in process `syz-executor.0'. 01:44:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000002d00)={&(0x7f0000002900), 0x80, &(0x7f0000002c00)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000002980)=""/34, 0x22}, {&(0x7f00000029c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/13, 0xd}, {&(0x7f0000002a40)=""/231, 0xe7}, {&(0x7f0000002b40)=""/64, 0x40}, {&(0x7f0000002b80)=""/98, 0x62}], 0x7, &(0x7f0000002c80)=""/108, 0x6c}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {}, 0x7}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 01:44:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 01:44:33 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f0000000840), 0x40) 01:44:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000002d00)={&(0x7f0000002900), 0x80, &(0x7f0000002c00)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000002980)=""/34, 0x22}, {&(0x7f00000029c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/13, 0xd}, {&(0x7f0000002a40)=""/231, 0xe7}, {&(0x7f0000002b40)=""/64, 0x40}, {&(0x7f0000002b80)=""/98, 0x62}], 0x7, &(0x7f0000002c80)=""/108, 0x6c}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {}, 0x7}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 01:44:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000000)={@remote}, 0x20) 01:44:34 executing program 3: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000, 0x1a}], 0x2011882, &(0x7f00000011c0)={[{@data_err_abort='data_err=abort'}, {@orlov='orlov'}], [{@obj_type={'obj_type', 0x3d, 'security.apparmor\x00'}}, {@subj_role={'subj_role', 0x3d, 'security.apparmor\x00'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)='./file0\x00', r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000001340)='./file1\x00', &(0x7f0000001380)='trusted.overlay.opaque\x00', &(0x7f00000013c0)='y\x00', 0x2, 0x2) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x6000) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x3) mount(&(0x7f00000014c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='ocfs2_dlmfs\x00', 0x808, &(0x7f0000001580)='trusted.overlay.redirect\x00') fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000015c0)='&\x00', 0x0, r0) pipe2$9p(&(0x7f0000001640), 0x0) syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', &(0x7f0000004200)='./file2\x00', 0x483b9f23, 0x2, &(0x7f00000043c0)=[{&(0x7f0000004240), 0x0, 0x8}, {&(0x7f0000004300)="97e1ba914d7f15453c4ef0625ceb207e55cc4897e65b64505a25e978b791e602c8c3a1076be7b15ff35fa2b3e13cc114b98de200a9238323a527ec0264d79279e16807c0f2df278cd27b3f3ccb5ca0f4c05c1e3ad458541028618dab104235abb854e6fb3d76fe85b5f9d58c4d9a69e56d542daac5f80f3ee3f16e611b78f106e325ec0f058d504a2e6435d73c18f6", 0x8f, 0x9}], 0x4209a, &(0x7f0000004400)={[{@shortname_mixed='shortname=mixed'}, {@utf8='utf8=1'}, {@rodir='rodir'}], [{@uid_eq={'uid'}}, {@appraise_type='appraise_type=imasig'}]}) stat(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000004500)='./file2\x00', &(0x7f0000004540)='bpf\x00', 0x50000, &(0x7f0000004640)={[{@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x2}}], [{@fowner_gt={'fowner>', r1}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@smackfsroot={'smackfsroot', 0x3d, '^@'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'obj_type'}}, {@fsname={'fsname', 0x3d, 'orlov'}}, {@pcr={'pcr'}}, {@smackfsroot={'smackfsroot', 0x3d, ',\x90'}}]}) 01:44:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8971, &(0x7f00000000c0)={'gre0\x00', 0x0}) 01:44:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 01:44:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000002d00)={&(0x7f0000002900), 0x80, &(0x7f0000002c00)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000002980)=""/34, 0x22}, {&(0x7f00000029c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/13, 0xd}, {&(0x7f0000002a40)=""/231, 0xe7}, {&(0x7f0000002b40)=""/64, 0x40}, {&(0x7f0000002b80)=""/98, 0x62}], 0x7, &(0x7f0000002c80)=""/108, 0x6c}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {}, 0x7}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) [ 1024.136355][ T36] audit: type=1804 audit(6971967874.000:104): pid=25054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir872546285/syzkaller.jtHWrI/2071/cgroup.controllers" dev="sda1" ino=14978 res=1 errno=0 01:44:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, &(0x7f0000001300)=""/210, 0x32, 0xd2, 0x1}, 0x20) 01:44:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1024.251136][T25060] loop3: detected capacity change from 0 to 8 01:44:34 executing program 0: syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', 0x0, 0x0, 0x0, &(0x7f00000043c0), 0x0, &(0x7f0000004400)) 01:44:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000002d00)={&(0x7f0000002900), 0x80, &(0x7f0000002c00)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000002980)=""/34, 0x22}, {&(0x7f00000029c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/13, 0xd}, {&(0x7f0000002a40)=""/231, 0xe7}, {&(0x7f0000002b40)=""/64, 0x40}, {&(0x7f0000002b80)=""/98, 0x62}], 0x7, &(0x7f0000002c80)=""/108, 0x6c}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {}, 0x7}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 01:44:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0xc0) [ 1024.313973][T25060] loop3: detected capacity change from 0 to 264192 01:44:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2011882, &(0x7f00000011c0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) stat(0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x50000, 0x0) [ 1024.400367][T25060] loop3: detected capacity change from 0 to 8 01:44:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 01:44:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x8, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:44:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x18}}], 0x1, 0x0) 01:44:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="0c348c96883080fc7a5d1f", 0xb}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000100)=@ethtool_per_queue_op}) 01:44:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) 01:44:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="04"]}) 01:44:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000026c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x0) 01:44:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000040)) 01:44:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={[], [], @private}, @remote, @private1, 0x0, 0x1000}) 01:44:34 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001214010025bd7000fbdadf2508000300040000000c0003"], 0x48}}, 0x0) 01:44:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x94, 0x9, "0632ed9b7fa9ae"}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@loopback}]}]}}}], 0xb0}}], 0x1, 0x8000) 01:44:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000004200)='./file2\x00', 0x483b9f23, 0x2, &(0x7f00000043c0)=[{&(0x7f0000004240)="584b6625fe0787dfaefc257eeefcd8a7ad4ae502862f2128576c9786b50bbca1f612befa5db2c0408d5a9040d73325e74ab9226713f0fcce2828376a5f9c27b8d69d33c9032b62b5bfd2f0bd08b4fb23c47b076eedd550eb2faeca3e15d5913534a69be46ae1fc4d496b5557154ec5add0f8b77abedb4c6b67e6e765e8f32c91609b0a07098fca15260017bd8f067da8795d7bd182e3a13c59fe8b5afbd39be44ba5c1939b6523a87f3c3faa4b", 0xad, 0x8}, {&(0x7f0000004300)="97e1ba914d7f15453c4ef0625ceb207e55cc4897e65b64505a25e978b791e602c8c3a1076be7b15ff35fa2b3e13cc114b98de200a9238323a527ec0264d79279e16807c0f2df278cd27b3f3ccb5ca0f4c05c", 0x52, 0x9}], 0x0, 0x0) 01:44:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x8}]}}}], 0x18}}], 0x1, 0x0) 01:44:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)) [ 1024.791592][T25131] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 01:44:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="c92f9f1f4dd904a429931439dae720157e26a68c90d9ef475785a4de3c002a5ad11b56f1f22d3d7ce4e2719ec49a0f2b15a0f0e7cc7732ac04b549407b7f16e9f5dd7dd30ade8805515c235778ee689f6c1c5a37b5cf986aa2e2157de48aa7bcd8b3ed71957d67be602f1f5b3cf1265a2187b74e4bb0f97197eb441866684ec529eeb2724606eb8088d56388f61d85dd", 0x90) 01:44:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x1, 0x0) [ 1024.837860][T25136] loop3: detected capacity change from 0 to 264192 01:44:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:34 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000003a40)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x14}}, @mark={{0x14}}], 0x30}}], 0x1, 0x0) 01:44:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x541b, 0x0) 01:44:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x3ff}, 0x40) 01:44:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000001c0)="b8eb433f2167df3ac20094766dbf89b82e9b9d7f", 0x14) [ 1024.933001][T25136] loop3: detected capacity change from 0 to 264192 01:44:34 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000001540), 0x40) 01:44:34 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xf14bf98745a56e35, 0xffffffffffffffff, 0x10000000) 01:44:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x28}, 0x40) 01:44:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000080)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 01:44:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4c}}) 01:44:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x3e}}) 01:44:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x30}}], 0x2, 0x0) 01:44:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001540)={0x11}, 0x40) 01:44:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x37}, @initdev={0xfe, 0x88, [], 0x5, 0x0}}}) 01:44:35 executing program 1: socket$inet(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x18, 0x7, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @generic={0x21, 0x9, 0xc, 0xeca3, 0x6}, @exit]}, &(0x7f0000002a00)='syzkaller\x00', 0x3, 0x2a, &(0x7f0000002a40)=""/42, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x5, 0x3}, 0x8, 0x10, 0x0}, 0x78) 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f0000000000)={@remote}, 0x20) 01:44:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0xa00) 01:44:35 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000000840), 0x40) 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}}], 0x1, 0x0) 01:44:35 executing program 3: lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000001180)=[{&(0x7f0000000180)}], 0x0, &(0x7f00000011c0)={[{@orlov='orlov'}], [{@obj_type={'obj_type', 0x3d, 'security.apparmor\x00'}}, {@subj_role={'subj_role', 0x3d, 'security.apparmor\x00'}}, {@pcr={'pcr'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) syz_mount_image$vfat(&(0x7f00000017c0)='vfat\x00', &(0x7f0000001800)='./file1\x00', 0x7, 0x5, &(0x7f0000002d80)=[{0x0}, {0x0}, {&(0x7f0000002a80)="a247a923c94bd1f15749e75df63aa6b6f928c63de76189aa37275ca87a8cc31bc3dc25a654b6308acbfd1228349742c84739d87db9a099dc6cef33d6e76ffb07b7807293f6eb4b00ac21ea69", 0x4c}, {0x0}, {0x0}], 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f00000043c0)=[{0x0, 0x0, 0x9}], 0x4209a, &(0x7f0000004400)={[{@shortname_mixed='shortname=mixed'}, {@utf8='utf8=1'}, {@rodir='rodir'}], [{@uid_eq={'uid'}}, {@appraise_type='appraise_type=imasig'}]}) 01:44:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 01:44:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003000)={0x0, @xdp, @in={0x2, 0x0, @private}, @tipc=@name={0x1e, 0x2, 0x0, {{}, 0x3}}}) 01:44:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) [ 1025.358037][T25201] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1025.383702][T25208] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x0) 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, &(0x7f0000000000)={@remote}, 0x20) [ 1025.498739][T25201] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:44:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x17, 0x0, 0x400000, 0xffff}, 0x40) [ 1025.540234][T25226] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') read$char_usb(r0, 0x0, 0x273) 01:44:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x2ef73760, 0x4) 01:44:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$char_usb(r0, 0x0, 0x0) 01:44:35 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000043c0)=[{&(0x7f0000004240)='X', 0x1}], 0x0, 0x0) 01:44:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast2}}) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x0) 01:44:35 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000840), 0x40) 01:44:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=@bridge_setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 01:44:35 executing program 1: socketpair(0x10, 0x3, 0x7fffffff, &(0x7f00000001c0)) 01:44:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 1025.788369][T25254] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:35 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000043c0)=[{0x0}], 0x0, 0x0) 01:44:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 01:44:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001540)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x4, "b63e"}, {0x0, 0x2}, {0x0, 0x8, "1e1b41e04b64"}, {0x0, 0x10, "e09755173448fbee74642cc59115"}, {0x0, 0x5, "f7b45d"}]}]}}}], 0x40}}], 0x2, 0x0) 01:44:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000000)={@remote}, 0x20) [ 1025.870352][T25266] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') write$char_usb(r0, 0x0, 0x0) 01:44:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x0}) 01:44:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_SYNPROXY={0x4}]}, 0x20}}, 0x0) 01:44:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002140)=[{{&(0x7f0000001ec0)={0xa, 0x4e24, 0x0, @mcast1, 0x1000}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) 01:44:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="e0646b4e034ee733febdcc", 0xb}, {&(0x7f00000000c0)="58fd7548d725f5870559a8efc7be93cebed7867dfd4766fe776b57d98d12d920f28954eaeb50a5195e3a879c7ce4c38ed7ee9782687a3fde868947ca6464f18bdb981bb9159db93f957da4c29a10c46fd7671caa2e5150b2c39ca596870c1d7b76bc755c25c4e3a8a2ac0c2b7a5f257a2259", 0x72}, {&(0x7f0000000500)="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", 0x4fc}], 0x3}, 0x0) 01:44:36 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001180)=[{0x0, 0x0, 0x1a}], 0x0, 0x0) pipe2$9p(&(0x7f0000001640), 0x0) 01:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f00000000c0)) 01:44:36 executing program 4: setgroups(0x2, &(0x7f0000000000)=[0xee01, 0x0]) 01:44:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x8}}], 0x18}}], 0x1, 0x0) 01:44:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1026.347114][T25300] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1026.385628][T25305] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:36 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000001540), 0x40) 01:44:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008cc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}], 0x20}}], 0x1, 0x0) 01:44:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x0, 0x0, 0x3, 0x100}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000001180)={0x1, {&(0x7f0000000140)=""/53, 0x35, &(0x7f0000000180)=""/4096, 0xc97a6ac1be9079ef}}, 0x48) syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x0, 0x5}, 0x20) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xe}}) 01:44:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000140)="9d", 0x1}], 0x2}}], 0x2, 0x8004) 01:44:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}], 0x20}}], 0x1, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0xa, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, &(0x7f0000000000)={@remote}, 0x20) 01:44:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000280)={'batadv_slave_0\x00'}) [ 1026.594845][T25321] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present [ 1026.622938][T25320] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 01:44:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8916, 0x0) 01:44:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x900, 0x4) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000003cc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000003f80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}}], 0x1, 0x0) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80) 01:44:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:36 executing program 5: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000000)={0x0, 0x0, 0x137}, 0x20) 01:44:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000040)) 01:44:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c, 0x0}, 0x0) 01:44:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f00000000c0)=0x27) 01:44:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0100000202010100000000000000000a00000008000940ffffff80080005400000000708000b00736970000800044000000007180002"], 0x13c}}, 0x0) 01:44:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x38}}) 01:44:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f0000000000)={@remote}, 0x20) 01:44:36 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001214010025bd7000fbdadf25080004"], 0x48}}, 0x0) [ 1026.999113][T25370] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1027.029007][T25370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1027.038841][T25371] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}}], 0x1, 0x0) 01:44:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14}}], 0x20000398}}], 0x1, 0x0) 01:44:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x541b, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, &(0x7f0000000000)={@remote}, 0x20) 01:44:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvtap0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:44:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) 01:44:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') read$char_usb(r0, 0x0, 0x273) 01:44:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:37 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x274080, 0x0) 01:44:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000000)={@remote}, 0x20) 01:44:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1}}}], 0x20}}], 0x1, 0x0) 01:44:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x80}, 0x1c) 01:44:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001"], 0x20}}, 0x0) [ 1027.320276][T25397] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:37 executing program 0: lremovexattr(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, &(0x7f0000001180), 0x2011882, &(0x7f00000011c0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) pipe2$9p(0x0, 0x0) mount$bpf(0x0, &(0x7f0000004500)='./file2\x00', 0x0, 0x0, 0x0) 01:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x0) 01:44:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)=0x42) 01:44:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, 0x0) 01:44:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005480)={'ip6gre0\x00', &(0x7f0000005400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={[], [], @multicast1}, 0x700}}) 01:44:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0xb, 0x2}]}}}], 0x38}}], 0x1, 0x0) 01:44:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000040)) 01:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x0) 01:44:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000280)={'batadv_slave_0\x00'}) 01:44:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2}}) [ 1027.628394][T25433] snd_dummy snd_dummy.0: control 112:0:0:Ï:0 is already present 01:44:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd46}}], 0x2, 0x10) 01:44:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000b53a01"], 0x48}}, 0x0) 01:44:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r2, r1, 0x0, 0xfffffffe) 01:44:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 01:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x0) 01:44:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005100)=[{{&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)='?', 0x1}], 0x1}}], 0x1, 0x0) 01:44:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x2a}}) 01:44:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0xd63}, 0x1c) 01:44:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000003cc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000003f80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xe7}]}}}], 0x18}}], 0x1, 0x0) 01:44:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x2011882, &(0x7f00000011c0)) 01:44:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x0) 01:44:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 01:44:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 01:44:37 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x80108906, 0x0) 01:44:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x1, 0x0) 01:44:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840)={0x301, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x10}}], 0x2, 0x0) 01:44:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x2, 0x0, 0x0, @private2}, 0x80) 01:44:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 01:44:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000002440)=[{{&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, 0x0}}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, 0x0}}], 0x2, 0x0) 01:44:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000280)=""/72, 0x2}) 01:44:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[], [{@pcr={'pcr'}}]}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80), 0x0, &(0x7f0000002e40)={[{@utf8no='utf8=0'}, {@uni_xlate='uni_xlate=1'}, {@shortname_lower='shortname=lower'}, {@utf8no='utf8=0'}], [{@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) 01:44:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1b, 0x0}}], 0x1, 0x0) 01:44:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x3}, 0x20) 01:44:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000000)="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", 0x108) 01:44:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect(r0, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @remote}, 0x80) 01:44:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@dev}, {@loopback}]}, @timestamp_addr={0x44, 0x4}]}}}], 0x28}}], 0x1, 0x0) 01:44:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 01:44:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) [ 1028.365419][T25506] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:44:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000131401"], 0x48}}, 0x0) 01:44:38 executing program 4: pipe2$9p(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000001680)={0xb}, 0xb) 01:44:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x56}]}}, &(0x7f0000000080)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 01:44:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0xff3d, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) [ 1028.547465][T25532] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1028.568161][T25506] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:44:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008cc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}], 0x20}}], 0x1, 0x0) 01:44:38 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)={0x8, 0x2}, 0x4000) 01:44:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 01:44:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0xa, 0x2, @remote}, 0x20000010, 0x0}}], 0x1, 0x80fe) 01:44:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_dump={0x1}}) 01:44:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) setresuid(0x0, 0xee00, 0x0) setresuid(0xee00, r1, 0xffffffffffffffff) 01:44:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0) r2 = epoll_create1(0x80000) r3 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000001680)={0x20000008}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x40, 0x2, 0x19, @loopback, @private1, 0x8, 0x10, 0xfffff131, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x1f, 0x57, 0x3, 0x4a, @dev={0xfe, 0x80, [], 0x39}, @mcast2, 0x10, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1}}) r6 = accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) sendmsg$inet6(r6, &(0x7f0000001640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x1f, @dev={0xfe, 0x80, [], 0x35}, 0xffffffff}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000300)="83758442d04fa0b10118dcc743ae80e866346212447c6dadea03ef48a1e75ff96333ce565ed2013be9996a9b3eeceb09eaf5841c09aa5ee42a1c7c23e9c76d6c71b048e477e82ee927db2616b32fdc3e692c0e63ea6fe937476d21778c449e14c03494a96689691c0251499e11f64a5591d1a968b3f31fb02f762f7d7627695063132fc119ad6682fc7397dac38a8d73e6faf2ee3822c92447f37f559fd3b529e334b895e696b6a3c7c44b8e407804494e1e870b9767dae8e8124ad9e9548b464f44866d0344e9e74131f8", 0xcb}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000400)="cfd634", 0x3}, {&(0x7f0000000440)="54dd91fdb3e2313957c8f6d203934a335d3057b1865a54b299d19a3de36632fa3239adbb5d2c2b347d775b4316bd45164d6405bacfcf7f22ff9667c7901519", 0x3f}, {&(0x7f0000000480)="2f486c0843ba94c41a9533dae9c6c402e0d6fcd19b0172d9b6f705cd8f470bce6c81692a63f8881e4ef2538f4a40b801e4db65d78c1744847d6d3fc31972b8ae9df98d19930d0860a637c34fcbe465b73590fd51cbed565a68c87df685fa282ee72d63a19a066e25c7838a07e1ba6846641055214d5cfdd137db4cde1576ad6b54c37efc5abb3eac98d38db7af2c8da0806f9296e10c31031e3b5776f133a7a54f5413f5df778ad2b33869875986dfcb71e1731a62c07206c32cde79f0", 0xbd}], 0x5, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, [], 0x1}, r5}}}], 0x28}, 0x20000000) bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000000)={0x0, 0x0, 0x137}, 0x20) 01:44:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 01:44:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) 01:44:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f00000000c0)={'gre0\x00', 0x0}) 01:44:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000080)) 01:44:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@dev}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 01:44:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x48054) 01:44:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x1ff, 0x4) 01:44:38 executing program 4: bpf$BPF_BTF_LOAD(0x3fe, 0x0, 0x0) 01:44:38 executing program 0: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000001180)=[{0x0, 0x0, 0x1a}], 0x2011882, &(0x7f00000011c0)={[{@orlov='orlov'}], [{@obj_type={'obj_type', 0x3d, 'security.apparmor\x00'}}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, 'security.apparmor\x00'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='trusted.overlay.opaque\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='./file0\x00', 0x8, 0x3) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000015c0)='&\x00', &(0x7f0000001600)='./file0\x00', r0) pipe2$9p(&(0x7f0000001640), 0x0) syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', &(0x7f0000004200)='./file2\x00', 0x483b9f23, 0x1, &(0x7f00000043c0)=[{&(0x7f0000004240)="584b6625fe0787dfaefc257eeefcd8a7ad4ae502862f2128576c9786b50bbca1f612befa5db2c0408d5a9040d73325e74ab9226713f0fcce2828376a5f9c27b8d69d33c9032b62b5bfd2f0bd08b4fb23c47b076eedd550eb2faeca3e15d5913534a69be46ae1fc4d496b5557154ec5add0f8b77abedb4c6b67e6e765e8f32c91609b0a07098fca15260017bd8f067da8795d7bd182e3a13c59fe8b5afbd39be44ba5c1939b6523a87f3c3faa4be62c", 0xaf, 0x8}], 0x0, 0x0) stat(&(0x7f0000004580)='./file0\x00', 0x0) 01:44:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000001180)=[{&(0x7f0000000180)}], 0x0, &(0x7f00000011c0)={[], [{@pcr={'pcr'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) syz_mount_image$vfat(0x0, &(0x7f0000004200)='./file2\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={[{@shortname_mixed='shortname=mixed'}, {@rodir='rodir'}], [{@uid_eq={'uid'}}]}) 01:44:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000007700)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 01:44:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb}}) [ 1029.073013][T25581] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:44:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 01:44:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000000000)={@remote}, 0x20) 01:44:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) 01:44:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000001f80)) 01:44:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0x2}]}]}}}], 0x20}}], 0x1, 0x0) 01:44:39 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000840), 0x40) 01:44:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000400)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 01:44:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0xf0}, 0x80) [ 1029.292326][T25609] device batadv_slave_0 entered promiscuous mode [ 1029.324641][T25606] device batadv_slave_0 left promiscuous mode 01:44:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0x4) 01:44:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="e0646b4e034ee733febdcc", 0xb}, {&(0x7f00000000c0)="58fd7548d725f5870559a8efc7be93cebed7867dfd4766fe776b57d98d12d920f28954eaeb50a5195e3a879c7ce4c38ed7ee9782687a3fde868947ca6464f18bdb981bb9159db93f957da4c29a10c46fd7671caa2e5150b2c39ca596870c1d7b76bc755c25c4e3a8a2ac0c2b7a5f257a2259", 0x72}, {&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000500)="b7d36b8028e61087744788c2ef519636cd0304fdddf5c24c577d767c87dee374c3ae254c3fb8f3e9933ac477f7ea2a63d7aa39ce270302a069ba87c96b80eed1fa56c4d2a7d5280d269385e94ef48261e39ae453d4b569618dbbe44c9956828d9d0a4715a136eb8b9d6297df71088805faa7bd65585847409a27ada93933f680d16f64974068e49b8b8655960c4737723f89dba808f37bc32fe2fd00d3558eb9e2afd7a2f9698d5c9814fa0f9b7fa402816ffe8ab2db40e8a3dbf1558f5c0cca86b950f4700aec18fea07b0df9efc252fd363f4750eb4623479dd7f129de1f8e4e667bdb1105ec7ea7d3b268893241462bee59a18b352f9745ebdd317d4f8279c5fe111a283c25d5132ce46de0ec0292403bc81fcc0ef4059b60d5100b34c3959dde08590ed028bbe829bd9f19c59febe48a2d62a76c557c74b72f63486427dcd6ff6001cba07ff972b82386e275a49378cc492744d449f6b2ff571d9b536825ac424781ca08c9c9c00af22473db3592fdd3de95651fea70414a893e8633883976ac5ab677d998328dd2486f170804c108c026fc8b6e03e9fd0060dd9315284dd0c072dd82b55812e9d3603c13362b53d7d8b0daa082c019a9360814cd20cead8f0cb798256c0f4cc807474058dd433fc84386d81bf363e98d4777a10280f51cfaecfdfddb1eaa1ea9c59b1f5728558ae627f48db531f875d291be030ea3907bcdc86a3e651a0d1e2ec85357715cd50cc18f63760cb417bef1cd4181261f827f3703d6d8e43be65c22458f2660bdf7603a336614778947e431454f8183c1684cf810048d88218fae0873cc325f6c5f405ef8d04f5ebf7ffbe1a9b9444bc8035c67e34d720e555bbd3e3ac1466f318a3629b03f25768d552046368779035650f84122201e4e58087eab06c18128b19660e3af7a82b9797902ed149cb3f006dafe17cd92ced2b47b297d83e9afd116760ce8b5134792ec17e6cece1ffa9295c4c95e1fed52118b0d5d7c40157a1d5626c8554d710ff06dacaa7476b080734e5e15ae2ddbc640ff8fef70e3de84e93af335a5d69406f057e2d900a6c56f74e5e2383abdc9eef7438d908acda15a82b3a611ebcc521d19a502b1f9201de2b37d275bc51183d480f9cc165e6cda3b71e9717fb5764a27c32b5e2dfaf937b905804c46c7b60f77196307eeb8e3add9b3c408933b51b290c3b8b9d599e5a54a82e1e6243f7013f98c84959328c6169a314e5b43972f031980035bf61e134acd7b33c6271531094ef69e483e4a04d6a13fa34235826e85c78ba3d57d35da6909e6508d6c5f43b045223972ecba109a7e28949a53cb61f5d7a31baa2d29d4a184023a3c224e3037de505cb5d8f1c0f292d5c728c19d3cb55271fcfc4fa8067f9bada58f9c75af03e9e8889f397dbce6c889770f67d6d52a663543e98cefd1c072991188c4f518b317bb4969ccac60e2d8a6a039ba10ea986a70b85c36c793e26e7b5060351da264788929f2cab8416176c0f7bcef9f4ce99fc8e4e35a5ed60dddbc66056c6bb37426466d4907f395188ee15b0b326ebb44c5a811d9da8077e6bb7d4440d65ba68f17aad0d6e89ded3c16a658eda7b3a3e61fada44286606a473db9b3cd93466e07e854665f7d3cae3aaa8b7394005b7c4680d73d837a839a865963a7f03a4687fc0ee81a52ddf0010dc8764591eb652f930f05a23554967455e6472cf0013618d4032dfed9e868ea1b10b58d7065d38d55ad6ca57dfc0e793af6e926c069e3bd5b03ab7a7aa7556987a74c4305734cef31bd62628b8c4e196f", 0x4fb}], 0x4}, 0x0) [ 1029.337663][T25616] device batadv_slave_0 entered promiscuous mode 01:44:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000011c0)={[], [{@pcr={'pcr'}}]}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) 01:44:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="e0646b4e034ee733febdcc", 0xb}, {&(0x7f00000000c0)="58fd7548d725f5870559a8efc7be93cebed7867dfd4766fe776b57d98d12d920f28954eaeb50a5195e3a879c7ce4c38ed7ee9782687a3fde868947ca6464f18bdb981bb9159db93f957da4c29a10c46fd7671caa2e5150b2c39ca596870c1d7b76bc755c25c4e3a8a2ac0c2b7a5f257a2259", 0x72}, {&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000500)="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", 0x523}], 0x4}, 0x0) [ 1029.381099][T25606] device batadv_slave_0 left promiscuous mode [ 1029.481007][T25628] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 01:44:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, @in={0x2, 0x0, @empty}, @vsock, @l2={0x1f, 0x0, @none}}) 01:44:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, 0x0}}], 0x1, 0x0) 01:44:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0xf008, 0x8}, 0x40) 01:44:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 01:44:39 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000001300)='y\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000017c0)='vfat\x00', 0x0, 0x0, 0x3, &(0x7f0000002d80)=[{&(0x7f0000001840)="63c8e0d639df284218993c3806b7a9aa9d8766cd7791498931304020ba1a8dabf27eb1b734516ff35d1ee62062afccaabe84b517ea38df602cace4649fa53fd3e6bc8b2524046a275a83ae9955606a9b880e939288cef0d1b79a5057ffafb165", 0x60, 0x7e4e7876}, {&(0x7f0000001940)}, {0x0}], 0x0, &(0x7f0000002e40)={[{@utf8no='utf8=0'}, {@uni_xlate='uni_xlate=1'}, {@shortname_lower='shortname=lower'}], [{@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\x01'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_measure='dont_measure'}]}) syz_mount_image$vfat(&(0x7f00000041c0)='vfat\x00', &(0x7f0000004200)='./file2\x00', 0x0, 0x0, 0x0, 0x4209a, &(0x7f0000004400)={[{@utf8='utf8=1'}, {@rodir='rodir'}], [{@appraise_type='appraise_type=imasig'}]}) 01:44:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:44:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="9d", 0x1}], 0x1}}], 0x2, 0x8004) 01:44:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 1029.662682][T25637] loop5: detected capacity change from 0 to 264192 01:44:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 01:44:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x20) 01:44:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x94, 0x4, "0632"}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@loopback}, {@loopback}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@dev}, {@dev}]}]}}}], 0xc0}}], 0x1, 0x0) 01:44:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000001440)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 01:44:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000040)) 01:44:39 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) 01:44:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') read$char_usb(r0, 0x0, 0x273) 01:44:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 01:44:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet(r0, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:44:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000000000)={@remote}, 0x20) 01:44:39 executing program 1: pselect6(0x40, &(0x7f0000003d00)={0x1}, 0x0, 0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003e40), 0x8}) 01:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r0, 0x0, 0x300b, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt(r1, 0x0, 0x6, &(0x7f0000003a80)=""/125, &(0x7f0000003b00)=0x7d) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003b40)='NLBL_MGMT\x00', 0xffffffffffffffff) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xecc}, 0x0, 0x0, &(0x7f0000003e00), 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:44:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x401070c9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0xfffff001) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3c2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 01:44:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 01:44:39 executing program 3: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x50, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x10) setsockopt(r0, 0x8, 0x300b, &(0x7f0000003500)="907df8cbe94f52d7cf71fc5ba74e0e24", 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x4, &(0x7f0000003a40)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000003680)="1405d442b87aa130d0d54a308f2f93ae1d5c765c4ccaca784207c747927056f61b03ce5ef6714a0f854b272a12b986ca048ef2f1d60b0673b1b3b020cfc4906cb2d22493d2", 0x45, 0xffffffff, 0x0, 0x3}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000003740)="72d866173f2dd115fb4444e880f65df71de0487dda69a07347d5498d68d46473462ec7bacde35d3266c0f33c19b020aff645639ddd73823847d556b16a0988f025263e8f858dcf455cbf3b5ac36ee0ed0af0763193d8b8cb7f2a1225bcc1e1398e932beb277727b1bbf36dc8f146bdf57c2dd971b8d169be0b0e8775475af9fdbe1fc175ee2b98e53b608051db61a12bc1", 0x91, 0x1, 0x0, 0x2}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000003840)="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", 0xfe, 0x7, 0x0, 0x3}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f00000039c0)="6392f40e6e44da7d51177b0ad64cc36e385f2beb4246bd873fad45e2496939e03dfde8c684e580118e667196d2b7b44a46ff6c912a3c", 0x36, 0x4ff, 0x0, 0x2}]) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x58, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x9, 0x0, 0xe5, 0x4, 0x1, 0xecc, 0x6}, &(0x7f0000003d40)={0xff, 0x8d3, 0xfff, 0x789, 0x5b64a6f1, 0x3, 0xf9, 0x1}, &(0x7f0000003d80)={0x7fffffff, 0x0, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x200, 0x1000}, &(0x7f0000003e00)={r4, r5+60000000}, &(0x7f0000003e80)={&(0x7f0000003e40)={[0x6]}, 0x8}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) 01:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0) 01:44:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 01:44:40 executing program 5: clone(0x20000000, 0x0, 0x0, 0x0, 0x0) 01:44:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 01:44:40 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="03", 0x1) 01:44:40 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)) 01:44:40 executing program 1: mknod(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000001b80)='./file0\x00', 0x0) 01:44:40 executing program 5: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x10) setsockopt(r0, 0x8, 0x300b, &(0x7f0000003500)="907df8cbe94f52d7cf71fc5b", 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd2(0x7, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x4, &(0x7f0000003a40)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000003680)="1405d442b87aa130d0d54a308f2f93ae1d5c765c4ccaca784207c747927056f61b03ce5ef6714a0f854b272a12b986ca048ef2f1d60b0673b1b3b020cf", 0x3d, 0xffffffff, 0x0, 0x3}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000003740)="72d866173f2dd115fb4444e880f65df71de0487dda69a07347d5498d68d46473462ec7bacde35d3266c0f33c19b020aff645639ddd73823847d556b16a0988f025263e8f858dcf455cbf3b5ac36ee0ed0af0763193d8b8cb7f2a1225bcc1e1398e932beb277727b1bbf36dc8f146bdf57c2dd971b8d169be0b0e8775475af9fdbe1fc175ee2b98e53b608051db61a12bc1", 0x91, 0x1, 0x0, 0x2}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000003840)="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", 0xfe, 0x7, 0x0, 0x3, r4}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f00000039c0)="6392f40e6e44da7d51177b0ad64cc36e385f2beb4246bd873fad45e2496939e03dfde8c684e580118e667196d2b7b44a46ff6c912a3c", 0x36, 0x0, 0x0, 0x2}]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x9, 0x0, 0xe5, 0x4, 0x1, 0xecc, 0x6}, &(0x7f0000003d40)={0xff, 0x8d3, 0xfff, 0x789, 0x5b64a6f1, 0x3, 0xf9}, &(0x7f0000003d80)={0x7fffffff, 0x0, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x200, 0x1000}, &(0x7f0000003e00)={r6, r7+60000000}, &(0x7f0000003e80)={&(0x7f0000003e40)={[0x6]}, 0x8}) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) 01:44:40 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000480)) timer_delete(0x0) 01:44:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000140)={0x20}, 0x20) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10}, 0x10) 01:44:40 executing program 1: clone(0x20c1000, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 01:44:40 executing program 0: keyctl$link(0xe, 0x0, 0x0) 01:44:40 executing program 4: openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20002, 0x0) 01:44:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00', r0) 01:44:40 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000806) 01:44:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x395}, 0x14}}, 0x0) 01:44:40 executing program 5: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x10) setsockopt(r0, 0x8, 0x300b, &(0x7f0000003500)="907df8cbe94f52d7cf71fc5b", 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd2(0x7, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x4, &(0x7f0000003a40)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000003680)="1405d442b87aa130d0d54a308f2f93ae1d5c765c4ccaca784207c747927056f61b03ce5ef6714a0f854b272a12b986ca048ef2f1d60b0673b1b3b020cf", 0x3d, 0xffffffff, 0x0, 0x3}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000003740)="72d866173f2dd115fb4444e880f65df71de0487dda69a07347d5498d68d46473462ec7bacde35d3266c0f33c19b020aff645639ddd73823847d556b16a0988f025263e8f858dcf455cbf3b5ac36ee0ed0af0763193d8b8cb7f2a1225bcc1e1398e932beb277727b1bbf36dc8f146bdf57c2dd971b8d169be0b0e8775475af9fdbe1fc175ee2b98e53b608051db61a12bc1", 0x91, 0x1, 0x0, 0x2}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000003840)="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", 0xfe, 0x7, 0x0, 0x3, r4}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f00000039c0)="6392f40e6e44da7d51177b0ad64cc36e385f2beb4246bd873fad45e2496939e03dfde8c684e580118e667196d2b7b44a46ff6c912a3c", 0x36, 0x0, 0x0, 0x2}]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x9, 0x0, 0xe5, 0x4, 0x1, 0xecc, 0x6}, &(0x7f0000003d40)={0xff, 0x8d3, 0xfff, 0x789, 0x5b64a6f1, 0x3, 0xf9}, &(0x7f0000003d80)={0x7fffffff, 0x0, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x200, 0x1000}, &(0x7f0000003e00)={r6, r7+60000000}, &(0x7f0000003e80)={&(0x7f0000003e40)={[0x6]}, 0x8}) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) 01:44:40 executing program 3: openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) 01:44:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010201"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000032c0)) 01:44:40 executing program 1: clone(0x20c1000, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 01:44:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x60) 01:44:40 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7, 0x208000) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, 0x0) 01:44:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:40 executing program 5: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x10) setsockopt(r0, 0x8, 0x300b, &(0x7f0000003500)="907df8cbe94f52d7cf71fc5b", 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd2(0x7, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x4, &(0x7f0000003a40)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000003680)="1405d442b87aa130d0d54a308f2f93ae1d5c765c4ccaca784207c747927056f61b03ce5ef6714a0f854b272a12b986ca048ef2f1d60b0673b1b3b020cf", 0x3d, 0xffffffff, 0x0, 0x3}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000003740)="72d866173f2dd115fb4444e880f65df71de0487dda69a07347d5498d68d46473462ec7bacde35d3266c0f33c19b020aff645639ddd73823847d556b16a0988f025263e8f858dcf455cbf3b5ac36ee0ed0af0763193d8b8cb7f2a1225bcc1e1398e932beb277727b1bbf36dc8f146bdf57c2dd971b8d169be0b0e8775475af9fdbe1fc175ee2b98e53b608051db61a12bc1", 0x91, 0x1, 0x0, 0x2}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000003840)="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", 0xfe, 0x7, 0x0, 0x3, r4}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f00000039c0)="6392f40e6e44da7d51177b0ad64cc36e385f2beb4246bd873fad45e2496939e03dfde8c684e580118e667196d2b7b44a46ff6c912a3c", 0x36, 0x0, 0x0, 0x2}]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x9, 0x0, 0xe5, 0x4, 0x1, 0xecc, 0x6}, &(0x7f0000003d40)={0xff, 0x8d3, 0xfff, 0x789, 0x5b64a6f1, 0x3, 0xf9}, &(0x7f0000003d80)={0x7fffffff, 0x0, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x200, 0x1000}, &(0x7f0000003e00)={r6, r7+60000000}, &(0x7f0000003e80)={&(0x7f0000003e40)={[0x6]}, 0x8}) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) 01:44:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a924, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x6b1, &(0x7f00000002c0), 0x4) 01:44:41 executing program 1: clone(0x20c1000, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 01:44:41 executing program 0: perf_event_open(&(0x7f0000001380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) 01:44:41 executing program 4: clock_gettime(0x0, 0x0) fork() r0 = fork() wait4(r0, 0x0, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) 01:44:41 executing program 3: timer_create(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 01:44:41 executing program 5: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x10) setsockopt(r0, 0x8, 0x300b, &(0x7f0000003500)="907df8cbe94f52d7cf71fc5b", 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003580)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd2(0x7, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='/dev/loop-control\x00', 0x100, 0x0) io_submit(0x0, 0x4, &(0x7f0000003a40)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000003680)="1405d442b87aa130d0d54a308f2f93ae1d5c765c4ccaca784207c747927056f61b03ce5ef6714a0f854b272a12b986ca048ef2f1d60b0673b1b3b020cf", 0x3d, 0xffffffff, 0x0, 0x3}, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000003740)="72d866173f2dd115fb4444e880f65df71de0487dda69a07347d5498d68d46473462ec7bacde35d3266c0f33c19b020aff645639ddd73823847d556b16a0988f025263e8f858dcf455cbf3b5ac36ee0ed0af0763193d8b8cb7f2a1225bcc1e1398e932beb277727b1bbf36dc8f146bdf57c2dd971b8d169be0b0e8775475af9fdbe1fc175ee2b98e53b608051db61a12bc1", 0x91, 0x1, 0x0, 0x2}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000003840)="8f8ba6e2d6d2162e5fb4b39092d3a6d40e5e53ad0f46f4d42f977a4a712866eb83699dbcc161233924144a4dbe695ead5fef77a36ee6e8e37aff2a16e9b72adf7a0a426ff2ed627b5cbb6e57079c6d07dfc5de3e3f8bbadd7a1c20a783546b6f1cd19b67b98ba240e78b3208c294c78065588f8a3d031aa1a0f64ea6b672e26bdc63048e9643c5f074466038f5f4fab61eea28a147ea544f5d20fd54846023a6b0cedf536430b9f9c9658cc85ea577519d09d2491e1123b611c67a888b6469249895cc1ae77bf433d25f765e3e080ba45141f75d4da02901651bd19e0b1f60bd5d47d38b20b16c084ea540e0e5fd905d1004e62b06381a455c27c73a85bb", 0xfe, 0x7, 0x0, 0x3, r4}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f00000039c0)="6392f40e6e44da7d51177b0ad64cc36e385f2beb4246bd873fad45e2496939e03dfde8c684e580118e667196d2b7b44a46ff6c912a3c", 0x36, 0x0, 0x0, 0x2}]) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000003d00)={0x1, 0x9, 0x0, 0xe5, 0x4, 0x1, 0xecc, 0x6}, &(0x7f0000003d40)={0xff, 0x8d3, 0xfff, 0x789, 0x5b64a6f1, 0x3, 0xf9}, &(0x7f0000003d80)={0x7fffffff, 0x0, 0x2, 0x3ff, 0xffffffff, 0x7f, 0x200, 0x1000}, &(0x7f0000003e00)={r6, r7+60000000}, &(0x7f0000003e80)={&(0x7f0000003e40)={[0x6]}, 0x8}) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) 01:44:41 executing program 0: clone(0x20200, 0x0, 0x0, 0x0, 0x0) 01:44:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) 01:44:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x18, r1, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}}, 0x0) 01:44:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0x4040800) 01:44:41 executing program 5: timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) 01:44:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0xfffffffffffffffe, 0x0, &(0x7f00000001c0)={0x0, 0x4}}, 0x0) 01:44:41 executing program 1: clone(0x20c1000, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 01:44:41 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000440)={0x2c, 0x0, r2}, 0x10) 01:44:41 executing program 0: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) [ 1031.669548][T25797] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1031.687450][T25798] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0xf, 0x0, 0x0, {}, [@NFQA_PAYLOAD={0x5, 0xa, "96"}]}, 0x1c}}, 0x0) 01:44:42 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 01:44:42 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) 01:44:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x7fffef95}, {&(0x7f0000000100)=""/107, 0x6b}, {0x0}, {&(0x7f0000002640)=""/251, 0xfb}], 0x4}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:44:42 executing program 1: r0 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r0) 01:44:42 executing program 0: clone(0xf000000, 0x0, 0x0, 0x0, 0x0) 01:44:42 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@empty, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004c, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x32}, 0x51, r2}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x2f, 0x4, 0x8, 0xe3f, 0x61, @local, @rand_addr=' \x01\x00', 0x8, 0x20, 0x4, 0x3e078c65}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4b0001, r3}) 01:44:42 executing program 5: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x46042) 01:44:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000300001"], 0x14}}, 0x0) 01:44:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x840) 01:44:42 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000003c0)) 01:44:42 executing program 5: openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101003, 0x0) 01:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 01:44:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xfffffdef) 01:44:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 01:44:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB], 0x3110}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 01:44:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8004700b, 0x0) 01:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003f00)=ANY=[@ANYBLOB="1c000000020603"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x3000}}], 0x2, 0x0, 0x0) 01:44:42 executing program 1: clone(0x11000000, 0x0, 0x0, 0x0, 0x0) 01:44:42 executing program 0: clock_getres(0xc38c0fc1619cd7f2, 0x0) 01:44:42 executing program 4: openat$procfs(0xffffff9c, &(0x7f0000000b00)='/proc/bus/input/handlers\x00', 0x0, 0x0) 01:44:42 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 01:44:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x201}, 0x14}}, 0x0) 01:44:42 executing program 0: openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 01:44:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) [ 1032.730346][T25861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1032.747452][T25861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0xfffffffffffffffe, 0xf0, &(0x7f00000001c0)={0x0, 0x4}}, 0x0) 01:44:42 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20}, 0xdd9b9d008ea990c5) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10}, 0x10) 01:44:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x29, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "e595e45322ae38f92f094d27267c8f4b8eb3fd237138f280e9a77412ff614ba9abd4e41924fbd307e0bd9116df6227d68876c76b46e6629fac"}]}]}, 0x29}}, 0x0) 01:44:42 executing program 4: openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) 01:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:44:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r0, 0x0, 0x0, 0x40010060, 0x0, 0x0) 01:44:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 01:44:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x1, 0x5, 0x40, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 01:44:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 01:44:42 executing program 4: clone(0x400a0900, 0x0, 0x0, 0x0, 0x0) 01:44:42 executing program 0: clone(0x800408, 0x0, 0x0, 0x0, 0x0) 01:44:42 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) socketpair(0x28, 0x0, 0x5, &(0x7f0000000700)) 01:44:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) 01:44:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x40) 01:44:42 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="319f000000001700000014"], 0x28}}, 0x0) [ 1033.028014][T25904] IPVS: ftp: loaded support on port[0] = 21 01:44:42 executing program 0: mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:44:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[], 0x3e0}}, 0x0) 01:44:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001c40)={&(0x7f0000001940)=@xdp, 0x80, &(0x7f0000001bc0)=[{0x0}, {0x0}], 0x2}, 0x10121) [ 1033.099188][T25904] IPVS: ftp: loaded support on port[0] = 21 01:44:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="10310000fd26d7"], 0x3110}}, 0x0) 01:44:42 executing program 1: r0 = syz_io_uring_setup(0x77c0, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 01:44:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000340), &(0x7f0000000400)={0x9}, 0x0, 0x0, 0x0) 01:44:43 executing program 4: clone(0x400a0900, 0x0, 0x0, 0x0, 0x0) 01:44:43 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "6d25b5014fedfe9f079146a367ca0c8bc5c17b2a8dbef313135118fbcaeab70cc752e9aeed689dbdf881ce9cab15a61a9ff749421b19f0544396ec32499581f5"}, 0x48, 0xfffffffffffffffc) 01:44:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff01, &(0x7f0000000200)={&(0x7f0000000340)={0x45, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS]}]}, 0x58}}, 0x0) 01:44:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_ts_info}) 01:44:43 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0, 0x0, 0x8}, 0x10) 01:44:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 01:44:43 executing program 3: openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) [ 1033.292509][T25975] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1033.320669][T25977] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1033.327727][T25976] IPVS: ftp: loaded support on port[0] = 21 01:44:43 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:43 executing program 1: socket(0x1, 0x0, 0x800) 01:44:43 executing program 5: r0 = openat$zero(0xffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 01:44:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@loopback, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, r1}) 01:44:43 executing program 4: clone(0x400a0900, 0x0, 0x0, 0x0, 0x0) 01:44:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010201"], 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000340), &(0x7f0000000400)={0x9}, 0x0, 0x0, 0x0) 01:44:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x10}, 0x74) 01:44:43 executing program 3: openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0xa6000, 0x0) [ 1033.528820][T26018] IPVS: ftp: loaded support on port[0] = 21 01:44:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x25, &(0x7f00000002c0), 0x4) 01:44:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x4004700c, 0x0) 01:44:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001880)={'team0\x00'}) 01:44:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 01:44:43 executing program 4: clone(0x400a0900, 0x0, 0x0, 0x0, 0x0) 01:44:43 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x8181) 01:44:43 executing program 5: r0 = io_uring_setup(0x1850, &(0x7f00000000c0)={0x0, 0xf3a1}) io_uring_setup(0x1467, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 01:44:43 executing program 3: add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='A', 0x1, 0xfffffffffffffffc) 01:44:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x801c6d02, 0x0) 01:44:43 executing program 0: r0 = openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000440)) [ 1033.718400][T26056] IPVS: ftp: loaded support on port[0] = 21 01:44:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:44:43 executing program 2: add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 01:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0xfffffffffffffffe) 01:44:43 executing program 3: keyctl$link(0x11, 0x0, 0x0) 01:44:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 01:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003f00)=ANY=[@ANYBLOB="1c000000020603"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x4}}], 0x2, 0x0, 0x0) 01:44:43 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x18, r0, 0xfc28fdb582ad9f31, 0x0, 0x0, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x58}}, 0x0) 01:44:43 executing program 3: clone(0x20000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180)="9d") 01:44:43 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4}]}, 0x1c}}, 0x840) 01:44:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="a6f4", 0x2}], 0x1}}], 0x1, 0xfe80) [ 1033.937107][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.969311][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:44:43 executing program 4: timer_create(0x7, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000340)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {r0}}, &(0x7f00000003c0)) [ 1033.995343][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1034.033548][T26110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:43 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00', r0) 01:44:43 executing program 5: syz_open_dev$vcsu(&(0x7f0000003340)='/dev/vcsu#\x00', 0x100006, 0x2) 01:44:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x3ff, 0xf1, &(0x7f0000000640)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:44:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@empty, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004c, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x51, r2}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x2f, 0x4, 0x8, 0xe3f, 0x61, @local, @rand_addr=' \x01\x00', 0x8, 0x20, 0x4, 0x3e078c65}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4b0001, r3}) 01:44:43 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfffffdef) 01:44:43 executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x2b, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) 01:44:43 executing program 3: clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000180)="9dc54dc5aa3852eb9f868250e0115e186cdb41679ce01955f9819f8bc16c46319efdb30175f40b0c2c326be428aabfd4befca21c05f1854713cc8f796b51104f0ab174734a6a07e5f0eefc4ca314cef75123a022ce7b3b6bdd75ea38a931db1a30d69d6094c139457e3aa890b0f2d8a1b86e69269c383f280f29ef704fe0f5c5b11812a1b46993d9d80833e9f91b1e70ab5b1fe79baf5357c37a1518e0050178d143d9c3abf591edaf4f767f334f234069f559c6d0c3b3bd319a8ac16ebfea058161e82dbb0915595a386ca2392f15a9") keyctl$clear(0x7, 0x0) 01:44:43 executing program 5: r0 = openat$rtc(0xffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 01:44:44 executing program 4: openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xe000, 0x0) 01:44:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x922, 0x0) 01:44:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x10}}], 0x10}}], 0x1, 0x0) 01:44:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@loopback, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000000, 0x6, 0x0, 0x100, 0xb, 0x4b0001, r2}) socket$inet6_udplite(0xa, 0x2, 0x88) 01:44:44 executing program 4: syz_io_uring_setup(0x7fffffff, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 01:44:44 executing program 5: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0xfffff, 0x0) 01:44:44 executing program 2: clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000180)="9dc54dc5aa3852eb9f868250e0115e186cdb41679ce01955f9819f8bc16c46319efdb30175f40b0c2c326be428aabfd4befca21c05f1854713cc8f796b51104f0ab174734a6a07e5f0eefc4ca314cef75123a022ce7b3b6bdd75ea38a931db1a30d69d6094c139457e3aa890b0f2d8a1b86e69269c383f280f29ef704fe0f5c5b11812a1b46993d9d80833e9f91b1e70ab5b1fe79baf5357c37a1518e0050178d143d9c3abf591edaf4f767f334f234069f559c6d0c3b3bd319a8ac16ebfea058161e82dbb0915595a386ca2392f15a9") 01:44:44 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001214010025bd7000fbdadf25080003000400000008c8"], 0x48}}, 0x0) 01:44:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:44 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 01:44:44 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)) 01:44:44 executing program 0: timer_create(0x50cf44d6ee6c02c, 0x0, 0x0) 01:44:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000f4cdcf"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', r0) [ 1034.445116][T26158] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 01:44:44 executing program 3: r0 = socket(0x28, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 01:44:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x10, &(0x7f00000002c0), 0x4) 01:44:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev, @dev, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b012b}) 01:44:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1={0x0}, 0x9}, 0x1c, 0x0}, 0x0) 01:44:44 executing program 0: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x10000000, 0x0) 01:44:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f00000049c0)={0x0}}, 0x0) 01:44:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 01:44:44 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000140)={0x20}, 0x20) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10}, 0xfffffdef) 01:44:44 executing program 0: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x1, 0x46042) 01:44:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x8}, {0x6}]}) 01:44:44 executing program 4: timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000003c0)) 01:44:44 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 01:44:44 executing program 1: openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0080, 0x0) 01:44:44 executing program 4: keyctl$link(0x10, 0x0, 0x0) 01:44:44 executing program 4: get_thread_area(&(0x7f0000000780)) [ 1034.756895][ T36] audit: type=1326 audit(6971967884.534:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26189 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:44:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="10"], 0x3110}}, 0x0) 01:44:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:44 executing program 2: clone(0x2299c900, 0x0, 0x0, 0x0, 0x0) 01:44:44 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000340)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}, {r0}}, &(0x7f00000003c0)) 01:44:45 executing program 0: clone(0x20c1000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0x0) 01:44:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev, @dev, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b012b, r2}) 01:44:45 executing program 5: io_uring_setup(0x7b26, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x88000000}) 01:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 01:44:45 executing program 2: socketpair(0x11, 0x0, 0x0, &(0x7f0000000ec0)) 01:44:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:45 executing program 4: clock_adjtime(0x4, &(0x7f0000000300)) 01:44:45 executing program 5: syz_io_uring_setup(0x77c0, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:44:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @perf_config_ext, 0x409}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:45 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000700)) 01:44:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:45 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40900, 0x0) 01:44:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x80000001, 0x4) 01:44:45 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000440), 0x20000450) 01:44:45 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r0, 0xfc28fdb582ad9f31}, 0x14}}, 0x0) 01:44:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) 01:44:45 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x0) 01:44:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x1e, &(0x7f00000002c0), 0x4) 01:44:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x400c744d, 0x0) 01:44:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe94, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe8c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x91, 0x6, "c92187ef929714f09ba7c47028f81cc620e0d201ff261249f706e73d7cc7ffa87638c7083e1e7e3c1eefc0bfd12255208830cbcb93d89d4182b204a939fd46d0c27ddd06d3060f90ccc8edf05db9bbc836e8c05871518413ed1f1351d218daafe13dfc0b89d220c9e306be4bb96326ab6f9cdbf3e9613adc7e3f515c2c5bd22ab9ac42c8423a9cc6b2f5cec1bb"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xf5, 0xb, "99d9b0054343d69a72b042231033b0d5496be82ec43b7e15a0e94b947cf748be915cd876d09ce73e1d3de6e5dce986c82aa5f287e1fb49b90ba6773ba227ff5816f975374fb2591130efbf764a921a360418c5d17ec9b26737c1b3b0eedc747717e133c697b8ef7c79a4b22bf25e9b3a9231779c80948bfa288dd9b372dd9fffbc8eb93a1b4a9a3589f72a457006570cfb7b59cdf0d024d301db1b7aaca9c6ad07f8a0a38e706ef0e6ae3c1ea47eb59b6fc3219755564ad6909dd8bcf3903f45b510cb73023ae2d65a8a9b4ade32da0de82ae3b441b36d94bd605c0a90fd139cc1b2c1aecf2971d1862ae145dd9b72ac4e"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xced, 0x8, {0x0, 0x0, "31320237a776d389db2747bac3cb3434c9a882d80a048db7fd26c2244e9136e7667d4d3ac3547dde2ddb27d6ea52f9fef638a58e67583a894fcab7c576d6bc7eea67931ca877912f0281c08cee0cbccf032fbb1021a2d45236823cd79c7d68cd71a0dc677b8643b4995333ca28abed852d258d7aa82fdbff1e9815735b9146d15690e6cfde74af92ec3b46051a46bb075eccf9398ed24686011dac6ba4ae643fef1617892bad6b2d93460e025ee9f3abe5e9bfda62365c3292778d306145b824391b665abe5fab8527543551b78fe42a32ff9c7b6b6d4bdd59ec56df31cbf1bd7b6d3c33982312ce1c91d9e0a1826da04cc6f10f5bad10707410edd1bf2eb7d616558b2b72ad018ce1570fe626c6008ab2ecfb391f68cf44da5f3b34d9d61d064da45864150710178a1ef0a62b0cddf04a8c28bdd69f48674067b7a5163baf2559c8635f3aa9207dc3eb916aba449778c95cd7b4f8b431aa249c5b7091314f936a75dffe3431d584277fed250561b9e6e3118a28fcf87e8b732ab00c40f847d5c34b63735f841962c8483d08fb3c8d8f8a62365d0a819baeea0335bb3d69f915188ebcb9afd96561bd0536723c227816a627d7ca391989e0a5aa2842c9f5a2e3285e8e71065595f76c25a805cde2da431f62a83f0d313d4b85e4e3ee8cd3da7e60bbf6c7c0db74a3e95568afad219c15907c4957ad44cdd87b238a7a8430f3db9132752e2dff2cc60ce3d30f69158402aca6f363e7653e40d19767da592900e3600d779683fd9ba951c38a1fe81a898a9b0a04b46ea50523b44bd0b254fa364ec1d1b70a02b43abb138e74e1b4b355bee0c2be335af38469fcdd496a7ae73dc9abcb947e2bcb3e0dd26b561e3cc666193cec4eea02c2e9d3abeaa33bb63c481f64314b4e7c79d6ab669b009a5f39f63d0e69d9cacb990e682c7f0db4deb8bb77f71e7eded49cb09e30ab8f23c8fa39fd44d49fdd5b832b9be3f9ddd3f0a4f0e9b7828f53507dce2333d87450edb67bcf09b5d836a1e155b3908299049613b430d3053187b4bcc42986cbe9fd3548da384b5af4859a076275c196c00c5e12608c2ca70574051972601f8a26e86377dbd8c5500dd7658931be3d99143554213abe1d1200b2c393eb659506e91e6a3e5432e2fd89e204cfdbf495a8a3bbebd9d804f8d73e9dd8807421b58e2c7134c19b8215b3e012b81225afcb005f340f6c896b146bed30e15b7f66c00cc370307a72f0b6a605b3e6fa10196c0d9f30f45accb3bd945063f113da73f19b90ce48932c92ac8cef22edc5e116131e4017d60f5f4f0671c91374ec16d154bde9c8f9753184d3ced376930646d43a8b1c2154178da37324d2d40f3108531ad11ee334a98bd4fa42aa8b4ccf08424de3e5b549348b3f1b6c2838bbba431dfcce8a954024a33f920a633c08506bae2cbc8726672f5df3c70713a45eff681f7bf708fd2fd62907b404713f8e8ff9170a47ccefdd055b033753c2132dfa819ee4e69ee1182e645a20c6520ee400de704978f575f244bcb4eed9c449be7873c44afe5850dc87ef6880412fece2a558f0453f08b0a1279d2cb58be20e11e4d932929f0fc849946e361208cfd4951f9c50fe28e61d9a305dd3fe2d3d89b181a362dcf62c874a7ee568bec249be08f7378fbfc24de4c97ee2ee636396f1d62880f4a587fff4ca2bce3f11c4a42306f95513ae9e2764b0363fdc4f684dfe42d113183f91a959e8ba31ca8fc10ed596f905b33dbe0dd51f7cc9ef0546902705227a6fdd4e7e45ef3f729aa9f437f3d1c922709d0a82694dfb9b9a5d10e938d8b8ef9b5abcdf4f20a02ca2c767e56f278a9a4c1959cbf8a21fc0e0894357c2bc5db22df07f98b9a559d564b80f8a63f582ae11207dea35f4cc5e3860524d07caa82a643c33752abdcc7d070ee35e5f5120ee345a0b0ab6633d141b1086b534065505777a6c276c287d00637dc262479743a216cca7d463e983528b4912ba936781843156e747515bee6340d0871041588c76390b7fb218612383dd3ffc60213f7d19ec1deb3382a66401f7a144764e04fcd74bf504bc0f605497e3abfff5867f855f151f720f58df2227f583551b34f852ea8026dfc19eb3b46eee5ee02400e8716cf64ece8d55694c0f757bf4687dece7398d8e1e6555554e8f790b7208abdfe89b772e86d27bdf7e7f6f6931877c3e1f8d2a2776de3467ae43a0c6993bf5a12fddb41d383cffa22df3ba2234cfa392c59f0010d534e2ee3198f0d1e048451e399faadfab132b59980bf043c38f565736575721c459dc591bbf450f2287bd5eb9406a2c63083a8d8c44c81f82c543c3ff6c10bf465b0571838037b73fd68f4219e287fc6b88ec914edd73529c219e9445f1cea94b5d399618a2521995d1cfbacc50c13763d08f9f508b031e6fe943c6976d5f2c259cd5aa4490b78283528832dd2e6aea05cd05a3cf8aa9eb7ad38aa51bd65e3d068fa9893df52523c0deccb69cb5c77753670c1d981d2cb1a79f2df71f002cb89cb356d44b3a73d912e63ea56cdcde158e123080238da13eaf960ea534fc4a1556eb82b11e5bcfd7b72fca4e5238cdbbd1cfc6ee9978d361d56ed2eea6e21b732a0d5b7c6b1cf900b35cd5c60c347c4e8f1b232260cc41e509d41a0f41a93cb461146026f53269012cfb670f46d1b11300147a7d86bd86acf591af48f80659c3f75caa594d6cce0c774581a1762d5c8f5800015f47e8384741a3cb11f02b0205e6a17db9f0863dc6a0a3eb46beaa2d011f761b051320b13678f422f0a900abcc421a34ccb46c9c8ad4a4ef98cc0fe7cb5492c452aaa70d7ae5cbeaccd5f4fa11bf68b689f65ad4bca50e3b0b2a4c2d458457eb97ec7dc6ac340237592cd5c047296bc92fa0755d2911c9deab110c1d18ec1e59bad543dbb74f61eb3b7cb8d1e3d19d7384180638a033351594044a1cbc24aecaa5d914de25f3eb281c38d25ead7c6f827b5c87d7b486d557435b9d31e9008076a78be098ee683048bcff9ac39ab4e47071b1dad7b4edb4b402abb8d7c387dcf3dfa6649c9a89a939879d70f827f2347b28c1278420e7ea33de26ad2491fff6fed84d088f03db1bd74740763e32c33aee33f737b9198f87c204b19a0aae1811fb15c4e1ca0155f6fb219e16cbf15bfcd036c4582fd3bd3652dc30132c0fd57ca8c0117c8c1f501868ef04dccf2e265a0448d3e15e4d50750d03ae5df0669aacfa05666aad70dd44a281fdf9f679a3beed03393f975c7e03bd03aaed0d2318b90b19bba494cc1254907618703843b4c2c89d4a8dc65f0ad893c869e7a3d6b0d741420fc1f2b374bedb316b6288224ccd37089bfe379f03c0a1c4d10049b214888c1b9889397e53b4cd77438756cd9d5654c1e2feb9aad4a7d6b598deb051ade46594ff5318874bfc59e9fff5cd2dae0a8e113b763b53ca53f78bbf6a2cc9f7b82314a194885a8fb9d9d9c141204f9e5b7269f44708425fb0e2e47bbdc4cd4ee65c4fff391cc2eea99703aeed4f6cc27938f0482ee2f6fcbd0642f34f29cc05d57957f44b0425656d7e4be289d7236b80d6f52de0880464d1b9de1c606b282e27b94b300c28a0f11c87fe2eb162d6071765ea8ca4304d13c98a612c2bfa15efbec30123ea751050a0f4660355ba503e4c86bf86572e697001ec5c86003b8cd5791573455807ab2bf4a469bc64f8623f6760389de37e97c1b0ca057d98a80d7a3864248661ab6ca23a19ce9a9147731dddb72d90f5b24a48315fdf8361a043ecf6102a05beb6090bbfe2536e6ac181ef21687d9b38f34bbc61915e341bb2f2dc79af6726199b2f3ef270305e1e18a8397a34809c78490f30e6fd3476f22b20cf1503fe4a8d357173a86de27e3f5778b2bf580e29d6ed0a77a3ac42bb86b1d648b559df54e5c86c9f3644a3b3ec771c0181fe3b7e796cec0f984ba4f9061bd71a695824fdbce3641f3c18fa545a932f621d5bb183ea26b727b3203898395f7be8022d2acb56a585430feb2977f81d5612bff5885a53be3346a37c247a30648fcce60c973b13777e82d9f0f139552e61e6d9c2e954a4a5572139f853c6adca920e396cc6a34b545bdb6431c7fe74114bcb683b9e631dbd29705f3dc3bca7b5602c28f772d125c2c49fd8a8784fbca45505b4945bb7cb1ec1e29f884c3a114071583064783f8deb68099892fcc1bc3dfebf13824b665eb99fefe0b74230a8d12c31c695cc09d6f79cc3fd5e40bccdc0c87724d7e5fd04370a19495d06c02e90055d17535761425d3906d18dab3789b45fe0d7c79456903892bf96c2040edfb66fd424969fd006d3fba6e9720de51956ba328dd34d6b06ff4214012094b71928e115bf6c5aeaa0ad1460bfb6cf26e8a521f420f27558ae4da1424a51df78a1c4232c8c16ead45f7823a0c4ef5fae5153cf0fa3db3978c417db503bb70c52a57d5d89a025f2f57c449673a83727042984d2aa7424f96bd398682566c65ef2f98a010a8e695f89d82e0eca64c6401976f7f3acb2e87ecaff8f33c58c342e788a487ace1b27dab4bf7749b6870945b132747fd8b969025cbd25ad18d49d10956ac9b837243808ac12ca5cd908ae51d4781bee0ae8f326c2bc203fce23dce1a25c10acbf884fdca4b40d43cafc9ccc7081b07f27c594ef8f558e1a"}}]}]}]}, 0xec4}}, 0x0) 01:44:45 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52) 01:44:45 executing program 4: keyctl$link(0xc, 0x0, 0x0) 01:44:45 executing program 3: syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x0, 0x400000) 01:44:45 executing program 0: openat$procfs(0xffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 01:44:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x17, &(0x7f00000002c0), 0x4) 01:44:45 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000140)) 01:44:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x7}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 01:44:45 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000002b80)='[\')\x85}\\}.:]@\x00') 01:44:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="10310000fd26d7"], 0x3110}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 01:44:45 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0)='TIPCv2\x00', 0xffffffffffffffff) 01:44:45 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) 01:44:45 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') 01:44:45 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x18, r0, 0xfc28fdb582ad9f31, 0x0, 0x0, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 01:44:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1036.024052][T26279] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:44:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x18, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}}, 0x0) 01:44:45 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000100)={@empty, @empty, @val, {@x25}}, 0x0) 01:44:45 executing program 1: r0 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 01:44:45 executing program 3: r0 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, r1) 01:44:45 executing program 5: syz_io_uring_setup(0x130e, &(0x7f0000000000)={0x0, 0x0, 0x17, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1036.127664][T26292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1036.171826][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 01:44:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x5}, 0x40) 01:44:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="10310000fd26"], 0x3110}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 01:44:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth1_vlan\x00'}) 01:44:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xdc05) 01:44:46 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) 01:44:46 executing program 5: add_key$keyring(&(0x7f00000007c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 01:44:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x12, &(0x7f00000002c0), 0x4) 01:44:46 executing program 0: setreuid(0xee00, 0xffffffffffffffff) 01:44:46 executing program 1: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000240)) 01:44:46 executing program 0: r0 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 01:44:46 executing program 4: keyctl$link(0x2, 0x0, 0x0) 01:44:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:44:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_data=0x0}) 01:44:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x10}}], 0x10}}], 0x1, 0x0) 01:44:46 executing program 5: fork() r0 = fork() wait4(r0, 0x0, 0x3, 0x0) 01:44:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0x4040810) 01:44:46 executing program 1: clone(0x40c915, 0x0, 0x0, 0x0, 0x0) 01:44:46 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) 01:44:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x3, &(0x7f00000002c0), 0x4) 01:44:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x2, r0, 0x0) 01:44:46 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:44:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15}, 0x40) 01:44:46 executing program 5: perf_event_open(&(0x7f00000009c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:46 executing program 4: clone(0x8081000, 0x0, 0x0, 0x0, 0x0) 01:44:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 01:44:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000008980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000040)="556994a01a9f2c9f8cfee69a9269b956190ffe9736b1f43f0eef0fb78efe69b7f446891696ba0a984bc959a1533d6a9e083a970ca54cca5f1cf967800a6db841faa7829fd1f03bb44cd5332906ed7d64abc79edc829b517a89f9267d57b9118e071c2b57f4f67fdbc8613f74453dd6ae3d590fa0bdd94e199028e1677c4f29c16b02", 0x82}, {&(0x7f0000000100)="013a515a1ea80c52a47db924c5b5145ff24b73beb98fec0300746c64ae9adc1a6d9e8c215719267d4965105a2ed23f128403a0e52de38556148f0af031963167d52eb17fdfca9d1ece07b889a2518a9115c68c28d968cfa45078568f013031c2d7d206b022d145977bff261380fc65443114eb9e3114842788b20ea7a017c2474e9396c4422c94b4ccaae89d2ae8b4075418f4fa8dd84df15c89e197793371da83866443694e8581c933095a2ff578e05fb22f5af9f96e3dda82868ab2312bfa28b32a5da82dcb3154671dd7447e7c76c1cd70681e6bfefc4016e67070c12dc9c3b6faaff2c3d8c1fb87d6cc60d9b86a3fa8a1c09216ca", 0xf7}, {&(0x7f0000000200)="36f95e2043598f20733c8db85be039b249279bc0b77f29eeddb3b978318c81aaef3ae0675f8c5909fc6215bd8a39e6bb153c920748534fabcc2d40f79369fdcf41a1f10bc7bd401638ab675a994f5c29cb9649053d81a281c17ac5196b49c92c590892ad2d61919ba90ace7a7a80e2be447f932adadd51eeda7c9ec0485538f34e8486a67393269c03e232276fa07eb6c1567a1c6e1401f875cc6ecaed8d803592b2feb584a4c60143bca499597e1620f7a8e1712f15d43879fad3dd7880d79d79", 0xc1}, {&(0x7f0000000300)="5d8e7e179d3c7290cc3666c2b531c4aca77d8d3247fd512f8234c5f482bc03e30b7b5d5b60d92175840efad84c9765afd01dd97b44f919a9b71f4b111e91d7f92582c3e0fcde2a301f04", 0x4a}, {&(0x7f0000000380)="83c4bd3d3dc0102be1f4cfb20262d8843a624f0c8db353f5ca301e24f92a5e2c8a8b5af059b2d661b673a4c4a6653eb00cbb6ed0aa93c3f00904ee34ec799d8c1bef0b9cef9ea79388d429c69c6f76038dc044fd3ebbf3dcdf22d26b10c683501ebea70c1fac055a639abb7d7af44f23f3196f44477cde103296c53d91bb494e7d57c6b9f896c78230c6b77d842f89a6f2edac834443b37754970ce9bc9438bf35038846996b52291d24743daaf66cb0f9d8123306e7dbe99ccc1974f480fdb0fa0fc58e8ea36ab5cf50f7b855e87469554887f3f51024f7892ae5e34fdfae92aca5b7eb5f935155edb16f66e098dc6fc6cbd68953a33dbfae479f2b8053546c4d864fd98434f33bf5d8996ef987587e18b4efb866f0eb6dd40ebf01076a80afc8b9dfc6ce5a24bc13352f1a651010cf9c4cb924b40fad8653794c66bf2e3c0a11e674d80f5334838320ce291cadb097ea3b33642c1011e420403009004eb89d9e4d77c4262c98a69657545eedbab6bd31851d336629a967702024f464360a8bb5fb62c393f2480c5029292f3b61fdea3f891e83fa0fce72e98b6007daadfb20f0f72a2d25c5042e3d6d0255b3e8ee4052e231ead835145cf7979ef420683beb4323b3f085f5c258885c146eace8ce8237a18259b52aa64ce8f6c098370ca9cbe472b79cf5ee85f065541773638471609161295cb161d60dfa870aed7d0190845037faec5e8b1d38938bc01f021dcd67cc98e4de589cd22fad86a5cfd5bc3c8a43c55c6d469837e9bf0391f3c7fced3db3abc45a2329bbfddd89b93d153d5da8344c1cd7fd3054a7a0fd306bb2d14ccde10a0bf69cef4f13aeb340d2fb0f14335ba87970243c3bf2d8f0f2336bd9d2f200ee5a04777a2162d7b47c4e884ce740498c7676e63d8a5fda15e5cb5aa2e7174723cb0c5656e352113f5d16a9d8ed18da4a250d21a1a256471351fc7651b088e034f569e919a2e3510fd9131c36390cfef9ef5097dd8f77f6b31518e96f8b2e05b368fa6c6406f4ee4e9aa62af5364cdafd5b7bef7cacd7129f7444c8c0b29cb991f5fbdfa965da88713ed3089c44a7641aa8c2c8038af4316ec5b4e4e9b18a5d636b01d43975b904acffb5a000cec77792267282c251a180a53ffbb84a2692d3", 0x331}], 0x5}}], 0x1, 0x0) 01:44:46 executing program 3: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402) 01:44:46 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x11000, &(0x7f0000000300)) 01:44:46 executing program 5: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000002400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000240)="8b154d5955d3", 0x6}]) 01:44:46 executing program 4: clone(0x8081000, 0x0, 0x0, 0x0, 0x0) 01:44:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x46, 0x0, "b585a3c7b58272a88a419a5d794da2ce1814eca200007b09d1ef45ec1a437bbb86f2562a2b4d0e8033e8d11eb6c85dde116c644afc56ab8d683b003fa21c0343f7d6007c0200c7d6ee0200"}, 0xd8) 01:44:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000200)) 01:44:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4020940d, 0x0) 01:44:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004c40)={&(0x7f0000003340)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x4040990) 01:44:46 executing program 4: clone(0x8081000, 0x0, 0x0, 0x0, 0x0) 01:44:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) 01:44:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xf0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000829bd7000fcdbdf25170000000c000600030000000300000008000300", @ANYRES32, @ANYBLOB="0c00060002000000000000ff610000000000000003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4094}, 0x40000) 01:44:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="0c94f00c89f6be7e12be020b989b56598d5340c1c61b72612d8c412ec6ca5a5003eab0dd7a358142ec7472bbbcda68df9399c5533c1895040734cf65ca80912fc0d4492589d59db3d9ba799b6f5bcbdd7f53a32c8be407ad7901a2189035783f605ba8c1d05ef6714586819b11abde72ee135a1e2edb0710d215d25a9c7181c91567c8699aae5b3fa638e66dfde37d6f636f26871f508003e1ac427bfb360ac0cdc6d2c3d8632cbf9d0ae2c57a3d33fc85def16a54bb5027692dad01c1944ed5097fd3c568655cb4ea8510910cb8bc37a8476141084ce6728058ef112a0e4530468c1f87d8598cc337ca72cc7bc69fbebb3ee48b944bef3f198406846971", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x30}, 0x400c0) 01:44:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004c40)={&(0x7f0000003340)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x0) 01:44:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc020660b, 0x0) 01:44:46 executing program 4: clone(0x8081000, 0x0, 0x0, 0x0, 0x0) 01:44:46 executing program 5: keyctl$set_reqkey_keyring(0x10, 0xfffffffb) 01:44:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 01:44:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x30}, 0x400c0) 01:44:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8993, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:46 executing program 5: keyctl$set_reqkey_keyring(0x10, 0xfffffffb) 01:44:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) 01:44:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x30}, 0x400c0) 01:44:46 executing program 1: keyctl$set_reqkey_keyring(0x2f, 0x0) 01:44:46 executing program 5: keyctl$set_reqkey_keyring(0x10, 0xfffffffb) 01:44:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000000)={0x0, 0x0, "96faab"}) 01:44:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000080004"], 0x34}}, 0x0) 01:44:46 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 01:44:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="28c6b3147f1d9ce34ae7f0615ff36824c8fb89db6fc3f9af22ef5e110cfb7a53756dcfcf1c1161971ae0a3239ef704de48343a3eb09b156a46e68c08f86e202f70c20e5ad5301cb59d18d560366b2ce1a55b738b3125676fd221ffc05de0114085b44fbc550357d77b7281756ca4ab399e9850409f7a4705477c230ea776f91bbd025edd7e09744cd77514bbbd5071eb1c7a86f5cf4803c2345ea8a15f0095c63dd9aa9ad6f0f0b71926a83dedaec4605904042193516da601b512c8d1a9760a4c1c18f108c10e13060a806443d70c4a4a9817add174a013a0d46e7836d4c3f899b5a108ba5e9b9476ade91967b2e98f76abacb2cac441f386f9c95e", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x30}, 0x400c0) 01:44:46 executing program 5: keyctl$set_reqkey_keyring(0x10, 0xfffffffb) 01:44:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 01:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004c40)={&(0x7f0000003340)={0x2, 0x4e20, @private=0x1000000}, 0x10, 0x0}, 0x4040990) [ 1037.174455][T26427] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1037.210051][T26432] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 01:44:47 executing program 4: perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 0: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xff, 0x7fb, 0x0) 01:44:47 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000080), 0x40) 01:44:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x2, 0x0) 01:44:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96faab"}) 01:44:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="000829bd7000fcdbdf25170000000c000600030000000300000008000300", @ANYRES32, @ANYBLOB="0c00060002000000000000ff610000000000000003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4094}, 0x40000) 01:44:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004c40)={&(0x7f0000000100)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @rr={0x7, 0x1b, 0x0, [@dev, @empty, @multicast2, @broadcast, @private, @remote]}, @lsrr={0x83, 0x3}]}}}], 0x40}, 0x0) 01:44:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x20000106) 01:44:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a", 0xb}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8}, 0x400c0) 01:44:47 executing program 5: keyctl$set_reqkey_keyring(0x4, 0xfffffffd) 01:44:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8942, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:47 executing program 4: keyctl$set_reqkey_keyring(0x4, 0x0) 01:44:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 5: keyctl$set_reqkey_keyring(0x4, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0xee00) 01:44:47 executing program 0: pipe2(&(0x7f0000000080), 0x0) pselect6(0x40, &(0x7f0000000240)={0x9}, 0x0, 0x0, &(0x7f0000000380), 0x0) 01:44:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5460, 0x0) 01:44:47 executing program 5: keyctl$set_reqkey_keyring(0xb, 0x0) 01:44:47 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 1: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8921, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0xb, 0x4) 01:44:47 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 01:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 01:44:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5451, 0x0) 01:44:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}}, 0x0) 01:44:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) 01:44:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, "96faab"}) 01:44:47 executing program 2: socket(0x15, 0x5, 0xfffffff9) 01:44:47 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xc0980) 01:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 01:44:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x8) 01:44:47 executing program 0: socket(0x29, 0x2, 0x20) 01:44:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 01:44:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) [ 1037.811324][T26501] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:47 executing program 5: r0 = socket(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10f, 0x85, 0x0, 0x0) 01:44:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 01:44:47 executing program 3: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x10800, &(0x7f00000005c0)) 01:44:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 01:44:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$rose(r0, 0x0, 0x0, 0x0) 01:44:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x0, 0x0, 0x0}) 01:44:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8936, 0x0) 01:44:47 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10f, 0x5, 0x0, 0x0) 01:44:47 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x25]}}]}) 01:44:47 executing program 5: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000080)) 01:44:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x4, 0x1}, 0xc, &(0x7f0000000180)={0x0, 0xfce8}}, 0x0) 01:44:47 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10f, 0x82, 0x0, 0x0) 01:44:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a6", 0x98}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8}, 0x400c0) 01:44:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, "96faab"}) 01:44:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:47 executing program 3: setregid(0xffffffffffffffff, 0xee00) getresgid(&(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000080)=0x0) setregid(0x0, r0) 01:44:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x5421, 0x0) 01:44:47 executing program 2: socketpair(0x23, 0x2, 0x0, &(0x7f00000000c0)) 01:44:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8927, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:47 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 01:44:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/76, &(0x7f0000000080)=0x4c) 01:44:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)='c', 0x1}], 0x1}, 0x0) 01:44:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x3, &(0x7f00000001c0), 0x4) 01:44:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0xbf61bf9e4cf126d3}, 0x14}}, 0x0) 01:44:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x890c, 0x0) 01:44:48 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvme-fabrics\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 01:44:48 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x541b, 0x0) 01:44:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) 01:44:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x0, @loopback, 0x0, 0x0, 'lblcr\x00'}, {@multicast1}}, 0x44) 01:44:48 executing program 2: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8901, 0x0) [ 1038.405552][T26572] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1038.465327][T26578] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 01:44:48 executing program 4: r0 = socket(0x1e, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 01:44:48 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x5000, 0x0) 01:44:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2, 0x0, 0x700}}) 01:44:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) 01:44:48 executing program 2: mknodat(0xffffffffffffffff, 0x0, 0x9024, 0x0) 01:44:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) 01:44:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x10001, 0x4, 0x2}, 0x40) 01:44:48 executing program 1: clock_getres(0x6bc3f16cf74423b3, 0x0) 01:44:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="0c94f00c89f6be7e12be020b989b56598d5340c1c61b72612d8c412ec6ca5a5003eab0dd7a358142ec7472bbbcda68df9399c5533c1895040734cf65ca80912fc0d4492589d59db3d9ba799b6f5bcbdd7f53a32c8be407ad7901a2189035783f605ba8c1d05ef6714586819b11abde72ee135a1e2edb0710d215d25a9c7181c91567c8699aae5b3fa638e66dfde37d6f636f26871f508003e1ac427bfb360ac0cdc6d2c3d8632cbf9d0ae2c57a3d33fc85def16a54bb5027692dad01c1944ed5097fd3c568655cb4ea8510910cb8bc37a8476141084ce6728058ef112a0e4530468c1f87d8598cc337ca72cc7bc69fbebb3ee48b944bef3f198406846971", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d921749361", 0x6f}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8}, 0x400c0) 01:44:48 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) 01:44:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x29, 0x2, 0x0, 0x0) 01:44:48 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10f, 0x88, 0x0, 0x0) 01:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf25040000000c000f00030000000000000006001bf0"], 0x50}}, 0x0) 01:44:49 executing program 0: keyctl$set_reqkey_keyring(0x16, 0x2) 01:44:49 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14}, 0x14}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340)='tmpfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0xaaaaaaaaaaaabb6, &(0x7f0000001840)=[{&(0x7f00000003c0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f00000013c0)="0f23d8284ec53ee5534ddd7fea82d9f7c49654b870b6801281490ee880dc7b817dc33357dba3b9417dfa244ad06906fdb459fbddcd5803a384b6b491fe054eebe1becbf25385227679cf28d070bf10cf188c6df593ec3edb0e670470c1772fa2b016c8a8f9500fb595ae49c989bfc3cbbf73c2e1b2cc01c08519381f33911a2127c3f8bce8bd4124a8c63a2614908cbd74fb38650a703f7c7de1734705b159f432684f08892379f13cb3e10a54ee0a5b8a4580481452dfb599806b974659b4a0d2d9a6faaefe750634067301d0366399fe12fd478d50b93888426750fbf4b9be7b36", 0xe2, 0x1f}, {&(0x7f00000014c0)="258914f0e26ffe2e0f8b96d7d80afd6678659591ae0df67345d30c1a255321c691f5fecf819c0c2694fc9685f88f17d851217970a43b61c8c9b69e08e411b42162c3a8ef62ac4e9873b5bc2374c4b9369c574b830c6f5bfbc7960849b8b38691b17cb5fc3213b34ff4775911136d57555449c0573ee64b125b37e0c1366f619ee5b3516be7f0579addc880606b17a5c2053aad6d25", 0x95, 0x6}, {&(0x7f0000001580)="db1a1a1802ac42188f97e3790306799dc4d991e598c1e02798f2860576f982557bdcc1af3ddebfb1c80f377badfb65ef71dddbfa203e40309fc05cb2050a60e9cc2267d195ec6a61dcb72aeb89bb93b57ec08f090ab8ec83a117fd5525582df535854bf227bf4451ce3132ed101121399b30e8dc15b664ffe6", 0x79, 0x5}, {&(0x7f0000001600)="9d68a1c0dea69f621ab8a487552c8fbef80737c6374cdf0ad6e7065e", 0x1c, 0xffffffffffff8001}, {&(0x7f0000001640)="99fe29bb4e141f27de9d98e8ec982aa0138354a1038748eccac17a667aafeda07d5e1bd8d38c3e1c0d2411eebd8466a1fb980b55ecdb9dbab63f65614bd73fd722b81bd53a048312b8f242807e491ec22fd3e8ab24ae768082c1dd", 0x5b, 0x9}, {&(0x7f00000016c0)="217fc62ccafb32a5fe92ceac1707fb2dfa4d62d6cc8928f0169302625557d2b03f25607c9863375d64e3e13270b40d6261ded7e074fe0a1a851f26a484e0020cef12833d65d20b216ee65b870526078b89a0b0e6d446fdb75e45fbb51e9a44a9f79d4f625f9597a97316f893f8d918398337803a76338b13754f11f23004c0bf8a2c7d49e909bf57b61ed33906385a4035f35f9e3554a196f2ff7a39976eaf7908e9e54eecaa92b57b9b9b", 0xab, 0x6}, {&(0x7f0000001780)="178819da7ca34cf77d12213f91f5f352d01212dec4a2cc78ccf31582312b6b114b195f4b36327733b44e7a65717c34187b80d73340aece7d3a9cf8b847c7f37d9e04ba221a9c04eda1e00cc6b291803643976333a4f686979cd847def24d1a7d", 0x60, 0x8001}, {&(0x7f0000001800)="7f28cd042d41ad9c574d269a3c5e6de957ac16ae11968b38bbb379246ecdc681c7e5c2", 0x23, 0x4}], 0x120400, &(0x7f0000001a80)=ANY=[@ANYBLOB="6e72400739417e964d67000037ea", @ANYRESHEX=0xee00, @ANYBLOB=',nr_blocks=1521-g0,obj_role=-@:,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB=',smackfsfloor=-,dont_measure,subj_type=,\x00']) 01:44:49 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00', r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}]}, 0x1c}}, 0x0) 01:44:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) [ 1039.312721][T26610] __nla_validate_parse: 1 callbacks suppressed [ 1039.312746][T26610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.337699][T26612] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@local, @ipv4={[], [], @loopback}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404600e0}) 01:44:49 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x410282, 0x0) 01:44:49 executing program 5: keyctl$set_reqkey_keyring(0x2, 0xfffffffb) 01:44:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 01:44:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)='o', 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000100)="fa", 0x1}], 0x1}, 0x0) 01:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) 01:44:49 executing program 1: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/timers\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000) 01:44:49 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 01:44:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 01:44:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 01:44:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8982, 0x0) 01:44:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8922, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:50 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000004c0)) 01:44:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, "96faab"}) [ 1040.210348][T26645] ip6_vti0: mtu less than device minimum 01:44:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x88, 0x2, 0x0, 0x0) 01:44:50 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0xf) 01:44:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 01:44:50 executing program 1: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:50 executing program 3: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) 01:44:50 executing program 5: bpf$MAP_CREATE(0x6, 0x0, 0x2) 01:44:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000013c0)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}, 0x18) 01:44:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, 0x0, 0x0, 0x0, 0x8c26}}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11cbd2e02be6bf3fa60f3ca2c479c2d04cba368a0caf6e80"], 0x128}, 0x0) 01:44:50 executing program 1: r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xa0db]) 01:44:50 executing program 1: keyctl$set_reqkey_keyring(0x4, 0xffffffffffffffff) 01:44:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00', r0) 01:44:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000180)) 01:44:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:44:50 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 01:44:50 executing program 1: r0 = socket(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 01:44:51 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) 01:44:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000067"], 0x24}}, 0x0) 01:44:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 01:44:51 executing program 1: keyctl$set_reqkey_keyring(0x2, 0x10000000) 01:44:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006"], 0x24}}, 0x0) 01:44:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96faab"}) 01:44:51 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10a6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000100)="fa", 0x1}], 0x1}, 0x0) 01:44:51 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0xff, @loopback, 0x4a24, 0x1, 'lblcr\x00', 0x4, 0x9, 0x61}, {@multicast1, 0x4e20, 0x2000, 0xfffffffd, 0x4, 0x9294}}, 0x44) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x2490, 'F_r', 0x1}) 01:44:51 executing program 3: r0 = socket(0x23, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 01:44:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x24}}, 0x0) 01:44:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8932, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) [ 1041.541514][T26714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1041.560223][T26720] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:18980 [ 1041.578984][T26720] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:18980 01:44:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000000)={0x0, 0x0, "96faab", 0x3}) 01:44:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @private0, @private1, 0x0, 0x4, 0x1, 0x500, 0x4, 0x0, r2}) 01:44:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:44:51 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffff19, 0x222900) [ 1041.632789][T26727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:44:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0189436, 0x0) 01:44:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="0c94f00c89f6be7e12be020b989b56598d5340c1c61b72612d8c412ec6ca5a5003eab0dd7a358142ec7472bbbcda68df9399c5533c1895040734cf65ca80912fc0d4492589d59db3d9ba799b6f5bcbdd7f53a32c8be407ad7901a2189035783f605ba8c1d05ef6714586819b11abde72ee135a1e2edb0710d215d25a9c7181c91567c8699aae5b3fa638e66dfde37d6f636f26871f508003e1ac427bfb360ac0cdc6d2c3d8632cbf9d0ae2c57a3d33fc85def16a54bb5027692dad01c1944ed5097fd3c568655cb4ea8510910cb8bc37a8476141084ce6728058ef112a0e4530468c1f87d8598cc337ca72cc7bc69fbebb3ee48b944bef3f198406846971", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, [], [@hao={0xc9, 0x10, @remote}]}}}], 0x48}, 0x400c0) 01:44:51 executing program 4: r0 = fork() r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 01:44:52 executing program 1: r0 = socket(0x29, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 01:44:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x24}}, 0x0) 01:44:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @private0, @private1, 0x0, 0x4, 0x1, 0x500, 0x4, 0x0, r2}) 01:44:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)='Y') 01:44:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa}, 0x10) 01:44:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8933, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) 01:44:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)="28c6b3147f1d9ce34ae7f0615ff36824c8fb89db6fc3f9af22ef5e110cfb7a53756dcfcf1c1161971ae0a3239ef704de48343a3eb09b156a46e68c08f86e202f70c20e5ad5301cb59d18d560366b2ce1a55b738b3125676fd221ffc05de0114085b44fbc550357d77b7281756ca4ab399e9850409f7a4705477c230ea776f91bbd025edd7e09744cd77514bbbd5071eb1c7a86f5cf4803c2345ea8a15f0095c63dd9aa9ad6f0f0b71926a83dedaec4605904042193516da601b512c8d1a9760a4c1c18f108c10e13060a806443d70c4a4a9817add174a013a0d46e7836d4c3f899b5a108ba5e9b9476ade91967b2e98f76abacb2cac441f386f9c95e", 0xfc}, {&(0x7f0000000280)="568d84fddbec8d50ee731bb295ac29c709c7403049e8dfe2ac51c6e937869d590de4ae44ebb2f296abc1b6fb44710351f4bfed3c2eb2554c8a7175bb636f13e74ca8ba971eafa1ba1707a357358b526a639f7422c9cc32b79972c65ef23030702d88541a15bffd4e9c7bcd70b67299dfd2fcb59962e0bd4228d1d07ae04d84defa2150e1a6596b062c9127054ee65fc71ce96d46ed53576e4ea0d4f5d88f1b161a836e8dc3a45cc1af5219efb29c1ab4c4787233eac6e3d39a", 0xb9}, {&(0x7f0000000340)="40916f8351842c943d47a675082256e800037fda3b1d40c5acadba6f5a3bcf95a8e7c8388d1f27c4a0fa49609163e796bde94c812861fdc56569d53a1a19882ec39dcd323d29a53708e35de9facbb163d8cce22756a3cbd1a7d17f93bbd2d8d4bef7bde9374e1caf1c8eac3475b7109fc8efe021c4f966a16c42eadcf642717c55c4e98af66cde6bb4fd6dd5aff872718fb8eff8fd9d35be5122009f", 0x9c}, {&(0x7f0000000400)="2fde49c94e922a5288a2e7691601806328bde59954382911308ad8b8ad708cdadf7db1ecec543fcc84b57342555d0874f318d85162272e5c8e91416ed64d121e30febd068e38def8c71b1e700d0c6675342c44bcfcbb76f7f9bee80bcc94d152d94d93ad5b3978c72e88ed1ebb4f0df80c08e53da822ead56d34b88eacbc8545659077fd9a983d7b1e43b5210647d0508a53f859b45407a61c", 0x99}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000000c0)="a61bc5281a6e0f7337c2956ac0f1aaae5faddfbf251172438a3035f55e7f2af404eadd02588bf5b3b2b8d66c0d71d058264199de7db45b7e0ab437676a94d739cf695bfb24e1cd91275b9306c4caf2c023bce0e372221fdb3ab83e00d93105f899dbd2f028b139eaa3a7d9217493613a", 0x70}, {&(0x7f00000005c0)="999d401dc8e8515242e22a72", 0xc}, {&(0x7f0000000600)="2fdc2598f147213282772b1eb53ecd7867328a8f7c039f9f87da3fcd5966a5e1a3dce33a0bf94e8bad2ff9a4e070c5394453905224bd3b40a0169d3dd33cf27720489d859fba937f36a3a8fd64d78ae2fb834dfeb1ec139741", 0x59}], 0x8}, 0x400c0) 01:44:52 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/bus/input/handlers\x00', 0x0, 0x0) 01:44:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @private0, @private1, 0x0, 0x4, 0x1, 0x500, 0x4, 0x0, r2}) 01:44:52 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind$vsock_stream(r0, 0x0, 0x0) [ 1042.423399][T26753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1042.461922][T26761] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:44:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd}, 0x40) 01:44:52 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000180)=""/184, 0x28, 0xb8, 0x1}, 0x20) 01:44:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @private0, @private1, 0x0, 0x4, 0x1, 0x500, 0x4, 0x0, r2}) 01:44:52 executing program 4: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 01:44:52 executing program 3: r0 = fork() prlimit64(r0, 0x0, &(0x7f0000000000)={0xba0, 0xffffffffffffff91}, &(0x7f0000000040)) 01:44:52 executing program 5: mq_open(&(0x7f0000004c80)='\xdc\x00', 0x0, 0x0, &(0x7f0000004cc0)) 01:44:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_HELP_NAME={0xffffffffffffffe9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6}]}, 0x38}}, 0x0) 01:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r0, 0x0, 0x0) 01:44:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0xa, 0x6, 0x101}, 0x14}}, 0x0) 01:44:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 01:44:52 executing program 4: shmget$private(0x0, 0x1000, 0x78000924, &(0x7f0000ffc000/0x1000)=nil) 01:44:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) [ 1042.630805][T26781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00', r0) 01:44:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_HELP_NAME={0xffffffffffffffe9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6}]}, 0x38}}, 0x0) 01:44:52 executing program 0: pipe2(0x0, 0x800) r0 = fork() tkill(r0, 0x3a) 01:44:52 executing program 4: timer_create(0x1, &(0x7f0000000540)={0x0, 0x0, 0x1}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000cc0)={{0x77359400}}, &(0x7f00000005c0)) 01:44:52 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x81, 0x0) 01:44:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_HELP_NAME={0xffffffffffffffe9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6}]}, 0x38}}, 0x0) [ 1042.732538][T26800] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:52 executing program 5: shmget$private(0x0, 0x2000, 0x2c000d36, &(0x7f0000ffb000/0x2000)=nil) 01:44:52 executing program 0: setrlimit(0x0, &(0x7f0000000440)) 01:44:52 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f0000000100)={0x0, r0/1000+60000}) 01:44:52 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2a8009, &(0x7f0000002400)) 01:44:52 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) [ 1042.812831][T26812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 01:44:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_HELP_NAME={0xffffffffffffffe9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6}]}, 0x38}}, 0x0) 01:44:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 01:44:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={0x0}}, 0x0) 01:44:52 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x82240, 0x0) 01:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 01:44:52 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[], [{@audit='audit'}]}) [ 1042.938000][T26827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, 0x0, 0x0, 0x40002006, 0x0) 01:44:52 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x989680}) 01:44:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0x7, "cb0e822109"}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@multicast1}]}]}}}], 0x58}}], 0x1, 0x0) 01:44:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4044040) 01:44:52 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) [ 1043.015392][T26836] tmpfs: Unknown parameter 'audit' [ 1043.034336][T26836] tmpfs: Unknown parameter 'audit' 01:44:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 01:44:52 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/90) 01:44:52 executing program 3: setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)={'raw\x00', 0x2, [{}, {}]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00)='nl80211\x00', 0xffffffffffffffff) 01:44:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000340)='@', 0x1}], 0x3, &(0x7f0000000780)=[@hoplimit_2292={{0x14}}], 0x18}, 0x400c0) 01:44:52 executing program 5: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 01:44:52 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) 01:44:52 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0xc5ac}], 0x0, 0x0) 01:44:52 executing program 3: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0xffffff1f, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:44:52 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000600)) 01:44:52 executing program 4: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x800000000000000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:44:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {}, {}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000000)='veth0\x00'}) 01:44:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 01:44:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 01:44:53 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x0) 01:44:53 executing program 1: pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) 01:44:53 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1043.248814][T26869] fuse: Bad value for 'fd' [ 1043.255367][T26869] fuse: Bad value for 'fd' 01:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 01:44:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0x7, "cb0e822109"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x82, 0x4, ';:'}]}}}], 0x50}}], 0x1, 0x0) 01:44:53 executing program 0: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x14, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:44:53 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 01:44:53 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280), 0x0, 0xc5ac}], 0x0, &(0x7f0000002400)={[{@uid={'uid'}}, {@mode={'mode'}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@audit='audit'}, {@uid_gt={'uid>'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 01:44:53 executing program 1: ioperm(0x0, 0x20, 0x0) 01:44:53 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) [ 1043.383917][T26888] fuse: Bad value for 'fd' [ 1043.389488][T26888] fuse: Bad value for 'fd' 01:44:53 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280), 0x0, 0xc5ac}], 0x0, &(0x7f0000002400)={[{@uid={'uid'}}, {@mode={'mode'}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@audit='audit'}, {@measure='measure'}, {@uid_gt={'uid>'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 01:44:53 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 01:44:53 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x1f7}], 0x0, &(0x7f00000000c0)) 01:44:53 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)=')', 0x1}], 0x0, 0x0) 01:44:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f00000001c0)='E', 0x1}, {&(0x7f0000000280)=')', 0x1, 0xc5ac}], 0x2a8009, &(0x7f0000002400)) 01:44:53 executing program 0: timer_create(0x2, 0x0, &(0x7f0000001080)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 01:44:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 01:44:53 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00', 0xffffffffffffffff) 01:44:53 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000002400)={[{@mode={'mode'}}]}) 01:44:53 executing program 0: write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) 01:44:53 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) 01:44:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000240)) 01:44:54 executing program 4: r0 = getpid() process_vm_writev(r0, &(0x7f0000002280)=[{&(0x7f0000003b40)=""/175, 0xaf}], 0x1, &(0x7f0000003880)=[{&(0x7f0000002300)=""/82, 0x52}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 01:44:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 01:44:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x8}, 0x0, &(0x7f0000000400)={0x6}, 0x0, 0x0) 01:44:54 executing program 0: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 01:44:54 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001200)=[{0x0, 0x0, 0x10000}, {0x0}]) 01:44:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', r0) 01:44:54 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xe24e9a4bb70d2d8) 01:44:54 executing program 1: syz_read_part_table(0x0, 0x3, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000080), 0x0, 0xbbf}, {&(0x7f0000001180), 0x0, 0x2}]) 01:44:54 executing program 3: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 01:44:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000240)) 01:44:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=ANY=[@ANYBLOB="38000000010201"], 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002006, &(0x7f0000001980)) 01:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000400)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:44:54 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 01:44:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000240)) 01:44:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004840)=@newtfilter={0x43c, 0x2c, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x43c}}, 0x0) 01:44:54 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000640)={0x0, 0x1, 0x0, "ca3bde41d3173c67d3558aff21aa483015e5e56b164b9f76053542f1df8f2342"}) 01:44:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x90) [ 1044.446060][T26945] fuse: Bad value for 'fd' [ 1044.453749][T26945] fuse: Bad value for 'fd' [ 1044.466446][T26946] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1044.483108][T26946] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 01:44:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr}) 01:44:54 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)) 01:44:54 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/73, 0x49) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/127, 0x7f}], 0x4, 0x1, 0x20) sendfile(r1, r2, 0x0, 0x401ffc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x7d9c0b00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x400}]}, 0x3c}}, 0x0) fallocate(r0, 0x0, 0x0, 0x80019e) setxattr$security_ima(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@md5={0x1, "7dbd3728854e347629abf773cc3bb9da"}, 0x11, 0x1) 01:44:54 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x75eed1e, 0x4, {0x1, @raw_data="d23ae12999cd65a7598f1a5e9c01c2631322d4d4f55883417b5a61a63daf153ab2b23216ad5665a18e74ec6cbe4baddade11f37886133e177bf580c96a8d67a51b0797e7fee44de2bfa4d24b80b4bd235e5f1bb9b2a684ee19fb44611d5f56e256eca40a6ae1206e8c761a48db73d5109b9d294cc7220aa3dfe9f62e0989eb69b8bf357687c06d460cedf523a59e560b773cc548d65155b658387f709162def855a82da27e718ee49b1dbd94806e4d6ff0a651f1007b679bdbce1ac477a6a3528b49f67c76dc0230"}}) 01:44:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000240)) 01:44:54 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) statx(r0, &(0x7f0000003a40)='\x00', 0x1000, 0x0, &(0x7f0000003a80)) 01:44:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r1, 0x11, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x11f08) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81, 0x0, 0x0, 0x2, 0x0, 0x2, 0x20080, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x2, 0xdded, 0x8, 0xffffffffffffff03, 0x9, 0x3499}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x2) 01:44:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1}}) 01:44:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x541b, 0x0) [ 1044.726775][ T36] audit: type=1800 audit(6971967894.413:106): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=14067 res=0 errno=0 01:44:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mtu(r0, 0x29, 0x3a, &(0x7f0000000040), 0x4) 01:44:54 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='/,((\xe0:-*][\x00') 01:44:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) 01:44:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)) 01:44:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0) [ 1044.767695][ T36] audit: type=1804 audit(6971967894.453:107): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir872546285/syzkaller.jtHWrI/2210/file0" dev="sda1" ino=14067 res=1 errno=0 01:44:54 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 01:44:54 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/capi/capi20\x00', 0x0, 0x0) syz_io_uring_setup(0x45f3, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:44:54 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f0000000140)) [ 1044.820878][T26989] binder: 26985:26989 ioctl c018620c 20000100 returned -22 [ 1044.855825][T26994] binder: 26985:26994 ioctl c018620c 20000100 returned -22 01:44:54 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x40044160, 0x0) 01:44:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:44:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@data_err_abort='data_err=abort'}]}) 01:44:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0) 01:44:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0x268, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'ip_vti0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@loopback, @loopback, [], [], 'veth1_macvtap\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "b78fa4e045e5be0eea071d75a99245d6de5cc7021d0a86b0f9ccbc1b0c3cb0c4181b084781aaa05a9416de135dfcf3daae26946a1fe89d44a19c4807156af305"}}}, {{@ipv6={@ipv4={[], [], @broadcast}, @private2, [], [], 'vlan0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 01:44:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 01:44:54 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) 01:44:54 executing program 1: r0 = gettid() ptrace(0x10, r0) 01:44:54 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5460, 0x0) 01:44:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 01:44:54 executing program 5: add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 01:44:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x11, 0x0, 0xfffc) sendfile(r1, r2, 0x0, 0x11f08) 01:44:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x20) 01:44:54 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xfffffff8, 0x4) 01:44:54 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x8001, 0xffff7d5c, 0xffffffff], [{0x80000000}]}) 01:44:54 executing program 2: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000c40)) 01:44:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) connect$can_j1939(r0, &(0x7f0000000000), 0x18) 01:44:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000001f80)={0x13, 0x10, 0xfa00, {&(0x7f0000005540), r1, 0x1}}, 0x18) [ 1045.184119][ T36] audit: type=1800 audit(6971967894.880:108): pid=27031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14657 res=0 errno=0 [ 1045.197311][T27036] tipc: Trying to set illegal importance in message 01:44:54 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x4144, 0x0) 01:44:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(0x0, 0x0, 0xb, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 01:44:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mtu(r0, 0x29, 0x24, &(0x7f0000000040), 0x4) 01:44:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x22) [ 1045.271405][ T36] audit: type=1804 audit(6971967894.909:109): pid=27031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir269543688/syzkaller.YUmPhG/1497/file0" dev="sda1" ino=14657 res=1 errno=0 01:44:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x7) 01:44:55 executing program 1: socketpair(0x2, 0x1, 0x54, &(0x7f0000000c40)) 01:44:55 executing program 3: clock_gettime(0x9d010000, 0x0) 01:44:55 executing program 5: syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) 01:44:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/74, 0x4a}, {0x0}, {&(0x7f0000000300)=""/127, 0x7f}], 0x3, 0x1, 0x20) sendfile(r1, r2, 0x0, 0x401ffc000) setxattr$security_ima(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@md5={0x1, "7dbd3728854e347629abf773cc3bb9da"}, 0x11, 0x1) 01:44:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x806e4590a1, 0xea005) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001480)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000080)="5300007582ffffff770200000002004e000000000000ffe6735f0000000000000000000097fb3994f65cab9c99128826e21eb5773efeb895601e81405438ee509a6cd839d0d7cc9477ecc27bc78c679019bb854a6757a924", 0x58}], 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x1, 0x100000001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x0, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4cc, 0x0, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x800, 0x5, 0x6, 0x5d, 0x8}, 0xffffffffffffffff, 0xc, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x100000003, 0x39) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 01:44:55 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)=')', 0x1, 0xc5ac}], 0x0, 0x0) 01:44:55 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @private=0xa010101}, 0x6, 0x4}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)="e1b0a0ed24ff4cdfb5c91efbe150e86e8751a773c127bf8277f962f6169165494da6a991aa599dbe673d1fdc959b2e432e989a7c15e7d09232d82be7ea4a7ae1f5e0cd44dde826c95e5fc69ac2db5d3fc11ca4284a3a1a5f1cf0c48fbd1db2885987fb2517a98cc956da271571d07beac382742466ac299e61226febe9b74c8ce7685189c1e486de93d3f3af34a34435c517080627f309a0b0a178fcba4d6c5d6e6aadf481", 0xa5}, {&(0x7f0000000140)="8705c4c1717eb12b1a48eff61d344756be91aea7ceae0dec4a76f87555f9151f28bf00cc993b1929", 0x28}, {&(0x7f0000000180)="f6c462d8322f41bbc2757589b6aeff797ca56f5636ceb82537f0c1b75c51ce130dc7036b4b842499198d459adb0f76bb5526bd3ac0a6feaf9df0527c1ff2fbe8611545a8fc85e6d31be431845deafcd0293f8eda2d763954eae2fc8ebf8e0a29ec1cefa042c22679db1ba8ccbe549acd6c31e9e2cc40e8b0ed8f4fe9a0925794897a4fa6b179cb257a66a8303624aca80de5417642b260ce6211cff28d0b1c2b23c84bad2210cd27bbfee69a983612cf1a7a5861034756bbef48a2adc779fb3a24b7e0a98b31d86c89e44e7a3e04a947a225e6bd184c11a0eb40b6df8599f16fae88a4b9dd468ac9c8f970ab9665b09aae2ed08b07a3", 0xf6}, {&(0x7f0000000280)="0bfa27c29ce45a0515905675c5be359698a4df9f366ebf210c819ce4bc25db896365711f5ebf448c3f6647d2bd2b287d4b8ca3b7ab54c0dcd8300a5b8e3f3f0a4a9f25c79fba152a964cf4ab92d9867b03dee6cb2fd30809a7658540e54de2f8554a4339c898605db7fb684dc018181f25c76195bfa81f53d48aba864d6f3a0619a7f0f2de5cfb284c83c9d2ebd11d18bc3ff4ca", 0x94}], 0x4, &(0x7f00000013c0)=[{0xa0, 0x88, 0xfc, "536c1161c0c990b0c5559e15154530bfc55ed3bb22d0a6bbd265aeb72cdbc636622b2334f820d0bc30af3b2b83105b925cbcf18ecadcf97c6a66f29dba35600ffbeae9a51de834c11cc75f1a68ad079e067cbb5f9c4f4e84ca3830e9c88363efc21da6ef55146eff577b5003317897bd235e4ae2799ada05885ca7c48c95c16c2b2621cdf4e99f84cda9c5"}, {0x90, 0x88, 0x7, "d5ca4cb97fc10b613b35ef2eeb1cdf715bd6e8e73f10f21a70a3f0fee9797e0d977e71e16aa8d543bd14610c468e4b7766d0d80a89c50e1129c102c81d852b1eb17dc6cf3e5c68f1bfe0fcfd44b16af4ba14fc3cf3af319680ff5fbd25dd90753caba31d4e7f8df42967024a3c1e4f0a740d3ff9d2953380c11f9ebbb3"}], 0x130}}, {{&(0x7f0000001580)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001700)="d9255cb31401624d39f9677d31052380268d1c00b430ce3b934a3af2c56533527f9a5ff7ed1538c1a46e1aed89ed7b68f744b27b79e986ec4f9f1cbc1c61a271af9951895e3bd1eb8e6730c2ddab386cd7c139292d3edd0681a172809294de6ff897a141a0989842841c4bca2c19ead7587a0aebbb40b69ee58b6e6357890e9e575188e5eda39eee99fd155b02f15ae5f319c4acd6e6d0c21cd1a344afb33717d18f542f53287dafa9214a7567d5fd88ad1a70b8488412f4dd32146873f1444e51aaea03c82cbf3e926788bce33f3dd309", 0xd1}, {&(0x7f0000001800)}], 0x2, &(0x7f0000001640)=[{0x70, 0x10a, 0x2, "acef2bc70326d42fb3e5a28c399787210bf34c073a0e99204acf4e132c3c8975b3ea17e4852aac2267e873cd74188f846d5641f607e2e9a4de555539b9cdf408d9a82e5c0cceb292acadfb02f683f23c9f9344a8341657075b"}], 0x70}}], 0x2, 0x4e005) openat$snapshot(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/snapshot\x00', 0x401, 0x0) 01:44:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x38) 01:44:55 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x401ffc000) fallocate(r0, 0x0, 0x0, 0x80019e) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:44:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x201, 0xb, 0x0, "d3324d8ee44a478003000000ed8c6defa550df16c166d200"}) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x974, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x40) [ 1045.563380][T27075] Cannot find add_set index 0 as target 01:44:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r2, 0x200004) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x6f007893) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 01:44:55 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x81204101, &(0x7f0000000040)) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) [ 1045.624379][T27082] Cannot find add_set index 0 as target 01:44:55 executing program 1: syz_io_uring_setup(0x7af, &(0x7f0000000080)={0x0, 0xa1a0, 0x8}, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 01:44:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 01:44:55 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/73, 0x49) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/92, 0x5c}, {0x0}], 0x3, 0x0, 0x20) sendfile(r1, r2, 0x0, 0x401ffc000) fallocate(r0, 0x0, 0x0, 0x80019e) setxattr$security_ima(0x0, &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@md5={0x1, "7dbd3728854e347629abf773cc3bb9da"}, 0x11, 0x1) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @local}, {0x0, @dev}, 0x4, {0x2, 0x0, @loopback}, 'veth0_to_team\x00'}) 01:44:55 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x401ffc000) fallocate(r0, 0x0, 0x0, 0x80019e) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r2, 0x200004) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x6f007893) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 01:44:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 01:44:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r2, 0x200004) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x6f007893) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 01:44:55 executing program 0: io_setup(0x8, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)={&(0x7f0000000080)={[0x800]}, 0x8}) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001880)=@newtclass={0x10a8, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x8, 0x2, [@TCA_ATM_HDR={0x4}]}}, @tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x1050, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x80, 0x2, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x1, 0x0, 0x0, 0x9, 0x6}, 0x7, 0xcd2, 0x1, 0x1b0f, 0x7}}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x0, 0x4, 0xfffffffd, 0xffffffdf, 0x5, 0x4, 0xeb5, 0x3, 0x8, 0x6, 0x7ad, 0x0, 0x8, 0x282, 0x0, 0x200, 0x80, 0x0, 0x7, 0xf8e, 0x0, 0x3, 0xdceb, 0x0, 0x2c, 0xcb00, 0x10001, 0xe9, 0xfffff2e6, 0x0, 0x974f, 0x0, 0x0, 0x0, 0x0, 0xffff630a, 0x0, 0xe23d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0xbf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0xfffffbff, 0x0, 0xfffffffc, 0x80000001, 0xffff0679, 0x1ff, 0x2, 0x27b6c1f6, 0x0, 0x80, 0xa6, 0x3, 0x3, 0x5, 0x400, 0x0, 0x0, 0x4, 0x6, 0x6, 0x0, 0x800, 0x0, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x26df5724, 0x0, 0x0, 0x7c89, 0x2, 0x101, 0x3c7842f2, 0x0, 0xfffffff7, 0x0, 0x3, 0xf7d4, 0xfffff000, 0x4, 0x0, 0x100, 0x6, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x76, 0x800, 0x6, 0xc00000, 0x0, 0x9, 0x0, 0xf5f, 0x2, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x8d, 0x0, 0x8, 0xb51, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x401, 0x5, 0x19d3, 0x4, 0xf3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff74, 0x0, 0x71e, 0xfffffff7, 0x977, 0x21, 0x1, 0x4, 0x1, 0x6, 0x7, 0x7, 0x2, 0x9, 0x8, 0x85, 0x4, 0x80000001, 0x800, 0x3, 0x0, 0x8, 0x3, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x5, 0x4, 0xfffffffe, 0x5, 0x0, 0x80000000, 0x3f, 0x101, 0x0, 0x3, 0x0, 0xd24a, 0x2, 0x5, 0x10000, 0xffffffff, 0x0, 0xd8, 0x80000001, 0x8, 0x7fffffff, 0x0, 0x0, 0x3ff, 0x9, 0x7, 0x7589, 0x3]}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x6, 0x2, 0x834a, 0xfffff800, 0x8, 0x20, 0x8, 0x7fffffff, 0x1, 0x2, 0x6, 0x0, 0x8, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7ff, 0x4, 0x1, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x8, 0x0, 0x0, 0xff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, 0x3, 0x0, 0xefc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff]}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x47e2, 0x0, 0x0, 0x0, 0x8]}]}}]}, 0x10a8}}, 0x0) 01:44:55 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x8001, 0xffff7d5c, 0xffffffff]}) 01:44:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c020000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000180)) 01:44:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='cpuacct.usage_sys\x00', 0x0, 0x0) fallocate(r1, 0x11, 0x0, 0xfffc) sendfile(r1, r2, 0x0, 0x11f08) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 01:44:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltclass={0x23, 0x29, 0x1, 0x0, 0x0, {}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 01:44:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xee, [], [@ra, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x10) 01:44:55 executing program 3: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="1d", 0x1) 01:44:55 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x8001, 0xffff7d5c, 0xffffffff]}) 01:44:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) 01:44:55 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x8001, 0xffff7d5c, 0xffffffff]}) 01:44:56 executing program 1: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109026a0001017442d9b9499518f9108a37c9897f80020904007f020206007e0724060000a3b8"], &(0x7f0000000a00)={0x0, 0x0, 0x24, &(0x7f00000008c0)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0xf007, 0x0, [0xff000f, 0xffc00f, 0x0, 0xff]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x445}}, {0x3e, &(0x7f0000000980)=@string={0x3e, 0x3, "5c8aad088bdcf4e258ace3d026eb4bebe6af986bef137796e042cf1f81ecd9a19f895b5c786e7ca505dde3028304dd51228b94e95d8090419372e7f0"}}]}) 01:44:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x32, 0x0, 0x0) 01:44:56 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x88000, 0x0) [ 1046.426549][ T36] audit: type=1800 audit(6971967896.110:110): pid=27167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=14021 res=0 errno=0 01:44:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80004509, 0x0) 01:44:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2}) 01:44:56 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000000c0)={0x0, [0x8001, 0xffff7d5c, 0xffffffff]}) 01:44:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) [ 1046.452447][ T36] audit: type=1804 audit(6971967896.110:111): pid=27167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir089653963/syzkaller.oLEkNZ/1748/file0" dev="sda1" ino=14021 res=1 errno=0 01:44:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f85, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb598, 0x4, @perf_config_ext={0x0, 0x5370}, 0x81c4, 0xffffffffffffff92, 0x4, 0x1, 0x3f, 0x3}, 0x0, 0x0, r0, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='ext4_es_lookup_extent_exit\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 01:44:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:56 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8002, 0x0) [ 1046.632940][ T9575] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1047.207680][ T9575] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1047.216792][ T9575] usb 2-1: can't read configurations, error -71 01:44:57 executing program 1: setresuid(0x0, 0xee00, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) 01:44:57 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x8000) 01:44:57 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 01:44:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='cpuacct.usage_sys\x00', 0x0, 0x0) fallocate(r1, 0x11, 0x0, 0xfffc) sendfile(r1, r2, 0x0, 0x11f08) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81, 0x0, 0x0, 0x2, 0x0, 0x2, 0x20080, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x40822, 0x2, 0x0, 0x8, 0xffffffffffffff03, 0x9, 0x3499}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x2) 01:44:57 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x1}) 01:44:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 5: setreuid(0xee01, 0xee01) setresuid(0x0, 0x0, 0xee01) 01:44:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) 01:44:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x200, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 01:44:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) [ 1047.672990][ T36] audit: type=1800 audit(6971967897.349:112): pid=27201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14050 res=0 errno=0 01:44:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) 01:44:57 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0045878, 0x0) 01:44:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='A', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x0, @mcast1, 0x5}, 0x1c) [ 1047.739368][ T36] audit: type=1804 audit(6971967897.379:113): pid=27201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir257491728/syzkaller.rWwcc9/2130/file0" dev="sda1" ino=14050 res=1 errno=0 01:44:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9208, &(0x7f0000000080)={0x0}) 01:44:57 executing program 0: add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:44:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001480)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000080)="5300007582ffffff770200000002004e000000000000ffe6735f0000000000000000000097fb3994f65cab9c99128826e21eb5773efeb895601e81405438ee509a6cd839d0d7cc9477ecc27bc78c679019bb854a6757a924", 0x58}], 0x2) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '[-.:#('}, {}, {0x20, '.#O#^,'}], 0xa, "38b0d7e90b34687ba727d49e4cc1aac489ab7ab51b"}, 0x2f) 01:44:57 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 5: setreuid(0xee01, 0xee01) syz_io_uring_setup(0x5fe, &(0x7f0000000140)={0x0, 0x2586, 0x3b}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 01:44:57 executing program 0: mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0) 01:44:57 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 01:44:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x8041) 01:44:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 01:44:57 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 01:44:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000240)={0x23, 0x0, 0xd6}, 0x10) 01:44:57 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 0: syz_mount_image$hpfs(&(0x7f0000000080)='hpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)) [ 1048.012572][T27238] sg_write: data in/out 1818846731/1 bytes for SCSI command 0xd4-- guessing data in; [ 1048.012572][T27238] program syz-executor.3 not setting count and/or reply_len properly 01:44:57 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x3, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 01:44:57 executing program 3: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 01:44:57 executing program 2: r0 = syz_io_uring_setup(0x36d7, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 01:44:57 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0xf088ea89a9be1014}, 0x20) 01:44:57 executing program 0: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1e) 01:44:57 executing program 5: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$hidraw(r0, &(0x7f0000000040)="8c", 0x1) 01:44:57 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:57 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "6de9dcb0d76ea66dedf1547000c4f61b288af91109df26f90200000000000000cfd314e38ee96409f931e74e6b1620ce85936cd9ad2e3c483174b773c780bdef", 0x102c}, 0x48, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000480)) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='/\xda$-%$\xfe:,)\x00', 0x0) 01:44:57 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x5, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) 01:44:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 01:44:57 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9205, 0x0) 01:44:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x3, 0x5}) 01:44:57 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0505611, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2db40e50"}, 0x0, 0x0, @userptr}) 01:44:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x11f08) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS(r3, 0x5401, 0x0) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 1: mount$9p_fd(0xe0ffff, 0x0, 0x0, 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 01:44:58 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000c40)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1f, 0x2, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) getpeername(r1, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000100)=0x80) 01:44:58 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xc2d, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:44:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000043) 01:44:58 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xed) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 3: socketpair(0x18, 0x0, 0x100, &(0x7f0000000000)) 01:44:58 executing program 5: socketpair(0x26, 0x5, 0x0, &(0x7f0000000180)) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 1048.553852][ T36] audit: type=1800 audit(6971967898.212:114): pid=27320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=14662 res=0 errno=0 [ 1048.592669][ T36] audit: type=1804 audit(6971967898.252:115): pid=27324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir089653963/syzkaller.oLEkNZ/1754/file0" dev="sda1" ino=14662 res=1 errno=0 [ 1048.688185][T27324] ================================================================== [ 1048.696286][T27324] BUG: KCSAN: data-race in lookup_fast / retain_dentry [ 1048.703140][T27324] [ 1048.705447][T27324] write to 0xffff8880264f7c00 of 4 bytes by task 27320 on cpu 1: [ 1048.713229][T27324] retain_dentry+0x1de/0x260 [ 1048.717809][T27324] dput+0x11e/0x430 [ 1048.721600][T27324] terminate_walk+0x109/0x270 [ 1048.726477][T27324] path_openat+0x18dc/0x21b0 [ 1048.731082][T27324] do_filp_open+0xd9/0x1f0 [ 1048.735484][T27324] do_sys_openat2+0xa3/0x250 [ 1048.740075][T27324] __x64_sys_open+0xe2/0x110 [ 1048.745195][T27324] do_syscall_64+0x39/0x80 [ 1048.749835][T27324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1048.755918][T27324] [ 1048.758241][T27324] read to 0xffff8880264f7c00 of 4 bytes by task 27324 on cpu 0: [ 1048.766116][T27324] lookup_fast+0x15f/0x350 [ 1048.770539][T27324] path_openat+0x47e/0x21b0 [ 1048.775206][T27324] do_filp_open+0xd9/0x1f0 [ 1048.779717][T27324] do_sys_openat2+0xa3/0x250 01:44:58 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x40, 0x0) 01:44:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:44:58 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109026a00010174"], &(0x7f0000000a00)={0xa, &(0x7f0000000880)={0xa}, 0x0, 0x0, 0x3, [{0x5, 0x0}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x0, 0x0}]}) 01:44:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001900)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x125e, &(0x7f0000001940)) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x24) [ 1048.784299][T27324] __x64_sys_open+0xe2/0x110 [ 1048.789134][T27324] do_syscall_64+0x39/0x80 [ 1048.793536][T27324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1048.799428][T27324] [ 1048.801750][T27324] Reported by Kernel Concurrency Sanitizer on: [ 1048.808990][T27324] CPU: 0 PID: 27324 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1048.817731][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.827885][T27324] ================================================================== 01:44:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:44:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8981, &(0x7f0000001800)={'tunl0\x00', 0x0}) 01:44:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x0, 0x0}) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:44:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x40) 01:44:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x200001c8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 1049.153372][ T9575] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1049.637307][ T9575] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1049.677732][ T9575] usb 6-1: not running at top speed; connect to a high speed hub [ 1049.789082][ T9575] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.799894][ T9575] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1050.081203][ T9575] usb 6-1: language id specifier not provided by device, defaulting to English [ 1050.465431][ T9575] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.474527][ T9575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.482516][ T9575] usb 6-1: SerialNumber: syz [ 1050.757089][ T9575] usb 6-1: USB disconnect, device number 45 [ 1051.512507][ T9704] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1051.946317][ T9704] usb 6-1: unable to get BOS descriptor or descriptor too short 01:45:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8}, 0x10) 01:45:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@data_writeback='data=writeback'}, {@noloccookie='noloccookie'}, {@localcaching='localcaching'}, {@discard='discard'}, {@statfs_quantum={'statfs_quantum'}}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x100000000}}]}) 01:45:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) close(r0) 01:45:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000680)) [ 1051.996888][ T9704] usb 6-1: not running at top speed; connect to a high speed hub 01:45:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000001bc0)=""/140, 0x26, 0x8c, 0x1}, 0x20) 01:45:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) close(r0) 01:45:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) [ 1052.117428][ T9704] usb 6-1: unable to read config index 0 descriptor/all [ 1052.128083][ T9704] usb 6-1: can't read configurations, error -71 01:45:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 01:45:01 executing program 3: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="40000000010400000000000000ffff7f6824", 0x12, 0x400}], 0x0, &(0x7f0000000380)) 01:45:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) close(r0) 01:45:01 executing program 5: clock_settime(0x0, &(0x7f0000000240)) 01:45:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000480)=""/183, 0x32, 0xb7, 0x1}, 0x20) 01:45:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:01 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) close(r0) 01:45:01 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="924bc0ec331b", 'dummy0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000140)={0x18, 0x0, {0x0, @link_local, 'batadv_slave_0\x00'}}) 01:45:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 5: bpf$OBJ_PIN_MAP(0x10, &(0x7f00000035c0)={0x0}, 0x10) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000001140)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @dev, {[@timestamp_addr={0x44, 0x4}]}}}}}) 01:45:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:02 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$packet(r0, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7af, &(0x7f00000005c0)) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x5207, 0x0) 01:45:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 01:45:02 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9}, 0x40) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@rgrplvb='rgrplvb'}]}) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/psched\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0xe00, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1}, 0xfc) socket$kcm(0x29, 0x0, 0x0) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:02 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x5, 0x4) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 3: socketpair(0x15, 0x5, 0x4, &(0x7f0000000a40)) 01:45:02 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f0000000040)={0x80000000, 0x0, "a22195ee07493c6b1433561ab5b80523fa738d632edec6a1f7d1c163306b72c7"}) 01:45:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 01:45:02 executing program 2: ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x0, 0x0, "fa152107011e"}}) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x2}, 0x1c) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) getpid() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) 01:45:02 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14507e, 0x0) lseek(r1, 0x0, 0x4) 01:45:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:02 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r0, 0x0, &(0x7f0000000200)) 01:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) [ 1053.331644][T27572] Cannot find add_set index 0 as target 01:45:03 executing program 2: ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:03 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@mode={'mode'}}, {@uid={'uid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x39, 0x8]}}}}]}) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) [ 1053.394449][ T36] audit: type=1800 audit(6971967903.018:116): pid=27582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15427 res=0 errno=0 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) [ 1053.462734][ T36] audit: type=1800 audit(6971967903.018:117): pid=27584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15427 res=0 errno=0 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0xee}}}) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) [ 1053.529373][T27593] tmpfs: Bad value for 'mpol' [ 1053.535011][T27593] tmpfs: Bad value for 'mpol' 01:45:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 2: ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14507e, 0x0) lseek(r2, 0x0, 0x4) 01:45:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x67) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:03 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x67) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1) 01:45:03 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000040)=0x67) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'geneve1\x00', &(0x7f0000001900)=@ethtool_per_queue_op={0x4b, 0xe}}) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 01:45:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) 01:45:03 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 01:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed80700e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f4a7c0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77a74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea080000000000000026abfb07671923618d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d564beb6d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae6b0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b09000000000000005ac15fc2288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7433282830689da6b53b263339863297771429d120000003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7060000000000000001bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f967ce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6b70ebc660309e1e245b0fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f7781f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000000000000000000000000057d77480e0345e67a96413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4a07474e6e5490a7d3c34a1658228b6675bd837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc76cbcd74dc07748f974e6eaa837447d226d23dcd55cb796da2dfb714a81e1dd5ff41ce7e6faed94fc39acfb3fd25dfa8116a1cc652546141cb1a9e3c574d40c979de4d5ee34d85666f87f061a572fe3dbf510a5b8244121bc060a002eed8fcac7a9076aa7bfdb22dc2b10227d6b81513bf531fbc8625ddbe06e639105274b68ef39dd4ee648a87ee8c94df0c517cd20ef5054fba45525812f8fcc1486be0d1af5f522d7b03a054efbdecc93df3e14a2a74c87a409ba3853f251b0e5f52b871e8c639872d0"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) 01:45:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed80700e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f4a7c0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77a74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea080000000000000026abfb07671923618d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d564beb6d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae6b0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b09000000000000005ac15fc2288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7433282830689da6b53b263339863297771429d120000003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7060000000000000001bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f967ce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6b70ebc660309e1e245b0fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f7781f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000000000000000000000000057d77480e0345e67a96413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4a07474e6e5490a7d3c34a1658228b6675bd837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc76cbcd74dc07748f974e6eaa837447d226d23dcd55cb796da2dfb714a81e1dd5ff41ce7e6faed94fc39acfb3fd25dfa8116a1cc652546141cb1a9e3c574d40c979de4d5ee34d85666f87f061a572fe3dbf510a5b8244121bc060a002eed8fcac7a9076aa7bfdb22dc2b10227d6b81513bf531fbc8625ddbe06e639105274b68ef39dd4ee648a87ee8c94df0c517cd20ef5054fba45525812f8fcc1486be0d1af5f522d7b03a054efbdecc93df3e14a2a74c87a409ba3853f251b0e5f52b871e8c639872d0"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) 01:45:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640100001700010026bd7000fddbdf25fc020000000000000000000000000000000004d56c00000020010000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000bb4e2100034e200000020020a05c000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000640101000000000000000000000000004e2204014e2100070a"], 0x164}}, 0x0) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) 01:45:04 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) [ 1054.524668][T27723] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 01:45:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000001040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000001080)={0x0, "2b5f243a483e251861dbfee9507a9a4c7dc9476e87ae509558a3e5c76d64d9997603ad40fae26d60be4d3a17bbfc582ecf9f10fe7cf41addf8ffc9485b584072"}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r0, r2) 01:45:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 01:45:04 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000009c0)='/dev/binder#\x00', 0x0, 0x0) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 01:45:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x60, 0x0, &(0x7f0000000580)=[@increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:45:04 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xa, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:04 executing program 4: syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x7a00, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)) 01:45:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)) 01:45:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000009c0)='/dev/binder#\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x4, 0xffffffffffffffff) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, 0x0) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x67) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000200)) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, 0x0) 01:45:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 01:45:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x67) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x9}, 0x40) 01:45:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000009c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, 0x0) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0x0, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 01:45:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x4a141, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x2435e7b3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 01:45:04 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x5f12, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) 01:45:04 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x67) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0x0, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:04 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) getxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 01:45:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x10, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) 01:45:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc040565f, &(0x7f0000000140)={0x0, @raw_data="ba8c5dbcf3f60cf8d89f989936bb843ab5d26b65c145043565cd4d02475a718b1e383f3a1f44793833cbe9292a5c0819c3bdc9af484f8c87c12735481e42240757a827b658256bd8434db66b09019eca679cb060aa6bc964be81f22c8f6179c02b4fe7cd000cd8c2c5ea4e626c8f23dca058c3448cdc019ba526edd080681376b237204882b495f5be15130f47ea4bc5f9c19d5a6c69dd9ad3a7880658ebcc54d044af21c003256392ced11e9f4b4b617553fe4c8d8b3d5cbb1f3451f551cfd6e91f7e1ec7d5aa6d"}) 01:45:04 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) [ 1055.212624][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.231423][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 01:45:04 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1}) 01:45:04 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 01:45:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x1, 0x1, 0x80001000}, {}, {0x6}]}) 01:45:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0xb, 0x0) 01:45:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:05 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x40000, 0x0) 01:45:05 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) [ 1055.361641][ T36] audit: type=1326 audit(6971967904.962:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27855 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:45:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) 01:45:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x1, 0x8, 0x0, '\x00'}]}, 0x20}}, 0x0) 01:45:05 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="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", 0x128) 01:45:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:05 executing program 4: syz_io_uring_setup(0x18e, &(0x7f0000000480), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 01:45:05 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 01:45:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @dev}}}, 0xa0) 01:45:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) 01:45:05 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:05 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="139899d5814701d0023b6b1ec86549f223c1ec6f4695b89a76b94bddfa12de7b889bb353c859f2381ee3960a03225c7f3d3a05194b51acf046a573cf5464f6819b80aaa3d93d1d575dea4096d1a7e328b1f3b216e68ac5cbf23d98060c4d5f4e5711dba7cf8ccc92fc0e1a009df844ee1c394afed9ad629fd2cb41be92ee4d64a8af1c5e346aace62943d99d159ae8aec51c4adf220c8d15b41a3428191acc715211bbbc43f757f063a97a91054ec73540b14b076d25c2130b1e0bc01c99ac5c8feba3953e08643fa4bc5028ab2ef80ebd6b3538276222ae640930c0df1a15c54f1f4af2f73d4a65c6820cd97dcfe13a3ce06fc5003c368916e55fcac15d9894613468ad1bc0e55bab258a25a5b1b67f86a0daf84e1a1d1879e4b4034ff7e4b2dcab7ba02c528d5b", 0x128) 01:45:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r0, 0x100000003, 0x0, 0xbd13) 01:45:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x67) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='9', 0x1}], 0x5) 01:45:05 executing program 5: socketpair(0x0, 0x0, 0x5, &(0x7f0000000740)) 01:45:05 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) r2