syzkaller login: [ 242.140100][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.211734][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.282619][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 242.363182][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:53383' (ECDSA) to the list of known hosts. 1970/01/01 00:04:46 fuzzer started 1970/01/01 00:04:57 dialing manager at localhost:37991 1970/01/01 00:05:01 syscalls: 2768 1970/01/01 00:05:01 code coverage: enabled 1970/01/01 00:05:01 comparison tracing: enabled 1970/01/01 00:05:01 extra coverage: enabled 1970/01/01 00:05:01 setuid sandbox: enabled 1970/01/01 00:05:01 namespace sandbox: enabled 1970/01/01 00:05:01 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:01 fault injection: enabled 1970/01/01 00:05:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:01 net packet injection: enabled 1970/01/01 00:05:01 net device setup: enabled 1970/01/01 00:05:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:01 USB emulation: enabled 1970/01/01 00:05:01 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:01 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:01 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:06 fetching corpus: 50, signal 30992/32844 (executing program) 1970/01/01 00:05:08 fetching corpus: 100, signal 47471/51028 (executing program) 1970/01/01 00:05:12 fetching corpus: 150, signal 61484/66600 (executing program) 1970/01/01 00:05:14 fetching corpus: 200, signal 69742/76424 (executing program) 1970/01/01 00:05:15 fetching corpus: 250, signal 73895/82138 (executing program) 1970/01/01 00:05:17 fetching corpus: 300, signal 79802/89548 (executing program) 1970/01/01 00:05:19 fetching corpus: 350, signal 87290/98431 (executing program) 1970/01/01 00:05:21 fetching corpus: 400, signal 93224/105692 (executing program) 1970/01/01 00:05:25 fetching corpus: 450, signal 100726/114465 (executing program) 1970/01/01 00:05:28 fetching corpus: 500, signal 109419/124298 (executing program) 1970/01/01 00:05:30 fetching corpus: 550, signal 113427/129584 (executing program) 1970/01/01 00:05:32 fetching corpus: 600, signal 115836/133334 (executing program) 1970/01/01 00:05:34 fetching corpus: 650, signal 119604/138323 (executing program) 1970/01/01 00:05:36 fetching corpus: 700, signal 121678/141712 (executing program) 1970/01/01 00:05:38 fetching corpus: 750, signal 124396/145669 (executing program) 1970/01/01 00:05:40 fetching corpus: 800, signal 128480/150853 (executing program) 1970/01/01 00:05:42 fetching corpus: 850, signal 130341/153958 (executing program) 1970/01/01 00:05:44 fetching corpus: 900, signal 136348/160811 (executing program) 1970/01/01 00:05:46 fetching corpus: 950, signal 139833/165347 (executing program) 1970/01/01 00:05:48 fetching corpus: 1000, signal 141905/168568 (executing program) 1970/01/01 00:05:50 fetching corpus: 1050, signal 145802/173447 (executing program) 1970/01/01 00:05:52 fetching corpus: 1100, signal 147865/176592 (executing program) 1970/01/01 00:05:54 fetching corpus: 1150, signal 150956/180647 (executing program) 1970/01/01 00:05:56 fetching corpus: 1200, signal 153820/184500 (executing program) 1970/01/01 00:05:57 fetching corpus: 1250, signal 156349/188007 (executing program) 1970/01/01 00:05:59 fetching corpus: 1300, signal 159149/191699 (executing program) 1970/01/01 00:06:01 fetching corpus: 1350, signal 160742/194369 (executing program) 1970/01/01 00:06:03 fetching corpus: 1400, signal 162224/196885 (executing program) 1970/01/01 00:06:04 fetching corpus: 1450, signal 163270/199003 (executing program) 1970/01/01 00:06:06 fetching corpus: 1500, signal 165999/202580 (executing program) 1970/01/01 00:06:08 fetching corpus: 1550, signal 167787/205364 (executing program) 1970/01/01 00:06:10 fetching corpus: 1600, signal 169196/207787 (executing program) 1970/01/01 00:06:12 fetching corpus: 1650, signal 171690/211097 (executing program) 1970/01/01 00:06:16 fetching corpus: 1700, signal 173478/213781 (executing program) 1970/01/01 00:06:18 fetching corpus: 1750, signal 174545/215845 (executing program) 1970/01/01 00:06:20 fetching corpus: 1800, signal 177257/219272 (executing program) 1970/01/01 00:06:23 fetching corpus: 1850, signal 178492/221457 (executing program) 1970/01/01 00:06:25 fetching corpus: 1900, signal 180008/223841 (executing program) 1970/01/01 00:06:27 fetching corpus: 1950, signal 181335/226086 (executing program) 1970/01/01 00:06:29 fetching corpus: 2000, signal 183178/228751 (executing program) 1970/01/01 00:06:31 fetching corpus: 2050, signal 184464/230910 (executing program) 1970/01/01 00:06:32 fetching corpus: 2100, signal 185226/232664 (executing program) 1970/01/01 00:06:34 fetching corpus: 2150, signal 186318/234634 (executing program) 1970/01/01 00:06:36 fetching corpus: 2200, signal 187645/236776 (executing program) 1970/01/01 00:06:38 fetching corpus: 2250, signal 188648/238663 (executing program) 1970/01/01 00:06:39 fetching corpus: 2300, signal 190098/240865 (executing program) 1970/01/01 00:06:40 fetching corpus: 2350, signal 191879/243324 (executing program) 1970/01/01 00:06:43 fetching corpus: 2400, signal 193100/245370 (executing program) 1970/01/01 00:06:45 fetching corpus: 2450, signal 195170/248049 (executing program) 1970/01/01 00:06:46 fetching corpus: 2500, signal 196980/250503 (executing program) 1970/01/01 00:06:48 fetching corpus: 2550, signal 198016/252355 (executing program) 1970/01/01 00:06:51 fetching corpus: 2600, signal 199318/254381 (executing program) 1970/01/01 00:06:53 fetching corpus: 2650, signal 200719/256506 (executing program) 1970/01/01 00:06:55 fetching corpus: 2700, signal 201523/258184 (executing program) 1970/01/01 00:06:58 fetching corpus: 2750, signal 203432/260650 (executing program) 1970/01/01 00:07:00 fetching corpus: 2800, signal 204523/262504 (executing program) 1970/01/01 00:07:02 fetching corpus: 2850, signal 205522/264285 (executing program) 1970/01/01 00:07:04 fetching corpus: 2900, signal 207244/266520 (executing program) 1970/01/01 00:07:05 fetching corpus: 2949, signal 208155/268194 (executing program) 1970/01/01 00:07:07 fetching corpus: 2999, signal 209540/270164 (executing program) 1970/01/01 00:07:09 fetching corpus: 3049, signal 210180/271620 (executing program) 1970/01/01 00:07:11 fetching corpus: 3099, signal 212805/274491 (executing program) 1970/01/01 00:07:15 fetching corpus: 3149, signal 214530/276697 (executing program) 1970/01/01 00:07:17 fetching corpus: 3199, signal 215754/278546 (executing program) 1970/01/01 00:07:19 fetching corpus: 3249, signal 216568/280075 (executing program) 1970/01/01 00:07:21 fetching corpus: 3298, signal 218646/282424 (executing program) 1970/01/01 00:07:23 fetching corpus: 3348, signal 219444/283990 (executing program) 1970/01/01 00:07:26 fetching corpus: 3398, signal 220566/285754 (executing program) 1970/01/01 00:07:28 fetching corpus: 3448, signal 221817/287537 (executing program) 1970/01/01 00:07:29 fetching corpus: 3498, signal 223179/289395 (executing program) 1970/01/01 00:07:30 fetching corpus: 3548, signal 224057/290933 (executing program) 1970/01/01 00:07:33 fetching corpus: 3598, signal 225202/292668 (executing program) 1970/01/01 00:07:35 fetching corpus: 3648, signal 226937/294675 (executing program) 1970/01/01 00:07:37 fetching corpus: 3698, signal 228428/296542 (executing program) 1970/01/01 00:07:39 fetching corpus: 3748, signal 229364/298051 (executing program) 1970/01/01 00:07:41 fetching corpus: 3798, signal 230136/299485 (executing program) 1970/01/01 00:07:42 fetching corpus: 3848, signal 230997/300965 (executing program) 1970/01/01 00:07:44 fetching corpus: 3898, signal 231508/302251 (executing program) 1970/01/01 00:07:46 fetching corpus: 3947, signal 232461/303812 (executing program) 1970/01/01 00:07:48 fetching corpus: 3997, signal 235201/306417 (executing program) 1970/01/01 00:07:49 fetching corpus: 4047, signal 238422/309278 (executing program) 1970/01/01 00:07:51 fetching corpus: 4097, signal 238945/310497 (executing program) 1970/01/01 00:07:52 fetching corpus: 4147, signal 239848/311952 (executing program) 1970/01/01 00:07:55 fetching corpus: 4197, signal 240845/313435 (executing program) 1970/01/01 00:07:57 fetching corpus: 4247, signal 241564/314705 (executing program) 1970/01/01 00:07:59 fetching corpus: 4297, signal 242457/316137 (executing program) 1970/01/01 00:08:01 fetching corpus: 4347, signal 243294/317465 (executing program) 1970/01/01 00:08:02 fetching corpus: 4397, signal 243940/318745 (executing program) 1970/01/01 00:08:04 fetching corpus: 4447, signal 244979/320201 (executing program) 1970/01/01 00:08:06 fetching corpus: 4497, signal 245535/321393 (executing program) 1970/01/01 00:08:08 fetching corpus: 4547, signal 246127/322583 (executing program) 1970/01/01 00:08:09 fetching corpus: 4597, signal 246762/323747 (executing program) 1970/01/01 00:08:11 fetching corpus: 4647, signal 247484/324970 (executing program) 1970/01/01 00:08:13 fetching corpus: 4697, signal 248304/326254 (executing program) 1970/01/01 00:08:15 fetching corpus: 4747, signal 249356/327624 (executing program) 1970/01/01 00:08:17 fetching corpus: 4797, signal 250718/329187 (executing program) 1970/01/01 00:08:19 fetching corpus: 4847, signal 251492/330418 (executing program) 1970/01/01 00:08:20 fetching corpus: 4897, signal 252126/331618 (executing program) 1970/01/01 00:08:21 fetching corpus: 4947, signal 252733/332754 (executing program) 1970/01/01 00:08:23 fetching corpus: 4997, signal 253975/334255 (executing program) 1970/01/01 00:08:24 fetching corpus: 5047, signal 254560/335338 (executing program) 1970/01/01 00:08:26 fetching corpus: 5097, signal 255552/336691 (executing program) 1970/01/01 00:08:28 fetching corpus: 5147, signal 256080/337748 (executing program) 1970/01/01 00:08:30 fetching corpus: 5197, signal 256678/338800 (executing program) 1970/01/01 00:08:31 fetching corpus: 5247, signal 257330/339938 (executing program) 1970/01/01 00:08:34 fetching corpus: 5297, signal 258829/341469 (executing program) 1970/01/01 00:08:36 fetching corpus: 5347, signal 259796/342717 (executing program) 1970/01/01 00:08:38 fetching corpus: 5397, signal 260615/343879 (executing program) 1970/01/01 00:08:40 fetching corpus: 5447, signal 261139/344898 (executing program) 1970/01/01 00:08:41 fetching corpus: 5497, signal 261841/346018 (executing program) 1970/01/01 00:08:43 fetching corpus: 5547, signal 262721/347180 (executing program) 1970/01/01 00:08:46 fetching corpus: 5597, signal 263406/348297 (executing program) 1970/01/01 00:08:47 fetching corpus: 5647, signal 264310/349485 (executing program) 1970/01/01 00:08:49 fetching corpus: 5697, signal 264921/350501 (executing program) 1970/01/01 00:08:50 fetching corpus: 5747, signal 265428/351550 (executing program) 1970/01/01 00:08:51 fetching corpus: 5797, signal 266374/352746 (executing program) 1970/01/01 00:08:53 fetching corpus: 5847, signal 266950/353761 (executing program) 1970/01/01 00:08:56 fetching corpus: 5897, signal 269531/355671 (executing program) 1970/01/01 00:08:58 fetching corpus: 5947, signal 270332/356816 (executing program) 1970/01/01 00:08:59 fetching corpus: 5997, signal 271371/357998 (executing program) 1970/01/01 00:09:01 fetching corpus: 6047, signal 271835/358942 (executing program) 1970/01/01 00:09:02 fetching corpus: 6097, signal 272903/360141 (executing program) 1970/01/01 00:09:04 fetching corpus: 6147, signal 273390/361028 (executing program) 1970/01/01 00:09:06 fetching corpus: 6197, signal 274138/362071 (executing program) 1970/01/01 00:09:09 fetching corpus: 6247, signal 275232/363244 (executing program) 1970/01/01 00:09:11 fetching corpus: 6297, signal 275829/364205 (executing program) 1970/01/01 00:09:13 fetching corpus: 6347, signal 276927/365338 (executing program) 1970/01/01 00:09:15 fetching corpus: 6397, signal 277466/366279 (executing program) 1970/01/01 00:09:16 fetching corpus: 6447, signal 278262/367257 (executing program) 1970/01/01 00:09:19 fetching corpus: 6497, signal 278782/368148 (executing program) 1970/01/01 00:09:20 fetching corpus: 6547, signal 279357/369063 (executing program) 1970/01/01 00:09:22 fetching corpus: 6597, signal 279777/369873 (executing program) 1970/01/01 00:09:23 fetching corpus: 6647, signal 280309/370746 (executing program) 1970/01/01 00:09:25 fetching corpus: 6697, signal 280713/371583 (executing program) 1970/01/01 00:09:26 fetching corpus: 6747, signal 281202/372402 (executing program) 1970/01/01 00:09:28 fetching corpus: 6797, signal 281923/373321 (executing program) 1970/01/01 00:09:30 fetching corpus: 6847, signal 282317/374119 (executing program) 1970/01/01 00:09:33 fetching corpus: 6897, signal 282919/374979 (executing program) 1970/01/01 00:09:34 fetching corpus: 6947, signal 283473/375878 (executing program) 1970/01/01 00:09:36 fetching corpus: 6997, signal 284041/376768 (executing program) 1970/01/01 00:09:38 fetching corpus: 7047, signal 284497/377560 (executing program) 1970/01/01 00:09:39 fetching corpus: 7097, signal 284923/378353 (executing program) 1970/01/01 00:09:41 fetching corpus: 7147, signal 285463/379204 (executing program) 1970/01/01 00:09:44 fetching corpus: 7197, signal 286091/380107 (executing program) 1970/01/01 00:09:46 fetching corpus: 7247, signal 286796/380974 (executing program) 1970/01/01 00:09:48 fetching corpus: 7297, signal 288232/382090 (executing program) 1970/01/01 00:09:50 fetching corpus: 7347, signal 288615/382825 (executing program) 1970/01/01 00:09:52 fetching corpus: 7397, signal 289704/383811 (executing program) 1970/01/01 00:09:54 fetching corpus: 7447, signal 290225/384608 (executing program) 1970/01/01 00:09:55 fetching corpus: 7497, signal 290921/385472 (executing program) 1970/01/01 00:09:58 fetching corpus: 7547, signal 291646/386277 (executing program) 1970/01/01 00:10:00 fetching corpus: 7597, signal 292558/387166 (executing program) 1970/01/01 00:10:03 fetching corpus: 7647, signal 293140/387956 (executing program) 1970/01/01 00:10:05 fetching corpus: 7697, signal 293704/388704 (executing program) 1970/01/01 00:10:07 fetching corpus: 7747, signal 295158/389754 (executing program) 1970/01/01 00:10:09 fetching corpus: 7797, signal 295703/390518 (executing program) 1970/01/01 00:10:11 fetching corpus: 7847, signal 296121/391252 (executing program) 1970/01/01 00:10:13 fetching corpus: 7897, signal 296911/392021 (executing program) 1970/01/01 00:10:14 fetching corpus: 7947, signal 297321/392771 (executing program) 1970/01/01 00:10:16 fetching corpus: 7997, signal 297681/393473 (executing program) 1970/01/01 00:10:18 fetching corpus: 8047, signal 298225/394247 (executing program) 1970/01/01 00:10:19 fetching corpus: 8097, signal 298733/394945 (executing program) 1970/01/01 00:10:21 fetching corpus: 8147, signal 299299/395647 (executing program) 1970/01/01 00:10:22 fetching corpus: 8197, signal 300015/396377 (executing program) 1970/01/01 00:10:24 fetching corpus: 8247, signal 300398/397070 (executing program) 1970/01/01 00:10:27 fetching corpus: 8297, signal 301005/397813 (executing program) 1970/01/01 00:10:29 fetching corpus: 8347, signal 301326/398467 (executing program) 1970/01/01 00:10:31 fetching corpus: 8397, signal 301809/399125 (executing program) 1970/01/01 00:10:33 fetching corpus: 8447, signal 303142/399939 (executing program) 1970/01/01 00:10:35 fetching corpus: 8497, signal 303638/400592 (executing program) 1970/01/01 00:10:37 fetching corpus: 8547, signal 304019/401228 (executing program) 1970/01/01 00:10:39 fetching corpus: 8597, signal 304361/401869 (executing program) 1970/01/01 00:10:41 fetching corpus: 8647, signal 304658/402520 (executing program) 1970/01/01 00:10:43 fetching corpus: 8697, signal 305217/403162 (executing program) 1970/01/01 00:10:44 fetching corpus: 8747, signal 305626/403826 (executing program) 1970/01/01 00:10:46 fetching corpus: 8797, signal 306044/404451 (executing program) 1970/01/01 00:10:48 fetching corpus: 8847, signal 306467/405061 (executing program) 1970/01/01 00:10:49 fetching corpus: 8897, signal 306827/405683 (executing program) 1970/01/01 00:10:52 fetching corpus: 8947, signal 307319/406299 (executing program) 1970/01/01 00:10:54 fetching corpus: 8997, signal 307661/406909 (executing program) 1970/01/01 00:10:56 fetching corpus: 9047, signal 307932/407496 (executing program) 1970/01/01 00:10:57 fetching corpus: 9097, signal 308276/408125 (executing program) 1970/01/01 00:10:59 fetching corpus: 9147, signal 308923/408739 (executing program) 1970/01/01 00:11:01 fetching corpus: 9197, signal 309258/409335 (executing program) 1970/01/01 00:11:03 fetching corpus: 9247, signal 309744/409936 (executing program) 1970/01/01 00:11:04 fetching corpus: 9297, signal 310134/410560 (executing program) 1970/01/01 00:11:06 fetching corpus: 9347, signal 310450/411132 (executing program) 1970/01/01 00:11:08 fetching corpus: 9397, signal 310869/411755 (executing program) 1970/01/01 00:11:10 fetching corpus: 9447, signal 311489/412378 (executing program) 1970/01/01 00:11:11 fetching corpus: 9497, signal 311813/412947 (executing program) 1970/01/01 00:11:13 fetching corpus: 9547, signal 312256/413542 (executing program) 1970/01/01 00:11:15 fetching corpus: 9597, signal 313443/414217 (executing program) 1970/01/01 00:11:16 fetching corpus: 9647, signal 313732/414795 (executing program) 1970/01/01 00:11:17 fetching corpus: 9697, signal 314106/415359 (executing program) 1970/01/01 00:11:19 fetching corpus: 9747, signal 314649/415948 (executing program) 1970/01/01 00:11:22 fetching corpus: 9797, signal 315033/416470 (executing program) 1970/01/01 00:11:24 fetching corpus: 9847, signal 315637/417058 (executing program) 1970/01/01 00:11:26 fetching corpus: 9897, signal 315979/417579 (executing program) 1970/01/01 00:11:28 fetching corpus: 9947, signal 316410/418123 (executing program) 1970/01/01 00:11:30 fetching corpus: 9997, signal 316791/418675 (executing program) 1970/01/01 00:11:32 fetching corpus: 10047, signal 317419/419202 (executing program) 1970/01/01 00:11:33 fetching corpus: 10097, signal 317988/419780 (executing program) 1970/01/01 00:11:35 fetching corpus: 10147, signal 318330/420296 (executing program) 1970/01/01 00:11:38 fetching corpus: 10197, signal 318825/420827 (executing program) 1970/01/01 00:11:40 fetching corpus: 10247, signal 319062/421343 (executing program) 1970/01/01 00:11:42 fetching corpus: 10297, signal 319592/421873 (executing program) 1970/01/01 00:11:44 fetching corpus: 10347, signal 320283/422358 (executing program) 1970/01/01 00:11:46 fetching corpus: 10397, signal 320612/422894 (executing program) 1970/01/01 00:11:47 fetching corpus: 10447, signal 321098/423412 (executing program) 1970/01/01 00:11:49 fetching corpus: 10497, signal 321380/423906 (executing program) 1970/01/01 00:11:50 fetching corpus: 10547, signal 322735/424439 (executing program) 1970/01/01 00:11:52 fetching corpus: 10597, signal 323170/424950 (executing program) 1970/01/01 00:11:55 fetching corpus: 10647, signal 323545/425236 (executing program) 1970/01/01 00:11:59 fetching corpus: 10697, signal 324238/425236 (executing program) 1970/01/01 00:12:01 fetching corpus: 10747, signal 324554/425236 (executing program) 1970/01/01 00:12:03 fetching corpus: 10797, signal 324868/425236 (executing program) 1970/01/01 00:12:04 fetching corpus: 10847, signal 325126/425236 (executing program) 1970/01/01 00:12:06 fetching corpus: 10897, signal 325612/425236 (executing program) 1970/01/01 00:12:08 fetching corpus: 10947, signal 325972/425238 (executing program) 1970/01/01 00:12:10 fetching corpus: 10997, signal 326279/425238 (executing program) 1970/01/01 00:12:11 fetching corpus: 11047, signal 326692/425238 (executing program) 1970/01/01 00:12:14 fetching corpus: 11097, signal 327124/425238 (executing program) 1970/01/01 00:12:16 fetching corpus: 11147, signal 327563/425268 (executing program) 1970/01/01 00:12:18 fetching corpus: 11197, signal 328035/425270 (executing program) 1970/01/01 00:12:20 fetching corpus: 11247, signal 328432/425270 (executing program) 1970/01/01 00:12:22 fetching corpus: 11297, signal 328883/425270 (executing program) 1970/01/01 00:12:24 fetching corpus: 11347, signal 329424/425270 (executing program) 1970/01/01 00:12:25 fetching corpus: 11397, signal 329721/425270 (executing program) 1970/01/01 00:12:28 fetching corpus: 11447, signal 330373/425270 (executing program) 1970/01/01 00:12:30 fetching corpus: 11497, signal 330692/425270 (executing program) 1970/01/01 00:12:31 fetching corpus: 11547, signal 331110/425270 (executing program) 1970/01/01 00:12:33 fetching corpus: 11597, signal 331472/425270 (executing program) 1970/01/01 00:12:34 fetching corpus: 11647, signal 331805/425270 (executing program) 1970/01/01 00:12:35 fetching corpus: 11697, signal 332174/425316 (executing program) 1970/01/01 00:12:37 fetching corpus: 11747, signal 332385/425316 (executing program) 1970/01/01 00:12:38 fetching corpus: 11797, signal 332673/425316 (executing program) 1970/01/01 00:12:40 fetching corpus: 11847, signal 332995/425316 (executing program) 1970/01/01 00:12:42 fetching corpus: 11897, signal 333476/425316 (executing program) 1970/01/01 00:12:43 fetching corpus: 11947, signal 333859/425316 (executing program) 1970/01/01 00:12:46 fetching corpus: 11997, signal 334230/425316 (executing program) 1970/01/01 00:12:47 fetching corpus: 12047, signal 334858/425316 (executing program) 1970/01/01 00:12:49 fetching corpus: 12097, signal 335276/425316 (executing program) 1970/01/01 00:12:51 fetching corpus: 12147, signal 336330/425316 (executing program) 1970/01/01 00:12:53 fetching corpus: 12197, signal 336615/425316 (executing program) 1970/01/01 00:12:55 fetching corpus: 12247, signal 336937/425316 (executing program) 1970/01/01 00:12:56 fetching corpus: 12297, signal 337297/425316 (executing program) 1970/01/01 00:12:58 fetching corpus: 12347, signal 338100/425316 (executing program) 1970/01/01 00:13:00 fetching corpus: 12397, signal 338473/425316 (executing program) 1970/01/01 00:13:03 fetching corpus: 12447, signal 339276/425318 (executing program) 1970/01/01 00:13:06 fetching corpus: 12497, signal 339529/425318 (executing program) 1970/01/01 00:13:07 fetching corpus: 12547, signal 340196/425318 (executing program) 1970/01/01 00:13:09 fetching corpus: 12597, signal 340542/425318 (executing program) 1970/01/01 00:13:10 fetching corpus: 12647, signal 340966/425318 (executing program) 1970/01/01 00:13:12 fetching corpus: 12697, signal 341214/425320 (executing program) 1970/01/01 00:13:14 fetching corpus: 12747, signal 341414/425320 (executing program) 1970/01/01 00:13:17 fetching corpus: 12797, signal 341804/425320 (executing program) 1970/01/01 00:13:18 fetching corpus: 12847, signal 342235/425320 (executing program) 1970/01/01 00:13:20 fetching corpus: 12897, signal 342552/425322 (executing program) 1970/01/01 00:13:23 fetching corpus: 12947, signal 342821/425322 (executing program) 1970/01/01 00:13:25 fetching corpus: 12997, signal 343172/425322 (executing program) 1970/01/01 00:13:27 fetching corpus: 13047, signal 343476/425322 (executing program) 1970/01/01 00:13:28 fetching corpus: 13097, signal 343682/425322 (executing program) 1970/01/01 00:13:30 fetching corpus: 13147, signal 343972/425402 (executing program) 1970/01/01 00:13:31 fetching corpus: 13197, signal 344174/425402 (executing program) 1970/01/01 00:13:33 fetching corpus: 13247, signal 344791/425402 (executing program) 1970/01/01 00:13:35 fetching corpus: 13297, signal 345445/425403 (executing program) 1970/01/01 00:13:36 fetching corpus: 13347, signal 345684/425403 (executing program) 1970/01/01 00:13:38 fetching corpus: 13397, signal 346258/425404 (executing program) 1970/01/01 00:13:40 fetching corpus: 13447, signal 346517/425404 (executing program) 1970/01/01 00:13:43 fetching corpus: 13497, signal 346910/425404 (executing program) 1970/01/01 00:13:45 fetching corpus: 13547, signal 347294/425404 (executing program) 1970/01/01 00:13:47 fetching corpus: 13597, signal 347530/425410 (executing program) 1970/01/01 00:13:48 fetching corpus: 13647, signal 347858/425410 (executing program) 1970/01/01 00:13:50 fetching corpus: 13697, signal 348013/425410 (executing program) 1970/01/01 00:13:52 fetching corpus: 13747, signal 348381/425410 (executing program) 1970/01/01 00:13:54 fetching corpus: 13797, signal 348872/425410 (executing program) 1970/01/01 00:13:55 fetching corpus: 13847, signal 349352/425417 (executing program) 1970/01/01 00:13:57 fetching corpus: 13897, signal 349984/425420 (executing program) 1970/01/01 00:13:59 fetching corpus: 13947, signal 350238/425422 (executing program) 1970/01/01 00:14:02 fetching corpus: 13997, signal 350553/425422 (executing program) 1970/01/01 00:14:04 fetching corpus: 14022, signal 350830/425422 (executing program) 1970/01/01 00:14:04 fetching corpus: 14022, signal 350830/425434 (executing program) 1970/01/01 00:14:04 fetching corpus: 14022, signal 350830/425434 (executing program) 1970/01/01 00:15:37 starting 2 fuzzer processes 00:15:54 executing program 0: ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x12100, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000040)) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x7ff, 0x8000) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x401, 0x8, 0x1, 0x0, 0x0, [{{r2}, 0x7}]}) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x4402, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x0, 0xb59, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x67, 0x0, 0x8, 0x2b, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x35, 0x0, 0x7, [0x7fffffff, 0x80000000, 0x6, 0x200, 0x27, 0x5, 0xfffffff7, 0xa5, 0xfffffff9]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000500)=0x5) r5 = openat$incfs(r3, &(0x7f0000001800)='.pending_reads\x00', 0x8000, 0x108) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}}, 0x40001) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000001a40)={0x0, 0x4, 0x80, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x24000840) 00:16:14 executing program 1: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x99, 0x20}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x24, 0x8, 0x9}) write$P9_RREAD(r1, &(0x7f0000000080)={0x28, 0x75, 0x1, {0x1d, "6a0c879d2c1347516abf1e3e447664f611d5f991a6f90e40dc969bbf7c"}}, 0x28) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"e5364309798d15b8a27647a98c24c8f4", r2, 0x0, {0x2, 0x5}, {0xfffffffffffffffd, 0x7000000}, 0x0, [0x400, 0x9, 0xb12, 0xb17, 0x80, 0x3, 0x1, 0x10001, 0x800, 0x9, 0x3f, 0xa3, 0xfffffffffffffffb, 0x6, 0x0, 0x100000000]}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='[\x00', 0x0, r1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000002c0)={'vxcan1\x00', 0xffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{0x0, 0x1, 0x4, 0x5, 0x7f, 0x5, 0x100000001, 0x5, 0xff, 0x6, 0x2, 0x2, 0x7ff, 0x2, 0x100000001}, 0x18, [0x0, 0x0, 0x0]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000400)={0x1, 0x40, 0x1}) r4 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000500)=0x1, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000580)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0xc2400, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x24) r7 = syz_open_dev$vcsu(&(0x7f0000000600)='/dev/vcsu#\x00', 0x7, 0x2) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000640)=0x800) [ 981.570826][ T3076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.700222][ T3076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.283891][ T3076] device hsr_slave_0 entered promiscuous mode [ 989.332117][ T3076] device hsr_slave_1 entered promiscuous mode [ 993.535659][ T3076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 993.686038][ T3076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 993.883917][ T3076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.002523][ T3076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1004.271677][ T3076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.692379][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1004.781252][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1007.601892][ T3220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.788655][ T3220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.878601][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1010.913441][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.658622][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1011.778920][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.822403][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1012.200011][ T3385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1013.776950][ T3076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1013.778704][ T3076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1013.901393][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1013.966987][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.032660][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1014.101864][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.267231][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.962074][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1015.979763][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.323063][ T3220] device hsr_slave_0 entered promiscuous mode [ 1023.371548][ T3220] device hsr_slave_1 entered promiscuous mode [ 1023.418263][ T3220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.422278][ T3220] Cannot create hsr debugfs directory [ 1031.303674][ T3220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1031.513146][ T3220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1031.696103][ T3220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1031.811591][ T3220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1035.138069][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1035.208977][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.126544][ T3220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.549747][ T3076] device veth0_vlan entered promiscuous mode [ 1044.761088][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.819044][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.887729][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1044.930323][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1045.023966][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1045.079878][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.327820][ T3076] device veth1_vlan entered promiscuous mode [ 1046.431048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1046.495070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1046.921876][ T3076] device veth0_macvtap entered promiscuous mode [ 1047.186239][ T3076] device veth1_macvtap entered promiscuous mode [ 1047.247049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1047.303005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1048.142101][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1048.192575][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1048.545683][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1048.592323][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.966456][ T3076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.973389][ T3076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.998668][ T3076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.000539][ T3076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.943767][ T3076] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 1051.990198][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1052.021780][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1052.197136][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1052.228938][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1052.429245][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1053.321719][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1053.630256][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1053.712449][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1053.931884][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1054.001135][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.210639][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1055.646783][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1055.652122][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:17:39 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x39, &(0x7f00000001c0)=@generic={0x5, 0x0, 0x31, "8321f6fa", "5080810987e19697abb9f6d3138023279ea29f8fca8e063f073af09f228c685d64b7b77ebba823c0b8fdbd6bba13d86048"}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343237383831383900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040000c00000000000000d2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d2f4655fd2f4655fd2f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d2f4655fd2f4655fd2f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f0000011000)="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"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012000)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000012b00)) close_range(r0, r0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1) syz_io_uring_setup(0x7ca8, &(0x7f0000000080)={0x0, 0x5544, 0x10, 0x3, 0x228}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 1062.750702][ T3523] loop0: detected capacity change from 0 to 1024 [ 1064.342602][ T3523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 00:17:46 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x39, &(0x7f00000001c0)=@generic={0x5, 0x0, 0x31, "8321f6fa", "5080810987e19697abb9f6d3138023279ea29f8fca8e063f073af09f228c685d64b7b77ebba823c0b8fdbd6bba13d86048"}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343237383831383900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040000c00000000000000d2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d2f4655fd2f4655fd2f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d2f4655fd2f4655fd2f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f0000011000)="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"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012000)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000012b00)) close_range(r0, r0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1) syz_io_uring_setup(0x7ca8, &(0x7f0000000080)={0x0, 0x5544, 0x10, 0x3, 0x228}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 1069.678122][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1069.723317][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1072.446496][ T3542] loop0: detected capacity change from 0 to 1024 [ 1072.965193][ T3542] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1077.093114][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1077.193707][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1077.293548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1077.339919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1077.479149][ T3220] device veth0_vlan entered promiscuous mode [ 1078.513084][ T3220] device veth1_vlan entered promiscuous mode 00:17:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffa, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r3) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r3, 0x7) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x7d, 0xd2}, 0x0, &(0x7f0000000240)="14539845e688ffc41632e62091bccad9aae858a0f7e6fd113de4e79a406b633cac26f258039a2b54a081f3403e4c56d9dc49a4b4d0f6328eb5dd6a472236f94e81b3fd380af952654694cf3392ba3b5cd8e43d0c950287931e5c2106fd13af9e584d2b4109ecedcf734d7226487d9910d118b8b62490a86cf7085cc7a7", &(0x7f00000002c0)=""/210) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000640)=0xc) fchown(r6, r7, 0xee01) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000003c0)=r6) [ 1080.251646][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.295922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.527269][ T3220] device veth0_macvtap entered promiscuous mode [ 1080.848240][ T3220] device veth1_macvtap entered promiscuous mode [ 1081.340145][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.646657][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.696602][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1082.048999][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1082.112317][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1082.371752][ T3220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.392184][ T3220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.410355][ T3220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.412359][ T3220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:18:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffa, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r3) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r3, 0x7) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x7d, 0xd2}, 0x0, &(0x7f0000000240)="14539845e688ffc41632e62091bccad9aae858a0f7e6fd113de4e79a406b633cac26f258039a2b54a081f3403e4c56d9dc49a4b4d0f6328eb5dd6a472236f94e81b3fd380af952654694cf3392ba3b5cd8e43d0c950287931e5c2106fd13af9e584d2b4109ecedcf734d7226487d9910d118b8b62490a86cf7085cc7a7", &(0x7f00000002c0)=""/210) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000640)=0xc) fchown(r6, r7, 0xee01) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000003c0)=r6) 00:18:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffa, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r3) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r3, 0x7) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x7d, 0xd2}, 0x0, &(0x7f0000000240)="14539845e688ffc41632e62091bccad9aae858a0f7e6fd113de4e79a406b633cac26f258039a2b54a081f3403e4c56d9dc49a4b4d0f6328eb5dd6a472236f94e81b3fd380af952654694cf3392ba3b5cd8e43d0c950287931e5c2106fd13af9e584d2b4109ecedcf734d7226487d9910d118b8b62490a86cf7085cc7a7", &(0x7f00000002c0)=""/210) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) ioctl$TUNSETIFINDEX(r5, 0x400454da, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000640)=0xc) fchown(r6, r7, 0xee01) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000003c0)=r6) 00:18:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) syz_open_dev$midi(&(0x7f0000001140)='/dev/midi#\x00', 0x6, 0x40) 00:18:11 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)=ANY=[]) 00:18:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(r3, &(0x7f0000000000)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x4, 0xff, 0x0, 0x400, 0x1, 0x2, r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r7 = getuid() r8 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x20000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0xdf81}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r1}}]}}) mount$tmpfs(0x20000000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000006c0)=0xe8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x81) 00:18:16 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xe4481, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x40800, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x40182, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="0300000004", 0x5, 0x7ff}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030303030303030303030322c6e6f61636c2c6e6f7d626c6b5f696f5f7375626d69742c00a5136c9c09dd6a47c69e410f5fe4635e64c2279f847575ea43279aeb447c0771527b314af5095c56a0be03df17bf542054283ecf1f2782af2d2bf99fd98518453248df670c306d22d67b990d5b8caf707e322041be4e270571383fb0721994de520358"]) [ 1100.424279][ C1] hrtimer: interrupt took 967300 ns [ 1100.909371][ T3576] loop1: detected capacity change from 0 to 512 [ 1101.099941][ T3576] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1101.099941][ T3576] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1101.099941][ T3576] [ 1101.102511][ T3576] EXT4-fs (loop1): Unrecognized mount option "no}blk_io_submit" or missing value [ 1102.249883][ T3582] loop1: detected capacity change from 0 to 512 [ 1102.420645][ T3582] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1102.420645][ T3582] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1102.420645][ T3582] [ 1102.441862][ T3582] EXT4-fs (loop1): Unrecognized mount option "no}blk_io_submit" or missing value 00:18:22 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/115, 0x73}], 0x1) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':\x02\x00\x00c/thre`E-self/attr/c\xba\x03\x00\x00\x00t\x00'}, 0x2b) 00:18:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(r3, &(0x7f0000000000)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x4, 0xff, 0x0, 0x400, 0x1, 0x2, r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r7 = getuid() r8 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x20000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0xdf81}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r1}}]}}) mount$tmpfs(0x20000000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000006c0)=0xe8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x81) [ 1106.742763][ T39] audit: type=1400 audit(1104.720:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A02 pid=3589 comm="syz-executor.1" 00:18:27 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/115, 0x73}], 0x1) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':\x02\x00\x00c/thre`E-self/attr/c\xba\x03\x00\x00\x00t\x00'}, 0x2b) [ 1111.483896][ T39] audit: type=1400 audit(1109.510:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A02 pid=3596 comm="syz-executor.1" 00:18:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(r3, &(0x7f0000000000)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x4, 0xff, 0x0, 0x400, 0x1, 0x2, r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r7 = getuid() r8 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x20000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0xdf81}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r1}}]}}) mount$tmpfs(0x20000000, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000006c0)=0xe8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2, 0x81) 00:18:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 00:18:35 executing program 1: unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\\)\xf0!^#-(\x00', &(0x7f0000000100)='}\x00', &(0x7f0000000140)='^\x00', &(0x7f0000000180)='*@%\'(@]%@]\\:,\x00', &(0x7f00000001c0)=']%/}\x00', &(0x7f0000000200)='^-!\xd0\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='#-}\\(\\-:![]\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='---@\xc1@\x00', &(0x7f0000000380)='.\xa9.@{-1:$-:]/\x00', &(0x7f00000003c0)=',\x00'], 0x100) 00:18:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002600)='/dev/adsp1\x00', 0x103801, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000180)={0x6d5, 0xd47, 0x3, 0x4, 0x3, [0x101, 0x253, 0x6, 0x4]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000080)="0381cc917f0fbe12664ade7b85fd5a83917b572142629a899458e408acfaec1bedfcab84dde764330f48bf1d21be81e8b8c4cc9450450170b045d7e0fd1476e338da950e4d0de10443a22697dfce2e62a0f27701e353b9f68f6389751a2339", 0x5f}, {&(0x7f0000000100)="f8a0aa5f1fa9924b874f70b78c0ea1727ec50a740c95f82cb80c85ed963eec", 0x1f}, {&(0x7f00000003c0)="e2e47226bf685faa8d410af6", 0xc}, {&(0x7f00000004c0)="5a392a999ef711021b2e87134ef79975d997029be81273e547870ee74afd139c10925bbd9313093efe356f5cd0db88bccfb7572423d206c2d979497baad1bd02e5a20493d9c589cd532b239284eff0b36ccd836b11c6586c58480e364eaac846717a0529363df3aed3264f1c8ee02915643e62ba68d08ad98631959b00d464c7d538fe86e1d41242f30086d3ab8748258d0afa32ea88c8832a23011d53f0", 0x9e}, {&(0x7f00000005c0)="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", 0x16a}], 0x5) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0xd46) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002) 00:18:40 executing program 1: unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\\)\xf0!^#-(\x00', &(0x7f0000000100)='}\x00', &(0x7f0000000140)='^\x00', &(0x7f0000000180)='*@%\'(@]%@]\\:,\x00', &(0x7f00000001c0)=']%/}\x00', &(0x7f0000000200)='^-!\xd0\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='#-}\\(\\-:![]\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='---@\xc1@\x00', &(0x7f0000000380)='.\xa9.@{-1:$-:]/\x00', &(0x7f00000003c0)=',\x00'], 0x100) 00:18:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000080)) 00:18:45 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002600)='/dev/adsp1\x00', 0x103801, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000180)={0x6d5, 0xd47, 0x3, 0x4, 0x3, [0x101, 0x253, 0x6, 0x4]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000080)="0381cc917f0fbe12664ade7b85fd5a83917b572142629a899458e408acfaec1bedfcab84dde764330f48bf1d21be81e8b8c4cc9450450170b045d7e0fd1476e338da950e4d0de10443a22697dfce2e62a0f27701e353b9f68f6389751a2339", 0x5f}, {&(0x7f0000000100)="f8a0aa5f1fa9924b874f70b78c0ea1727ec50a740c95f82cb80c85ed963eec", 0x1f}, {&(0x7f00000003c0)="e2e47226bf685faa8d410af6", 0xc}, {&(0x7f00000004c0)="5a392a999ef711021b2e87134ef79975d997029be81273e547870ee74afd139c10925bbd9313093efe356f5cd0db88bccfb7572423d206c2d979497baad1bd02e5a20493d9c589cd532b239284eff0b36ccd836b11c6586c58480e364eaac846717a0529363df3aed3264f1c8ee02915643e62ba68d08ad98631959b00d464c7d538fe86e1d41242f30086d3ab8748258d0afa32ea88c8832a23011d53f0", 0x9e}, {&(0x7f00000005c0)="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", 0x16a}], 0x5) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0xd46) ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002) 00:18:52 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x30541, 0xa3, 0x16}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c100000", @ANYRES16=r2, @ANYBLOB="000129bd70000063df2512000000e3af7908", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff0000060014010900000008001400", @ANYRES32=r4, @ANYBLOB="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"], 0x106c}, 0x1, 0x0, 0x0, 0x800}, 0x8d0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000e72505a1a440000000010109023b00010100000009040000ff020600000524060000052400000582020002001f00090503020000020000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) 00:18:53 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xa}}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) fcntl$getown(r1, 0x9) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1141.277430][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1141.557435][ T19] usb 2-1: device descriptor read/64, error 18 [ 1141.948224][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1142.156357][ T19] usb 2-1: device descriptor read/64, error 18 [ 1142.282791][ T19] usb usb2-port1: attempt power cycle [ 1143.208085][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1143.299462][ T19] usb 2-1: Invalid ep0 maxpacket: 231 [ 1143.507233][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1143.596616][ T19] usb 2-1: Invalid ep0 maxpacket: 231 [ 1143.600347][ T19] usb usb2-port1: unable to enumerate USB device 00:19:04 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xa}}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) fcntl$getown(r1, 0x9) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:11 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xa}}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) fcntl$getown(r1, 0x9) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:16 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x100000001) readv(r1, &(0x7f0000002300)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1) 00:19:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r1 = getuid() r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) r3 = getuid() r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=0x0) syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '%!{]}'}}, {@fowner_gt={'fowner>', r1}}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x3}, [{0x2, 0x2, r1}, {0x2, 0x6, r3}], {0x4, 0x4}, [{0x8, 0x2, 0xee00}, {0x8, 0x1}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c6561ae03000074617469632c646f6e745f61707072616973652c00"]) 00:19:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1172.722464][ T3666] fuse: Unknown parameter 'hash' [ 1173.357314][ T3668] tmpfs: Bad value for 'mpol' [ 1175.283130][ T3666] fuse: Unknown parameter 'hash' [ 1175.441276][ T3666] tmpfs: Bad value for 'mpol' 00:19:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r1 = getuid() r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) r3 = getuid() r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=0x0) syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '%!{]}'}}, {@fowner_gt={'fowner>', r1}}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x3}, [{0x2, 0x2, r1}, {0x2, 0x6, r3}], {0x4, 0x4}, [{0x8, 0x2, 0xee00}, {0x8, 0x1}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c6561ae03000074617469632c646f6e745f61707072616973652c00"]) [ 1182.988355][ T3685] fuse: Unknown parameter 'hash' [ 1183.930595][ T3687] tmpfs: Bad value for 'mpol' 00:19:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r1 = getuid() r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) r3 = getuid() r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=0x0) syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '%!{]}'}}, {@fowner_gt={'fowner>', r1}}]}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x3}, [{0x2, 0x2, r1}, {0x2, 0x6, r3}], {0x4, 0x4}, [{0x8, 0x2, 0xee00}, {0x8, 0x1}], {0x10, 0x3}, {0x20, 0x4}}, 0x44, 0x2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c6561ae03000074617469632c646f6e745f61707072616973652c00"]) 00:19:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1190.915130][ T3695] fuse: Unknown parameter 'hash' [ 1191.591083][ T3697] tmpfs: Bad value for 'mpol' 00:19:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:19:53 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="122d2e5cab079a6f9705a1a44000010203110902"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x12b, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x119, 0x1, 0x1, 0x20, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "f875904fa1de"}, {0x5, 0x24, 0x0, 0xff7f}, {0xd, 0x24, 0xf, 0x1, 0xe7fa, 0x4, 0x0, 0x7}, [@mdlm_detail={0xa7, 0x24, 0x13, 0x8, "c6a93ce07ea3fd84ad7982e83ce06e05eb81e5fe418f952da3bacfa8ebbc9b90c3f4725dc69c0b4e70eec6033950a4affe2c1fea7dd34c31e591fcca9fc2454b93512b62b16388b3da5644adb05514d9bb89334b6e57f26e97a38bf757c4b2e6c82160b74eda655057b5aaf97c799455f0188166f8c716ffd0d76cfdc78b5b1328e47b6289e16eaf0f22774cda99c140412419a412c12b840370b8fcca403bc310724e"}, @obex={0x5, 0x24, 0x15, 0xc0}, @mbim={0xc, 0x24, 0x1b, 0x800, 0x0, 0x8, 0xa8, 0x3db, 0x50}, @mdlm_detail={0x20, 0x24, 0x13, 0x0, "ff47f8240e20e5aee09604234ad0d5d0b43a7344e0412210f075e9e3"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x7, 0x80}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x4, 0xff, 0x20, 0x80}, 0x17, &(0x7f0000000040)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xb0, 0x6, 0x9, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x5, 0x4}]}, 0x2, [{0xd5, &(0x7f0000000200)=@string={0xd5, 0x3, "b6624c052235de920aa3e8a79194ab84346feb47a8ef171979e832f527bcd1db94a16e2c9aad15861b5693b7185e2290cfd3f6b857ff03b0a1a900d379f26b4792390ba241e437aa43446882d3fc12026de8a16232d405c5fbec158028968dccb26ec58a9ff32555a1270b9f022d17161f9fbbfbd6cb36693d732de840e75f821d1b959ba84c570d2a48ebed5e1c65fcf742ad061f3459cea9fe9a5c194fb2597f798a545b2fca3f65da0e87fd31d568eec3aeaac2c1abe1fbbf12ab901cbd603ce0bef9b7f783ec746424c91d6219a031a84a"}}, {0x72, &(0x7f0000000300)=@string={0x72, 0x3, "c52849644c7e74a9fcae57a289acb9014428ec6ab935fb91627a8f5ebfaf5417859a817dc7d9b7b789fd18fe8d1ebdb15a51874ec8703b70bed64ccad86f67c323066e8769d6e03ed660d29daa31a3f26fbd96e24b3c968d64c8ecdc848c1bad2aa74dea7bca44eab2308a4592bc505a"}}]}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) fanotify_init(0x40, 0x2) [ 1196.441566][ T3701] fuse: Bad value for 'fd' [ 1197.618398][ T3189] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1197.896560][ T3189] usb 2-1: device descriptor read/64, error 18 [ 1198.276551][ T3189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1198.502609][ T3189] usb 2-1: device descriptor read/64, error 18 [ 1198.630578][ T3189] usb usb2-port1: attempt power cycle 00:19:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1199.468749][ T3189] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1199.729973][ T3189] usb 2-1: device descriptor read/8, error -61 [ 1200.027511][ T3189] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1200.209419][ T3189] usb 2-1: device descriptor read/8, error -61 [ 1200.330648][ T3189] usb usb2-port1: unable to enumerate USB device [ 1201.239265][ T3706] fuse: Bad value for 'fd' 00:20:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, [], @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1204.773634][ T3708] fuse: Bad value for 'fd' 00:20:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) io_setup(0x6, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x720f, &(0x7f0000000080)={0x0, 0x754b, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x101200) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="5924d5e03df127896de4cb0fe38bdc54c250c77d5ee898f73478341e09f22c6219f1031e2f53a7173b064310fb4a51fe327929630244644eb2c44c6a7b2e11388ae92e6cab126c6d110d7f7f9276e6543fa054cea00c334a1f6941c312b5dae1e837773227e5d5394d39514438c5e9ee160c6df5021b5143492b6b748cd14382109993efc0467e1d592458930f5b724b1533c113351c3ef62cfc4d02e98af555ee668210a2e1873da3acd33f0eec64ee300a32af4c2a52b5fa4681d1fefc49f59d965dd9f1", 0xc5, 0x800, 0x0, 0x3, r2}]) 00:20:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:10 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:14 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:18 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x6, 0x5}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010200fd0b", 0x21, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}, {0x0}], 0x0, &(0x7f0000012c00)) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x81) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/210, 0xd2) 00:20:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1225.369716][ T3735] loop1: detected capacity change from 0 to 512 [ 1225.679616][ T3735] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1225.682553][ T3735] System zones: 0-11 [ 1225.841473][ T3735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 00:20:26 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:26 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001340)="8a", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:20:30 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x98, 0x200) utimensat(r1, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x100) fchown(r1, 0x0, 0xee01) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r3 = getuid() r4 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x6082c, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@fsname={'fsname', 0x3d, '/dev/vhost-net\x00'}}, {@audit='audit'}, {@seclabel='seclabel'}, {@hash='hash'}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x5, 0xfff2}, {0xfff1, 0xffe1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000051) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0xffffffff}) 00:20:34 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x98, 0x200) utimensat(r1, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x100) fchown(r1, 0x0, 0xee01) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r3 = getuid() r4 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x6082c, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@fsname={'fsname', 0x3d, '/dev/vhost-net\x00'}}, {@audit='audit'}, {@seclabel='seclabel'}, {@hash='hash'}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x5, 0xfff2}, {0xfff1, 0xffe1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000051) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0xffffffff}) 00:20:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1242.359341][ T3766] fuse: Bad value for 'fd' 00:20:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1246.136850][ T3770] fuse: Bad value for 'fd' 00:20:44 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "acf942", 0x4, 0x2f, 0x0, @empty, @local, {[@fragment={0x88}]}}}}}, 0x0) syz_emit_ethernet(0xab, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "ec", "f56267", 0x15, "c4e9b38787d542a2b6c156bf6366384d9a61239a2f7217a752bf1fe9fedbe3ff23b8b22959dfb3a5269864182f04a140b3cf7c937914686e24a2c07c8ba08591b306df2c8ec0de46ec38e92abddf906eea5c95559e772fce4a4c2162235d3a468ca9aaed0eec0ebfca11fa39031db1e33209270276e495902879b741ef9dcf314227efd947d510a21cb5ba18a1dfe04c512b0bc103"}}}}}, &(0x7f0000000180)={0x0, 0x1, [0xc45, 0x2fb, 0x23e, 0xdb0]}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}}}}}, &(0x7f0000000200)={0x0, 0x4, [0x94b, 0xc5, 0xf03, 0xdee]}) syz_emit_ethernet(0x2a7, &(0x7f0000000240)={@remote, @multicast, @val={@val={0x9100, 0x4, 0x0, 0x4}, {0x8100, 0x3}}, {@ipv6={0x86dd, @generic={0x5, 0x6, "417bf2", 0x269, 0x1, 0x1, @mcast1, @local, {[@srh={0x32, 0x4, 0x4, 0x2, 0x0, 0x8, 0x5, [@ipv4={[], [], @local}, @private2={0xfc, 0x2, [], 0x1}]}, @hopopts={0xff, 0x1d, [], [@calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x9, [0x6, 0x16e00000000, 0x7]}}, @generic={0x7f, 0x4e, "9e8cbe9cf0a3da99c91e4c2f78ea39197272ed45f8eb59d781732ee970ccda5f95b5100a17c94dd54e2b48a60aec8674a38fdacd586aa96467a9b5a64f9f64a65bc09f813060ed0b7bf5f5a20a99"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x50, {0x0, 0x12, 0x81, 0x3, [0x5, 0x100, 0x4, 0xff, 0x4, 0x27, 0x6, 0x0, 0x5c4d]}}]}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x5, 0x64}, @dstopts={0x84, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x81}]}, @dstopts={0x67, 0x21, [], [@pad1, @generic={0x0, 0xa8, "bbf2e5317979a51b0ff9f5917fc2fe44ea5274d73ab5e4ebfbf4cf8a6c77fee9e67a023e342a01a3cb4551e18e2f0395811bc4699531d195e59f6787702af19703706888084bb59adc1f3fc0697a9d28e90111acbbace6e01bcc1abe907f8d2cc90130d4703381809e09efaa3ad5dd56e3c5937d3f85fe354336c5d24f1e0160630a17984183d7d850fadce575dee98262d80f438083d2eee459b0b58cac778042bba73651c15fad"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x17}}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x18}, @hao={0xc9, 0x10, @private1}, @generic={0x8, 0x2d, "355f5cd3301bbc3d5326ff90082d06b18885d98cfdba7d4c4bc40c7ff1d197b775a63dbfdd0fbe21f0f7cd6c2b"}]}], "bab93343cc877e6739291c3e787609dc06"}}}}}, &(0x7f0000000500)={0x0, 0x2, [0xb52, 0xc4a, 0xd94, 0xe60]}) 00:20:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1250.165479][ T3774] fuse: Bad value for 'fd' 00:20:49 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "acf942", 0x4, 0x2f, 0x0, @empty, @local, {[@fragment={0x88}]}}}}}, 0x0) syz_emit_ethernet(0xab, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "ec", "f56267", 0x15, "c4e9b38787d542a2b6c156bf6366384d9a61239a2f7217a752bf1fe9fedbe3ff23b8b22959dfb3a5269864182f04a140b3cf7c937914686e24a2c07c8ba08591b306df2c8ec0de46ec38e92abddf906eea5c95559e772fce4a4c2162235d3a468ca9aaed0eec0ebfca11fa39031db1e33209270276e495902879b741ef9dcf314227efd947d510a21cb5ba18a1dfe04c512b0bc103"}}}}}, &(0x7f0000000180)={0x0, 0x1, [0xc45, 0x2fb, 0x23e, 0xdb0]}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}}}}}, &(0x7f0000000200)={0x0, 0x4, [0x94b, 0xc5, 0xf03, 0xdee]}) syz_emit_ethernet(0x2a7, &(0x7f0000000240)={@remote, @multicast, @val={@val={0x9100, 0x4, 0x0, 0x4}, {0x8100, 0x3}}, {@ipv6={0x86dd, @generic={0x5, 0x6, "417bf2", 0x269, 0x1, 0x1, @mcast1, @local, {[@srh={0x32, 0x4, 0x4, 0x2, 0x0, 0x8, 0x5, [@ipv4={[], [], @local}, @private2={0xfc, 0x2, [], 0x1}]}, @hopopts={0xff, 0x1d, [], [@calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x9, [0x6, 0x16e00000000, 0x7]}}, @generic={0x7f, 0x4e, "9e8cbe9cf0a3da99c91e4c2f78ea39197272ed45f8eb59d781732ee970ccda5f95b5100a17c94dd54e2b48a60aec8674a38fdacd586aa96467a9b5a64f9f64a65bc09f813060ed0b7bf5f5a20a99"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x50, {0x0, 0x12, 0x81, 0x3, [0x5, 0x100, 0x4, 0xff, 0x4, 0x27, 0x6, 0x0, 0x5c4d]}}]}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x5, 0x64}, @dstopts={0x84, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x81}]}, @dstopts={0x67, 0x21, [], [@pad1, @generic={0x0, 0xa8, "bbf2e5317979a51b0ff9f5917fc2fe44ea5274d73ab5e4ebfbf4cf8a6c77fee9e67a023e342a01a3cb4551e18e2f0395811bc4699531d195e59f6787702af19703706888084bb59adc1f3fc0697a9d28e90111acbbace6e01bcc1abe907f8d2cc90130d4703381809e09efaa3ad5dd56e3c5937d3f85fe354336c5d24f1e0160630a17984183d7d850fadce575dee98262d80f438083d2eee459b0b58cac778042bba73651c15fad"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x17}}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x18}, @hao={0xc9, 0x10, @private1}, @generic={0x8, 0x2d, "355f5cd3301bbc3d5326ff90082d06b18885d98cfdba7d4c4bc40c7ff1d197b775a63dbfdd0fbe21f0f7cd6c2b"}]}], "bab93343cc877e6739291c3e787609dc06"}}}}}, &(0x7f0000000500)={0x0, 0x2, [0xb52, 0xc4a, 0xd94, 0xe60]}) 00:20:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:20:53 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000100)="08f2c38e9570e0cfd4ac2f3d8f608d31068920d81aa8beaeb71c62b50eb5", 0x1e, 0x8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}, 0xfd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x204080, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x8, "0ca0a3b8e9e6"}, 0x8, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) recvmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/70, 0x46}, 0x21) ioctl$TUNGETIFF(r2, 0x401054d5, &(0x7f0000000000)={'macvtap0\x00'}) 00:20:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:05 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000100)="08f2c38e9570e0cfd4ac2f3d8f608d31068920d81aa8beaeb71c62b50eb5", 0x1e, 0x8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}, 0xfd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x204080, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x8, "0ca0a3b8e9e6"}, 0x8, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) recvmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/70, 0x46}, 0x21) ioctl$TUNGETIFF(r2, 0x401054d5, &(0x7f0000000000)={'macvtap0\x00'}) 00:21:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:14 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000100)="08f2c38e9570e0cfd4ac2f3d8f608d31068920d81aa8beaeb71c62b50eb5", 0x1e, 0x8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}, 0xfd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x204080, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x8, "0ca0a3b8e9e6"}, 0x8, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00'}) recvmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/70, 0x46}, 0x21) ioctl$TUNGETIFF(r2, 0x401054d5, &(0x7f0000000000)={'macvtap0\x00'}) 00:21:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r2, 0x6e1a33a5789638ee) fchown(r2, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r4 = getuid() r5 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d3c9a149a99208, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xeb6a}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, '['}}]}}) fchown(r1, 0x0, 0xffffffffffffffff) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000180)=""/117, 0x75}], 0x3) lseek(r0, 0x1, 0x0) 00:21:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r2, 0x6e1a33a5789638ee) fchown(r2, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r4 = getuid() r5 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d3c9a149a99208, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xeb6a}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, '['}}]}}) fchown(r1, 0x0, 0xffffffffffffffff) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000180)=""/117, 0x75}], 0x3) lseek(r0, 0x1, 0x0) 00:21:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:34 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:21:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1305.711626][ T3850] fuse: Bad value for 'fd' 00:21:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:21:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1310.475899][ T3857] fuse: Bad value for 'fd' 00:21:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:21:52 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) [ 1315.560142][ T3860] fuse: Bad value for 'fd' 00:21:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1319.478767][ T3868] fuse: Invalid rootmode 00:22:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:22:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) [ 1324.616270][ T3872] fuse: Invalid rootmode 00:22:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) [ 1329.681795][ T3879] fuse: Invalid rootmode 00:22:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:22:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:22:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:22:18 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) 00:22:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/dev5fuse\x00'/43], 0x2b) 00:22:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x2b) 00:22:25 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r6) 00:22:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x2b) 00:22:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x2b) 00:22:34 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) 00:22:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x2b) 00:22:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 00:22:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x2b) 00:22:46 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) 00:22:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x2b) 00:22:52 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) 00:22:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x2b) 00:23:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 00:23:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x2b) 00:23:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x2b) 00:23:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) 00:23:16 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) 00:23:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00/'], 0x2b) 00:23:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+'], 0x2b) 00:23:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) 00:23:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+'], 0x2b) 00:23:27 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) 00:23:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+'], 0x2b) 00:23:33 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 00:23:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:23:38 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:23:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:23:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) 00:23:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:23:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:23:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00'], 0x2b) 00:23:55 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:23:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:23:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:24:04 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:24:08 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:11 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'], 0x2b) 00:24:15 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:19 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:23 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:27 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2b) 00:24:32 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:37 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:46 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:24:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:24:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:24:56 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:24:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/13], 0x2b) 00:25:03 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:25:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:25:12 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00'/12], 0x2b) 00:25:16 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:20 executing program 1: get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+'], 0x2b) 00:25:24 executing program 1: get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x2b) 00:25:28 executing program 1: get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:31 executing program 1: get_mempolicy(0x0, &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:32 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 00:25:35 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:37 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 00:25:38 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:25:42 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:25:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000200)=ANY=[], 0x2b) 00:25:46 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:25:48 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:25:48 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) 00:25:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r0}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r5, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r6) 00:25:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x2b) 00:26:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) 00:26:02 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mremap(&(0x7f0000d49000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0x13cb, &(0x7f0000000280)={0x0, 0xee8d, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000100), &(0x7f0000000180), 0xea, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xc00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, &(0x7f0000000a40)=0x80, 0x9, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7aa8, 0x0, 0x0, 0x0, 0x90c7ee1a}, [@call={0x85, 0x0, 0x0, 0x71}, @alu={0x4, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffffc}, @exit, @map={0x18, 0x8, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xbde}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xcd, &(0x7f0000000b40)=""/205, 0x40f00, 0x8, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb, 0x8, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x78) fsetxattr$security_ima(r5, &(0x7f0000000d40)='security.ima\x00', &(0x7f0000000d80)=@sha1={0x1, "84cf964389972ceed9940fed91b673bb1d98f160"}, 0x15, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r6, 0x0, 0xee01) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/146, 0x92}, {&(0x7f00000008c0)=""/171, 0xab}], 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r7) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x3, 0x8e8, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 00:26:10 executing program 1 (fault-call:0 fault-nth:0): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:11 executing program 0 (fault-call:1 fault-nth:0): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1574.987236][ T4257] FAULT_INJECTION: forcing a failure. [ 1574.987236][ T4257] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1575.027333][ T4257] CPU: 1 PID: 4257 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1575.029351][ T4257] Hardware name: riscv-virtio,qemu (DT) [ 1575.031692][ T4257] Call Trace: [ 1575.032674][ T4257] [] walk_stackframe+0x0/0x23c [ 1575.034779][ T4257] [] dump_backtrace+0x40/0x4e [ 1575.036973][ T4257] [] show_stack+0x22/0x2e [ 1575.041311][ T4257] [] dump_stack+0x148/0x1d8 [ 1575.043129][ T4257] [] should_fail+0x250/0x252 [ 1575.045311][ T4257] [] should_fail_alloc_page+0x54/0x62 [ 1575.046820][ T4257] [] __alloc_pages_nodemask+0xf6/0x480 [ 1575.048352][ T4257] [] alloc_pages_current+0x114/0x234 [ 1575.049863][ T4257] [] __pte_alloc+0x32/0x372 [ 1575.051217][ T4257] [] __handle_mm_fault+0x16b8/0x1d0e [ 1575.052702][ T4257] [] handle_mm_fault+0x160/0x3ac [ 1575.054188][ T4257] [] do_page_fault+0x2a0/0x95e [ 1575.055793][ T4257] [] ret_from_exception+0x0/0x14 [ 1575.057256][ T4257] [] sys_get_mempolicy+0x322/0xa70 [ 1575.882371][ T4259] FAULT_INJECTION: forcing a failure. [ 1575.882371][ T4259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1575.916743][ T4259] CPU: 1 PID: 4259 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 1575.918258][ T4259] Hardware name: riscv-virtio,qemu (DT) [ 1575.919138][ T4259] Call Trace: [ 1575.920301][ T4259] [] walk_stackframe+0x0/0x23c [ 1575.923189][ T4259] [] dump_backtrace+0x40/0x4e [ 1575.924472][ T4259] [] show_stack+0x22/0x2e [ 1575.925979][ T4259] [] dump_stack+0x148/0x1d8 [ 1575.927033][ T4259] [] should_fail+0x250/0x252 [ 1575.928067][ T4259] [] should_fail_usercopy+0x1e/0x26 [ 1575.929628][ T4259] [] _copy_to_user+0x34/0xc0 [ 1575.930671][ T4259] [] simple_read_from_buffer+0xbe/0x120 [ 1575.931828][ T4259] [] proc_fail_nth_read+0x104/0x16e [ 1575.933042][ T4259] [] vfs_read+0x108/0x2ac [ 1575.934001][ T4259] [] ksys_read+0xb4/0x1b8 [ 1575.935370][ T4259] [] sys_read+0x28/0x36 [ 1575.936305][ T4259] [] ret_from_syscall+0x0/0x2 00:26:16 executing program 1 (fault-call:0 fault-nth:1): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:16 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1579.789719][ T4262] FAULT_INJECTION: forcing a failure. [ 1579.789719][ T4262] name failslab, interval 1, probability 0, space 0, times 1 [ 1579.792731][ T4262] CPU: 0 PID: 4262 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1579.794963][ T4262] Hardware name: riscv-virtio,qemu (DT) [ 1579.796750][ T4262] Call Trace: [ 1579.797701][ T4262] [] walk_stackframe+0x0/0x23c [ 1579.799187][ T4262] [] dump_backtrace+0x40/0x4e [ 1579.800645][ T4262] [] show_stack+0x22/0x2e [ 1579.801955][ T4262] [] dump_stack+0x148/0x1d8 [ 1579.803313][ T4262] [] should_fail+0x250/0x252 [ 1579.805456][ T4262] [] __should_failslab+0x62/0x82 [ 1579.807571][ T4262] [] should_failslab+0xc/0x1c [ 1579.808998][ T4262] [] kmem_cache_alloc+0x5c/0x3ca [ 1579.810365][ T4262] [] __pte_alloc+0x7c/0x372 [ 1579.811734][ T4262] [] __handle_mm_fault+0x16b8/0x1d0e [ 1579.813489][ T4262] [] handle_mm_fault+0x160/0x3ac [ 1579.815657][ T4262] [] do_page_fault+0x2a0/0x95e [ 1579.817235][ T4262] [] ret_from_exception+0x0/0x14 [ 1579.818929][ T4262] [] sys_get_mempolicy+0x322/0xa70 00:26:20 executing program 1 (fault-call:0 fault-nth:2): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:21 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1584.532982][ T4267] FAULT_INJECTION: forcing a failure. [ 1584.532982][ T4267] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.539814][ T4267] CPU: 1 PID: 4267 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1584.541530][ T4267] Hardware name: riscv-virtio,qemu (DT) [ 1584.542558][ T4267] Call Trace: [ 1584.543437][ T4267] [] walk_stackframe+0x0/0x23c [ 1584.546411][ T4267] [] dump_backtrace+0x40/0x4e [ 1584.548065][ T4267] [] show_stack+0x22/0x2e [ 1584.549524][ T4267] [] dump_stack+0x148/0x1d8 [ 1584.551457][ T4267] [] should_fail+0x250/0x252 [ 1584.552778][ T4267] [] __should_failslab+0x62/0x82 [ 1584.554421][ T4267] [] should_failslab+0xc/0x1c [ 1584.556425][ T4267] [] kmem_cache_alloc+0x5c/0x3ca [ 1584.557848][ T4267] [] __anon_vma_prepare+0x5a/0x28a [ 1584.559616][ T4267] [] __handle_mm_fault+0x188e/0x1d0e [ 1584.561023][ T4267] [] handle_mm_fault+0x160/0x3ac [ 1584.562463][ T4267] [] do_page_fault+0x2a0/0x95e [ 1584.564552][ T4267] [] ret_from_exception+0x0/0x14 [ 1584.566085][ T4267] [] sys_get_mempolicy+0x322/0xa70 00:26:26 executing program 1 (fault-call:0 fault-nth:3): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1590.242447][ T4274] FAULT_INJECTION: forcing a failure. [ 1590.242447][ T4274] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.256479][ T4274] CPU: 0 PID: 4274 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1590.257457][ T4274] Hardware name: riscv-virtio,qemu (DT) [ 1590.258273][ T4274] Call Trace: [ 1590.259083][ T4274] [] walk_stackframe+0x0/0x23c [ 1590.260383][ T4274] [] dump_backtrace+0x40/0x4e [ 1590.261363][ T4274] [] show_stack+0x22/0x2e [ 1590.262206][ T4274] [] dump_stack+0x148/0x1d8 [ 1590.263139][ T4274] [] should_fail+0x250/0x252 [ 1590.264114][ T4274] [] __should_failslab+0x62/0x82 [ 1590.265735][ T4274] [] should_failslab+0xc/0x1c [ 1590.266802][ T4274] [] kmem_cache_alloc+0x5c/0x3ca [ 1590.267774][ T4274] [] __anon_vma_prepare+0x1be/0x28a [ 1590.268820][ T4274] [] __handle_mm_fault+0x188e/0x1d0e [ 1590.270115][ T4274] [] handle_mm_fault+0x160/0x3ac [ 1590.271411][ T4274] [] do_page_fault+0x2a0/0x95e [ 1590.272599][ T4274] [] ret_from_exception+0x0/0x14 [ 1590.273470][ T4274] [] sys_get_mempolicy+0x322/0xa70 00:26:28 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x700, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:30 executing program 1 (fault-call:0 fault-nth:4): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1595.388294][ T4281] FAULT_INJECTION: forcing a failure. [ 1595.388294][ T4281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1595.399066][ T4281] CPU: 0 PID: 4281 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1595.400718][ T4281] Hardware name: riscv-virtio,qemu (DT) [ 1595.401790][ T4281] Call Trace: [ 1595.402770][ T4281] [] walk_stackframe+0x0/0x23c [ 1595.404647][ T4281] [] dump_backtrace+0x40/0x4e [ 1595.406550][ T4281] [] show_stack+0x22/0x2e [ 1595.407956][ T4281] [] dump_stack+0x148/0x1d8 [ 1595.409255][ T4281] [] should_fail+0x250/0x252 [ 1595.410644][ T4281] [] should_fail_alloc_page+0x54/0x62 [ 1595.412176][ T4281] [] __alloc_pages_nodemask+0xf6/0x480 [ 1595.413691][ T4281] [] alloc_pages_vma+0x88/0x2f4 [ 1595.415727][ T4281] [] __handle_mm_fault+0x9f2/0x1d0e [ 1595.417091][ T4281] [] handle_mm_fault+0x160/0x3ac [ 1595.418627][ T4281] [] do_page_fault+0x2a0/0x95e [ 1595.420758][ T4281] [] ret_from_exception+0x0/0x14 [ 1595.422255][ T4281] [] sys_get_mempolicy+0x322/0xa70 00:26:34 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x1000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:36 executing program 1 (fault-call:0 fault-nth:5): get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1600.013018][ T4287] FAULT_INJECTION: forcing a failure. [ 1600.013018][ T4287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.028866][ T4287] CPU: 0 PID: 4287 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 1600.031336][ T4287] Hardware name: riscv-virtio,qemu (DT) [ 1600.032437][ T4287] Call Trace: [ 1600.033340][ T4287] [] walk_stackframe+0x0/0x23c [ 1600.035665][ T4287] [] dump_backtrace+0x40/0x4e [ 1600.037819][ T4287] [] show_stack+0x22/0x2e [ 1600.039285][ T4287] [] dump_stack+0x148/0x1d8 [ 1600.040573][ T4287] [] should_fail+0x250/0x252 [ 1600.042830][ T4287] [] should_fail_usercopy+0x1e/0x26 [ 1600.045018][ T4287] [] _copy_to_user+0x34/0xc0 [ 1600.046940][ T4287] [] simple_read_from_buffer+0xbe/0x120 [ 1600.048667][ T4287] [] proc_fail_nth_read+0x104/0x16e [ 1600.050752][ T4287] [] vfs_read+0x108/0x2ac [ 1600.052139][ T4287] [] ksys_read+0xb4/0x1b8 [ 1600.053543][ T4287] [] sys_read+0x28/0x36 [ 1600.055465][ T4287] [] ret_from_syscall+0x0/0x2 00:26:40 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x7000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:41 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:44 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:46 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x100000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:49 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x3, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:52 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x700000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:53 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:26:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r3 = getuid() r4 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='gd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64, @ANYRESOCT=r2, @ANYRESDEC=r4]) fchown(r1, r3, 0xee01) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x2, 0x3, 0x5, 0x0, 0x2], 0x6, 0x180000, 0x0, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x119502, 0x197) fchown(r6, 0x0, 0xee01) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r5) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0) r8 = getuid() r9 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r9]) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x80, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@appraise='appraise'}, {@uid_lt={'uid<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, '-{.'}}]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) 00:26:59 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1623.231728][ T4315] fuse: Unknown parameter 'gd' [ 1624.992544][ T4320] fuse: Bad value for 'fd' 00:27:04 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x6, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 1627.047876][ T4315] fuse: Unknown parameter 'gd' [ 1628.142810][ T4317] fuse: Bad value for 'fd' 00:27:10 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:11 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:19 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x8, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:20 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0xcfa2e53f2b6698ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80001, 0x0) pread64(r1, &(0x7f0000000200)=""/234, 0xea, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000300)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r2) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r3) get_mempolicy(&(0x7f0000000100), 0x0, 0x400000000007b0, &(0x7f0000ffd000/0x3000)=nil, 0x4) 00:27:23 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x300, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:28 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x500, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:31 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00', r0) r3 = io_uring_setup(0x21d6, &(0x7f0000000640)={0x0, 0x7023, 0x8, 0x0, 0x23}) read(r3, &(0x7f00000006c0)=""/120, 0x78) fchown(r2, 0x0, 0xee01) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x394, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x184, 0x5, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5b1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1fc, 0x5, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x78}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff4161}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x390}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x38}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff3142}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffef9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x648}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x213}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x400c080}, 0x4) 00:27:32 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x600, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:38 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x700, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:40 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r0}, r1, 0x14, @unused=[0x200, 0x810e, 0x1, 0x915], @name="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"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) r3 = getpid() getpriority(0x1, r3) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:42 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:46 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x4000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:46 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x4) 00:27:51 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x200000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:52 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:27:54 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x1000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:27:58 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 00:27:58 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:03 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x3000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x216000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r1) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4) 00:28:07 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x4000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:12 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r0) 00:28:13 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x5000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:18 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x6000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:22 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) fcntl$dupfd(r1, 0x406, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:24 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x7000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:27 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x8000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:30 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x40000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:34 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x20000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:38 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x100000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:42 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x200000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:46 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x300000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:52 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x400000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:28:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xec, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x21c1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x654}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff2e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffdb5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0502002}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x40088c0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000003}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x82) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6) 00:28:59 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x500000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:05 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:06 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x600000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:10 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x700000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:11 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x7) 00:29:15 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x800000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:16 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2, 0x30, 0x200, 0xffffffffffffff01, 0x5], [0x1, 0x5, 0x7, 0x0, 0x1, 0xff, 0x5, 0x1, 0xffffffffffff7fff, 0x1ff, 0x7, 0xc4f7, 0x3, 0x1, 0xffffffffffffffe1, 0x4, 0x2, 0x7f, 0x3, 0xff, 0x0, 0x401, 0x10000, 0x5, 0x100000001, 0xb9ef, 0x7f, 0x7, 0x0, 0x1, 0x6, 0x6, 0x7, 0x5, 0x0, 0x401, 0x1000, 0x9, 0x7, 0x6, 0x8, 0xd684, 0x3, 0x1, 0xfffffffffffffff8, 0x9, 0x1, 0xff, 0x4, 0x7, 0x1, 0x3, 0x7f, 0x7d, 0x2, 0x6, 0xddf, 0x4, 0xfffffffffffff001, 0x4, 0x2, 0x7, 0x8, 0x8, 0x5e0c, 0x4, 0x6, 0x6, 0x3ff, 0x4, 0x8, 0x8000, 0x4, 0x8, 0x94, 0x7, 0x1, 0xc58, 0x6, 0x100, 0x0, 0xb3ef, 0xb, 0x3, 0xbf, 0x7fffffff8, 0x5, 0x101, 0xcc, 0x0, 0x7, 0xfffffffffffffffa, 0x7, 0x5, 0x5, 0x3, 0xc61, 0x5, 0x3, 0x1da4, 0x8, 0x3, 0x5, 0x5, 0x6, 0x5ad, 0x40, 0x67, 0xc7, 0x40, 0x100000001, 0xfffffffffffffffa, 0x8, 0x100000001, 0x3, 0x2, 0x2, 0x0, 0xfffffffffffffff7, 0x1, 0x8]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={r1, 0x100000001, 0x1, 0x1}) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 00:29:18 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x4000000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:22 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)="d289bacb5a2069f5866db088973cfbe13a9463aa4ff03c5c37ea4bde1b53fca04c1399018e434c214449c83358ffc9630588f9e1c4c0ea2be94eed4fce0005d6189dbb0791cd94f1e23aeee5e7fc3203b64ad86a1c7edf9a47d183dca42b4753a2d703eee0076aaf6212fe63df76dcd053b8db9c624bfb1ec00b3be493c440f87b6220108c7187a593d60fc6c0110e29d84adc7f86a90a8db50b99a3303a86d6396c80fc4a48", 0xa6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000180), 0x0, 0x19, &(0x7f0000ffc000/0x3000)=nil, 0x3) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) 00:29:23 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0xffffffff00000000, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:29:28 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0xa142) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) get_mempolicy(&(0x7f0000000100), 0x0, 0xff, &(0x7f0000ffd000/0x2000)=nil, 0x3) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="e27d5725803d0632619ced48cbe5b8394c2d7191e9d71237c4931fb645506d827305f01ed0f117b56563d9ffddb0c0a8d6ff8818dc9371d022455c1d31fed9a02669d8d02acdd9f8ff18", 0x4a}], 0x1) 00:29:28 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x200100) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @private1, 0xfffffffb}, 0x1c) r1 = openat(r0, &(0x7f00000005c0)='./file1\x00', 0x26e1, 0x6) fchown(r1, 0x0, 0xee01) preadv2(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000440)=""/196, 0xc4}], 0x8, 0x6, 0x7, 0x1) mmap$snddsp_control(&(0x7f0000fef000/0x11000)=nil, 0x1000, 0x0, 0x40010, r1, 0x83000000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 00:29:31 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x13) 00:29:35 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0xcaa67f4f97c74deb) 00:29:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20020055) get_mempolicy(&(0x7f0000000100), 0x0, 0x400, &(0x7f0000ffd000/0x3000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) 00:29:40 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r0, 0x100000000) 00:29:49 executing program 1: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb0, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000005, 0xc010, r0, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) 00:29:50 executing program 0: setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800)='nl80211\x00', r0) get_mempolicy(&(0x7f0000000100), 0x0, 0xfffffffffffffffe, &(0x7f0000ffd000/0x2000)=nil, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x6, @local, 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="eec988e1a1e6486a99c46162805681a462c11c5cded4c72f502f1bf5590d8fb986130af9424674a070f52d87ca99baaac6171585dd8f46d415b57cc0f47dd8080e76c01616430e3489c98867b05da17734da1e6740d2f310c30e63cc76fa0d52af8a72b4ab18b4f4a2aea08d3431db0b8dfd70a1741f31fb5ce9189ca9", 0x7d}, {&(0x7f0000000180)="408930a6fd34a891b2c657d0f6c2b430fe70cb38139f0a34f31c5012184041d49a3f4b6e79525fd16e7072354f04c0d2812c45b9110fd15c7d49dff30995b5fa95f7cff7db1a0a3d62215bb25e179ab26c80976865278e8d82946dd2b77f5aa21ecbb5b12b191f2b0e3b19ee94733b06d1b5519ac2dc0135c803da566963bb", 0x7f}], 0x2, &(0x7f0000000240)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @init={0x18, 0x84, 0x0, {0x81, 0x2, 0x1, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @authinfo={0x18, 0x84, 0x6, {0x1f}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xdb00}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0xd30, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}], 0xc8, 0x2400c800}, {&(0x7f0000000340)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="22a319b7962e56b0f3eac06b2e8eb7e2c73e8616e1525ee93a2b07dcd1b5ce626115c68a32c29e23b25bfeebc0bef3d8038730b2093ce777b48f6d0ff3319f2b27ac04614948e8f619bb0136fe220ca138f7b24d028b3b371b66a3ca80710d9a605603bc6840676333253ddd65c6719ed16e0b0b98ccecaabddc4c74b133851711f209414e55662cccb619ccd24aba08232b008f4b97496f377d4d42f1ff032f92e2d304bc7e017cd1037dc85be3f1ebb95dd12398625099161eecd4ce1e2c18cf08623a4e64", 0xc6}], 0x1, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x6, 0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0xff80}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xfffffffa}}], 0x60}, {&(0x7f0000000540)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000580)="c0a5a517c60a2dcea0b8574049789b288d152c7c507afefaec94c4322fd710d4dde14d11d75d74b3e0626c946637b90cbd9739571929af9f0b4f1bb7c7d1ec07e089d2199d17f0aac7b1e863722fba667d01fb066f2e05adff738d5dac789645910380b2d1ad779daed336e3d42173ccdd1af93263ceec1ed02f7d650b1b88bf3ce34c3523a7d0240a356b16bb82429a42b817e1d89ca5dbcf7393700249612ea6db4ab62dfd1d9cf3691e0ad94ed00d2a6917a234d9fbed099622076f396c1d2ecba3a41c8bd416eeb6d140129d6bbfa38d4e7764487e2034ca04a34e472b75f72854de1438eeabc7e9304f4d0fc238cb", 0xf1}], 0x1, &(0x7f00000006c0)=[@authinfo={0x18, 0x84, 0x6, {0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0xa1ee, 0xf800, 0x2d, 0xff80}}, @init={0x18, 0x84, 0x0, {0x1, 0x4f, 0xb2, 0x7ff}}], 0x68, 0x801}], 0x3, 0xc004) 00:29:57 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000ffd000/0x2000)=nil, 0x2) 00:29:58 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xd0002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) dup3(r1, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x2f}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x4000850) 00:30:01 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4) 00:30:06 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x40000000000000, &(0x7f0000ffd000/0x2000)=nil, 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) [ 1809.672574][ T3918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.897555][ T3918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.092685][ T3918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.893649][ T3918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:30:11 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa400, 0x1c8, 0x19}, 0x18) mmap$IORING_OFF_CQ_RING(&(0x7f0000d6a000/0x4000)=nil, 0x4000, 0x4, 0x8010, r0, 0x8000000) [ 1827.240824][ T3918] device hsr_slave_0 left promiscuous mode [ 1827.323370][ T3918] device hsr_slave_1 left promiscuous mode [ 1827.708508][ T3918] device veth1_macvtap left promiscuous mode [ 1827.727640][ T3918] device veth0_macvtap left promiscuous mode [ 1827.750318][ T3918] device veth1_vlan left promiscuous mode [ 1827.788342][ T3918] device veth0_vlan left promiscuous mode [ 1839.307358][ T3918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1839.608003][ T3918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.841677][ T3918] bond0 (unregistering): Released all slaves [ 1870.466699][ T4569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.622071][ T4569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.043490][ T4569] device hsr_slave_0 entered promiscuous mode [ 1879.102956][ T4569] device hsr_slave_1 entered promiscuous mode [ 1891.681462][ T4569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.287990][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1892.380532][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1898.248936][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1898.308767][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1898.498619][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1898.579705][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1898.802309][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1899.095708][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1899.938545][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1899.993082][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1900.362410][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1900.399871][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1900.601709][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1901.542276][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1901.569543][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1917.670428][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1917.721484][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1923.790743][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1923.840644][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1923.929375][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1923.979888][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1924.092327][ T4569] device veth0_vlan entered promiscuous mode [ 1924.497532][ T4569] device veth1_vlan entered promiscuous mode [ 1925.798198][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1925.869560][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1926.068865][ T4569] device veth0_macvtap entered promiscuous mode [ 1926.330789][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1926.460236][ T4569] device veth1_macvtap entered promiscuous mode [ 1927.281157][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1927.302586][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1927.483917][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1927.515746][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1927.969442][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 1928.075380][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 1928.112490][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 1928.239635][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 1947.457835][ T3918] device hsr_slave_0 left promiscuous mode [ 1947.553757][ T3918] device hsr_slave_1 left promiscuous mode [ 1947.761367][ T3918] device veth1_macvtap left promiscuous mode [ 1947.793447][ T3918] device veth0_macvtap left promiscuous mode [ 1947.808053][ T3918] device veth1_vlan left promiscuous mode [ 1947.811414][ T3918] device veth0_vlan left promiscuous mode [ 1959.903628][ T3918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1960.321174][ T3918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1962.778355][ T3918] bond0 (unregistering): Released all slaves [ 1984.422759][ T4861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1984.523390][ T4861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.299794][ T4861] device hsr_slave_0 entered promiscuous mode [ 1991.331130][ T4861] device hsr_slave_1 entered promiscuous mode [ 2000.887221][ T4861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.298325][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2001.352853][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2005.938625][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2005.983080][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2006.166323][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2006.217823][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2006.433300][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2006.603362][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2007.099914][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2007.166506][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2007.402194][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2007.461364][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2007.696863][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2008.361120][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2008.389018][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2022.720567][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2022.780515][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2027.435660][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2027.463482][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2027.533800][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2027.572641][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2027.701781][ T4861] device veth0_vlan entered promiscuous mode [ 2028.060229][ T4861] device veth1_vlan entered promiscuous mode [ 2029.183694][ T4861] device veth0_macvtap entered promiscuous mode [ 2029.360420][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2029.378140][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2029.440826][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2029.579485][ T4861] device veth1_macvtap entered promiscuous mode [ 2030.380143][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2030.423720][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2030.908235][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2030.922502][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:33:55 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x82080, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x60000) 00:33:55 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'sit0\x00', {0x2}, 0x100}) 00:34:00 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) get_mempolicy(&(0x7f0000000000), 0x0, 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x7) syz_open_dev$vcsa(&(0x7f0000004140)='/dev/vcsa#\x00', 0x50000000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000004180)='/dev/vcs\x00', 0xac040, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2050) 00:34:01 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5818) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x24}}, 0x4000) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:07 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$dsp(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) 00:34:08 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xeb8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0xc00) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) fchown(r1, 0xee01, 0xffffffffffffffff) ioctl(r1, 0x5, &(0x7f00000001c0)="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") r2 = socket$can_raw(0x1d, 0x3, 0x1) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001240)=0x60, 0x800) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="6ddaf1bb2716b057ccd36460d9567528548c1e2168df56e5e8fa94ecb853b1c76dee7c3871db02c548983f48d8c01c602101b7fe3b382c63707ccebd2d60866cfe64da86dc670e37b3472ec2d81c0c071074428182f8317b951dc232a9ec393562e16fae1da5a7714a8ac5d8e819fddec0fb04e678285f3057cdb749b4", 0x7d}], 0x2, 0x101, 0x1000) 00:34:11 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000002780)=@generic, &(0x7f0000002800)=0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @rand_addr=0x64010102}, 0x1a380000, 0x1, 0xff81, 0x500, 0x277a, 0x80200000}) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0xee01) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf0ad54975c59b68c, 0x12, r1, 0xb000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000040), 0x8000, &(0x7f0000ffe000/0x2000)=nil, 0x4) 00:34:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x40, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:34:16 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x5) 00:34:19 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00d4a749", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x850) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:20 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:24 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 00:34:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x200000a, 0x30, r0, 0x83000000) 00:34:32 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:34:36 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x810, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) 00:34:40 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:45 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) 00:34:47 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delchain={0x3c, 0x65, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xffe0, 0xfff3}, {0x0, 0xa}, {0x7, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x7f09}, @TCA_RATE={0x6, 0x5, {0x20, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0xee01) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@dev}, &(0x7f0000000200)=0x14) 00:34:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) finit_module(r0, &(0x7f0000000000)='\x00', 0x3) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:52 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0xfd7, 0x0, 0x0, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x8, 0x8, 0x9}, 0x10}, 0x78) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f0000000200)=0x2, 0x2, 0x0) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:34:56 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x8, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:34:58 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0xdb9e, 0x3, 0x27}) 00:34:59 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) 00:35:04 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x1, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x100800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000080)=[{r1, 0x8048}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x4]}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:35:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x800, [0xa9, 0x549, 0x7dc5, 0x7, 0x1, 0x2]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x22000, 0x0) get_mempolicy(&(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000400000/0xc00000)=nil, 0x5) 00:35:13 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r3, 0x0, 0xee01) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x168, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_SETUP={0x104, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xf2, 0x3, "d5701520a5de77fc3274e047513b28c1ae47da868391c22b033899a01a2a51db28dc079d3de2307f5211bef4eab2974077659bc2989b65e177bc9083fbb9d2ad7af2b36d2f2590b433e3e1be63593d92f4256d8b6531af4891b8c801ebce6b7f6fb2d0e33bd38eb8c2d6177d01edb35cc2e67e331244813f84634d605f8a7a760a82afabd775c2e697df3128fe95fc52d509f7401a0b69d68b9e5ffed72a70a8944775d3c9da8a2492f74e70c330eba0344af86bd83cb2046d1df8910bba4eb980e3749258419ea7f5c04ba85e4973b17c8c5ae8a830efd1a63702c3882d1484bf36f56718661497fda1c5a1b9d5"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4050}, 0x4004050) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)={0x97c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_TID_CONFIG={0x928, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x3, 0x7, 0x0, 0x6, 0x100, 0xa6]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0xc, 0x3, 0x24, 0x4, 0xb, 0x4, 0x1b, 0xb, 0x6, 0x1a, 0x9, 0xb, 0x3, 0x18, 0x5, 0x4, 0x5, 0x48, 0x6c, 0x5, 0x4, 0x18, 0x12, 0x24]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x16, 0x4, 0x5, 0x60, 0x1, 0x9b05519f23cc2080]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x1}, {0x1, 0x5}, {0x7, 0x8}, {0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x6, 0x12}, {0x6, 0xa}, {0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x12, 0x16, 0x60, 0x60, 0x4, 0x12, 0x6, 0x6, 0xc, 0x19, 0x60, 0x12, 0xb, 0xb, 0x2, 0x1b, 0xb, 0x6, 0x18, 0x24, 0x2, 0x18, 0x6c, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x18, 0x1, 0x3, 0x2, 0x48, 0x30, 0x2, 0x48, 0x30, 0xb, 0x36, 0x24, 0x48, 0x6, 0x48, 0x0, 0x5, 0x2, 0x16, 0x3, 0x1b, 0x16, 0x4, 0x16, 0x24, 0x48, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2264, 0x3ff, 0x100, 0x0, 0x8, 0x86e1, 0x200]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x0, 0x16, 0x3, 0x6c, 0x5, 0xc, 0x6, 0x3, 0x36, 0x6, 0x24, 0x3, 0x1, 0x60, 0xc, 0x1, 0x1, 0x6c, 0x3, 0x6, 0xb, 0x60, 0x1b, 0x24, 0x2, 0x38, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0x5528, 0x5, 0xd4, 0x4, 0x54e1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}]}, {0x520, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x318, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x3}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x7}, {0x3}, {0x0, 0x3}, {0x7}, {0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x5}, {0x4}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x4}, {0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x2}, {0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x7}, {0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x6, 0x5}, {0x2}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x5}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x5, 0x2}, {}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0xa}, {0x7, 0x8}, {0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {}, {0x0, 0x6}, {0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0x8}, {0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x5, 0x2, 0x8, 0x4, 0x6, 0xfff, 0x1ff]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7c, 0x1, 0x18, 0xc, 0xc, 0x4, 0x24, 0x30, 0x3, 0x16, 0x0, 0x6c, 0x6, 0xb, 0x4, 0xb, 0x12, 0x9, 0xb, 0x4, 0x6]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x16, 0x46, 0x12, 0x6, 0x77, 0x24, 0x24, 0x12, 0x18, 0x12, 0xb, 0x2, 0x9, 0x4, 0xb, 0x6c, 0x9, 0x0, 0x9, 0x30, 0xc, 0x5, 0x12, 0x1, 0x6, 0x1b, 0xc, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf, 0x20, 0x3, 0x1000, 0x1693, 0x1fbc, 0x0, 0x6c0f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x2, 0xb, 0x18, 0x6c, 0xc, 0x12, 0x48, 0x1, 0x1, 0x48, 0x6f, 0x6, 0x24, 0x18, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x6}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2dc, 0x1ff, 0x3, 0x0, 0x5, 0x9, 0x0, 0xfff8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x8}, {0x3, 0x9}, {0x2, 0x7}, {}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x8}, {0x4, 0x1}, {0x2}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6}, {0x6, 0x3}, {0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x4}, {0x3, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0x7}, {0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x1}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x5, 0xb93, 0xc0, 0x5, 0x4, 0xfffd, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x6, 0x1b, 0x0, 0x48, 0x12, 0xf6d0b14ae73649d6, 0x9, 0xc, 0x1, 0x30, 0x6, 0x12, 0x6c, 0x6, 0x7f, 0x16, 0x5, 0x3a, 0x24, 0x24, 0x3, 0x16, 0x60, 0xb, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x9, 0x9]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x6}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x96, 0x48, 0x6, 0x36, 0x9, 0x24, 0x3, 0x1b, 0x2, 0x1b, 0x6, 0x60, 0x36, 0x1b, 0x30, 0x5, 0x6, 0x2, 0x9, 0x3, 0x24, 0x1b, 0x18]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x9, 0x1, 0xb, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfffe, 0x9, 0xc9ae, 0x5, 0x8, 0x1ff, 0x400]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x6}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x4}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x1}, {0x3, 0x2}, {}, {0x0, 0x8}, {0x7, 0x8}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x6}, {0x6, 0x8}, {0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x36, 0x60, 0x2, 0x9, 0x9, 0x1b, 0x15, 0x6, 0x18, 0x18, 0x5, 0x16, 0xb, 0x16, 0x12, 0x2, 0x60, 0x9, 0x2, 0x1b]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x7}, {0x4, 0x9}, {0x5, 0x5}, {0x2, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x6}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x3}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x30, 0x60, 0x8, 0x48, 0x18, 0x16, 0x1, 0x6, 0x16, 0x72, 0x3, 0x1, 0x24, 0x16, 0x5, 0x24, 0xc, 0x18, 0x48, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3, 0x1, 0x7, 0x686, 0xfff9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x261, 0xfc00, 0x2, 0xfe20, 0x9, 0x7f, 0xa060, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7, 0x8, 0x1, 0x80, 0xc0, 0x0, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x200, 0x89f7, 0x0, 0x400, 0x0, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x7}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x3}, {0x3, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x2, 0x8}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x5}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x7}, {0x7, 0x6}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x2, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5}, {}, {0x0, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {}, {0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x8}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0xff7f, 0x3000, 0x3, 0x8, 0x5, 0x3e8]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x9, 0x36, 0x1b, 0x12, 0x1, 0x60, 0x2, 0x12, 0xc, 0x4, 0x6, 0xc, 0x3, 0x5, 0x48, 0x30, 0x6c, 0x1b, 0xc, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x4, 0x6, 0x7ce, 0x0, 0x200, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x46, 0x30, 0x9, 0xc, 0x12, 0x30, 0x2, 0x6, 0x30, 0x18, 0x48, 0x3, 0x3, 0x1b, 0x18, 0x60, 0x30, 0x6, 0x18, 0x0, 0xd, 0x1b, 0x3, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0x401, 0x2, 0x37e, 0x1e2, 0x101]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x4]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0x6}, {0x7}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x9}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x6, 0x4}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x4, 0x36, 0x6, 0x5, 0x5, 0x1b, 0xb, 0x3, 0x6, 0x1b, 0x9, 0x3, 0x6c, 0xc, 0xd495c29a57e815d, 0xb, 0x6c, 0x5, 0x48, 0x36, 0x5, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x1, 0x24, 0x1a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe00, 0xffff, 0xde89, 0x0, 0xcab, 0x5, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x500, 0xffc1, 0x7, 0x400, 0x5, 0xfffe, 0x40]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x3}, {0x0, 0x6}, {}, {0x4, 0x1}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x4}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x6, 0x800, 0x2, 0xffff, 0x85, 0x7]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x1}, {}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x1b, 0x5, 0x16, 0x12, 0x6c, 0x18, 0x36, 0x0, 0x2, 0x1, 0x0, 0x6c, 0x12, 0x60, 0xc, 0x48, 0x1b, 0x12, 0x18, 0x36, 0x1b, 0x4, 0xc, 0x30, 0x48, 0x18, 0x9, 0x0, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x6, 0x4, 0x1b, 0xc, 0x24, 0x1, 0x12, 0x9, 0x5, 0x60, 0x6, 0x48, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb4c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}]}]}]}, 0x97c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040040) 00:35:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/225, &(0x7f00000000c0)=0xe1) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x26e1, 0x140) fchown(r1, 0x0, 0xee01) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1b, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) 00:35:25 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) socket$alg(0x26, 0x5, 0x0) get_mempolicy(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6) 00:35:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r2, 0x6e1a33a5789638ee) fchown(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1b3c471f241823bc, 0x84) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x80000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = getgid() syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x2000, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner'}}, {@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, ']}}-#:&$.(\''}}, {@dont_measure='dont_measure'}]}}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r0, r5, r0, r0, r2, r3, r1], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r7, 0x0, 0xee01) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7e0bde85a95f144cb20008", @ANYRES16=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x40) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:35:28 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x80000, &(0x7f0000ffc000/0x1000)=nil, 0x4) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 2130.668943][ T5222] fuse: Bad value for 'fd' [ 2132.388123][ T5224] fuse: Bad value for 'fd' 00:35:32 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa0040, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0x0) 00:35:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) getsockname$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x28}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x891a7b83600d2a68}, 0x4000804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @loopback}}) fchown(r2, 0x0, 0xee01) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x4, 0x0, 0x7}) 00:35:36 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x620400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0xee01) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r3, 0x0, 0xee01) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) close(r0) fchown(r4, 0x0, 0xee01) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r5, 0x6e1a33a5789638ee) fchown(r5, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000000c0)) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) get_mempolicy(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000ffd000/0x2000)=nil, 0x0) 00:35:42 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5) 00:35:44 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x22}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac0d]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x40081) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x2000)=nil) 00:35:47 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) mount_setattr(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x9900, &(0x7f0000000140)={0x88, 0x0, 0x0, {r2}}, 0x20) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x5, 0x28}) 00:35:53 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) 00:35:58 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x4012, 0xffffffffffffffff, 0xbf3) [ 2163.605995][ T3153] device hsr_slave_0 left promiscuous mode [ 2163.711206][ T3153] device hsr_slave_1 left promiscuous mode [ 2163.938002][ T3153] device veth1_macvtap left promiscuous mode [ 2163.939827][ T3153] device veth0_macvtap left promiscuous mode [ 2163.942299][ T3153] device veth1_vlan left promiscuous mode [ 2163.958418][ T3153] device veth0_vlan left promiscuous mode [ 2177.241947][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2177.588243][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.555968][ T3153] bond0 (unregistering): Released all slaves [ 2204.532296][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2204.701183][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2211.913309][ T5264] device hsr_slave_0 entered promiscuous mode [ 2211.979297][ T5264] device hsr_slave_1 entered promiscuous mode [ 2221.223604][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.638884][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2221.688925][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2226.339630][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2226.382772][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2226.510741][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2226.521795][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2226.680559][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2226.903756][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2227.663001][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2227.709857][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2228.056881][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2228.092802][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2228.306890][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2228.903325][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2228.907697][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2242.629084][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2242.691279][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2247.647753][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2247.682761][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2247.766376][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2247.800859][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2247.942816][ T5264] device veth0_vlan entered promiscuous mode [ 2248.312895][ T5264] device veth1_vlan entered promiscuous mode [ 2249.215435][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2249.257737][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2249.393605][ T5264] device veth0_macvtap entered promiscuous mode [ 2249.619603][ T5264] device veth1_macvtap entered promiscuous mode [ 2249.732494][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2249.752507][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2250.340432][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2250.392124][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2250.621367][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2250.687689][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:37:41 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 00:37:41 executing program 1: get_mempolicy(&(0x7f0000000180), 0x0, 0x3fd, &(0x7f0000fdf000/0x4000)=nil, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000000, 0x810, 0xffffffffffffffff, 0x10000000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r0, 0x6e1a33a5789638ee) fchown(r0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x8010, r0, 0x5e89c000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x0, 0xfffffffffffff745}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) syz_io_uring_setup(0x7ec9, &(0x7f0000000000)={0x0, 0x9b55, 0x20, 0x3, 0x3c4, 0x0, r2}, &(0x7f0000e1c000/0x3000)=nil, &(0x7f0000d17000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:37:45 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @rand_addr=0x64010100}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048041}, 0x4000004) get_mempolicy(&(0x7f0000000000), 0x0, 0x103, &(0x7f0000ffc000/0x3000)=nil, 0x0) 00:37:47 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x810, 0xffffffffffffffff, 0x8) 00:37:49 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x4) 00:37:52 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7) 00:37:53 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25370000000800270001000000050019010a0000000800a100d36200000800a100090000000800570074030000080057000200000008009f0000000000080022017c01000005001808002700020000000500180115000000080057000600000008005700089500000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 00:37:57 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x71fe, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:37:58 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd0, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x98, 0xac, "afe1c829259f8de3bd25d32c146d9af6db28f4368c9e51f51e62e9dcc87e3f2fcb66f167f8dfcb672ecad88f97e3d409d75f1d5a5a8bd056ddd2c149c732293e91c08fed8a63ed355a4e50f192eaf3934e592ce08b03cb06b6ab1aa5525312ae27faf090d575f9be48daf770f6020ce4341206c0fcf1e37b02a04e5ca62ed2007dcfc1e8adf4c3cdad5504395ec19cd1c609d122"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x0, 0x5, 0x5, 0x9]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1000}, 0x40) get_mempolicy(&(0x7f0000000100), 0x0, 0x9, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:38:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x3f, 0x1, 0x2}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x41, 0x20, 0x27, 0xff, 0x5, 0x80, 0xe5, 0x9, 0x8, 0x0, 0x20, 0x20, 0x1, 0x63}, 0xe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x638}, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4640, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xf4, "d87ae540b4186c5221e0a5f1d3e09699fbf4cbbc2ea8489b057ab6b2ff8f9d628f2c761d66216161878fc63402b30cedb3ecc9bb7e2d482cbbba2772df3a4e73a99e3c320e46727dff3073f30bbd1796dcc02927c45695ae9d6222746aa6d10e770356354e1d8d30af59da452de873766b036fe40b946ab40c25f93b146976aed7bc23a2ae54d86f5a0cfd9d27d32745cdc407035a808fd6678ecd406c57269205065fa76ca19be39254894fbb52b7dcb95292d8b1ab3bb3d118992f68e940fb1aaff66bd8385bd8f952326e75b82bc39741165580381695e2a695b161f887633ca4692ff81c07180c83fde86b6473a048fc4b74"}, &(0x7f0000000080)=0xfc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x40d0, 0x0, 0xffffffff, 0x8, r3}, 0x10) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000002c0)=0x1) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:38:07 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x11, 0xffffffffffffffff, 0x6) 00:38:08 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10400, 0x128) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xed, 0x845c1) openat(r1, &(0x7f0000000040)='./file1\x00', 0x300, 0x4) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x5}, 0x16, 0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x7, 0x3, 0x3ff}) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/4096, 0x1000) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r2, 0x6e1a33a5789638ee) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r3, 0x6e1a33a5789638ee) fchown(r3, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r4, 0x6e1a33a5789638ee) fchown(r4, 0x0, 0xffffffffffffffff) fallocate(r4, 0x885f96c5abd38cd, 0x0, 0x8) fchown(r2, 0x0, 0xffffffffffffffff) fchmod(r2, 0x4) 00:38:14 executing program 1: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x3f, 0x6, 0x1}, 0xc) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:38:17 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x0, 0x4, 0x7, 0x5}, 'syz1\x00', 0x4a}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) 00:38:20 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) 00:38:27 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, 0xb) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 00:38:31 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x4) [ 2315.591067][ T3153] device hsr_slave_0 left promiscuous mode [ 2315.651022][ T3153] device hsr_slave_1 left promiscuous mode [ 2316.085021][ T3153] device veth1_macvtap left promiscuous mode [ 2316.097301][ T3153] device veth0_macvtap left promiscuous mode [ 2316.102717][ T3153] device veth1_vlan left promiscuous mode [ 2316.142378][ T3153] device veth0_vlan left promiscuous mode [ 2329.463344][ T3153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2329.788203][ T3153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2331.909645][ T3153] bond0 (unregistering): Released all slaves [ 2356.223652][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2356.363057][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2363.387959][ T5574] device hsr_slave_0 entered promiscuous mode [ 2363.439175][ T5574] device hsr_slave_1 entered promiscuous mode [ 2373.001234][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2373.366544][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2373.417862][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2378.172744][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2378.201329][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2378.428872][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2378.486724][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2378.643673][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2378.870622][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2379.403061][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2379.469900][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2379.729669][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2379.779189][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2379.937047][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2380.601793][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2380.613201][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2394.851401][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2394.909390][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2400.019187][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2400.069700][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2400.147604][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2400.203125][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2400.280650][ T5574] device veth0_vlan entered promiscuous mode [ 2400.665718][ T5574] device veth1_vlan entered promiscuous mode [ 2401.919732][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2401.957032][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2402.189313][ T5574] device veth0_macvtap entered promiscuous mode [ 2402.370667][ T5574] device veth1_macvtap entered promiscuous mode [ 2403.071878][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2403.113889][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2403.342943][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2403.419445][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:40:07 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x82000000) 00:40:07 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0xfffffffffffffffe, &(0x7f0000ffd000/0x2000)=nil, 0x4) syz_io_uring_setup(0x3f0e, &(0x7f0000000000)={0x0, 0x6d77, 0x4, 0x0, 0x309}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/71, 0x47}], 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x1}, 0x5) 00:40:10 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) 00:40:14 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:40:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x110, 0xffffffffffffffff, 0x8000000) io_setup(0x3, &(0x7f0000000340)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x40001, 0x0) io_submit(r1, 0x1, &(0x7f0000001600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r4, 0x0, 0xee01) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x81, 0x80000) r6 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x70, 0x4, 0x4, 0x9, 0x4, 0x0, 0x2, 0x28, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0), 0x3}, 0x104c0, 0x2, 0x0, 0x4, 0x100, 0x5, 0xffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840)='/dev/zero\x00', 0x408000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x170, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20222a8f, 0x5a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f188bd3a0990bb8289db77a0c9eb0dd34ec55d544addd53"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13be1ac1d7b760b4598593df3e61c839c93b1d8df5370b86"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1123ba4e210b5331532fff221de097936b1653b1036a5296"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6b39b5e53b56c8dfb1f17ae641af735c7440c65e36db2abb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ae3afe2b3fc61592723a864eceda994a3e63ee9d7eae77d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) io_submit(r1, 0x4, &(0x7f0000000500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xfff9, r3, &(0x7f0000000040)="6022cbca970be5c89f3d75bd88c37fff49672057a1d383451a34b80f2a635611ad8c9c6e1d173b3fa27febddb3670e49830521a1bcf2803d47778477955bc9c2530f6eea95f6014f5a3e399ccc08dff679e0ccc7fa3193c519c330255ebefd7d3400ce4a15c5711af51446d3bf623faaab8d7b49f25c53a4e5f5a92ed306751c86543bc8653a7c67c22d9fad501942799baf44074187c2ba3f8cb96ba6ecbe95cdaf9ad3455d9b3f4e399dd222c2ca4dea8e39fca534cb2c8e01ddbd01e1832b24649035fd7bd404fc50b3bf89e90d46d393c74ad00790", 0xd7, 0xc9, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)="d5deb317e60da1b84b6ce584adc648f93fa9fe4f50ee0f03e2204c7928649d1b4f1bf2415fd724cbd7eaba3dff5b47edcb4c53a13b7ff8d9693c1f1018c5d16a04032400ad6aabfe3dab4f0eca66c68a57c170e3ef573f293b117b7ca07ec56ae0e13ece1cb3e4806450e8686c3b5514d6a2e692ab75239e8f92752f0a87cffc", 0x80, 0x100000001, 0x0, 0x2, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xefd4, r5, &(0x7f00000002c0)="f3db2a89df417b38b9a1eac6eefd568c5286220f706f9aaa8d4ae2976bf88d2fb1795f6f34e1a674ca074b2f4a432dc8772566caafe7989ecfacfe0443d1bf6ff01274f8d51dbe0b43f14497b049e7038f933e0566849439be65ce5c27cf44b179c2a9640d6ac373d455d396b969d1ce5ed4d69bd9e0116829a26e4b1c697563beb9c227eab28246baeb", 0x8a, 0x100000001}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x8263, r6, &(0x7f0000000480)="1d50136dcfd5", 0x6, 0x100, 0x0, 0x1}]) 00:40:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize'}}], [{@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '&-*$'}}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) openat(r1, &(0x7f0000000280)='./file0\x00', 0x1, 0x175) fchown(r0, 0x0, 0xee01) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) get_mempolicy(&(0x7f0000000100), 0x0, 0xfffffffffffffff8, &(0x7f0000ffc000/0x1000)=nil, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 00:40:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0xee01) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb22, 0x64}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x845}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1) [ 2423.422952][ T5821] fuse: blksize only supported for fuseblk [ 2423.848706][ T5821] fuse: blksize only supported for fuseblk 00:40:25 executing program 1: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x507782, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x2000)=nil}) 00:40:27 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 00:40:30 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xdd7, &(0x7f0000000000), 0x111, 0x2}}, 0x20) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:40:33 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x220101, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r1, 0x0, 0xee01) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r2, 0x0, 0xee01) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:40:34 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2000000000009, &(0x7f0000ffc000/0x4000)=nil, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x292000, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x30, r0, 0xa23) 00:40:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2508000000140008007767300000000000000000000000000008001700", @ANYRES32=r0, @ANYBLOB="5806c216d5717531a37e9410bd76c3a5de102d865fd462788462b433573304e939b90f"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4) 00:40:42 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x7) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x100000001) remap_file_pages(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000002, 0x7, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0xfffffffe, 0x5, {{0x17, 0x4, 0x1, 0x31, 0x5c, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x6c, 0x3, 0x9, [{@remote, 0x101}, {@local, 0x200}, {@rand_addr=0x64010101, 0x68}, {@remote, 0x200}, {@private=0xa010101, 0x800}, {@remote, 0x4}]}, @timestamp={0x44, 0x14, 0x63, 0x0, 0xd, [0xfffffff8, 0x7, 0x0, 0x6]}]}}}}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(r5, &(0x7f0000000000)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="70010000db79f8b65b32a0e57e9ea593a1cc66803179ad68167ea075dd6f6f605293ff786ef2b838ee43f073afec6621f3b3307bd8bb3bfb4ca11d1a22d74c17f5be", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf25190000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000300030000001400020077673200000000000000000000000000080003000100000014000200697036746e6c30000000000000000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000000200001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="6400018008000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002006d6163766c616e310000000000000000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x11}, 0x0) fchown(r1, 0x0, 0xee01) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x1, 0x0, 0x36}) [ 2448.278321][ T5853] mmap: syz-executor.0 (5853) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:40:49 executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', 0x0}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00', r1) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000400)={0x6, 0x1f, 0x7}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf2505070000000000000000000006001c0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x20008009) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:40:51 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = syz_io_uring_setup(0x29b4, &(0x7f0000000000)={0x0, 0x5ac8, 0x0, 0x1, 0x96}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x51e4, &(0x7f0000000180)={0x0, 0x2109, 0x2, 0x0, 0x8e, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x162, &(0x7f0000000280)={0x0, 0x2634, 0x10, 0x1, 0x2d1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0xfffffffffffffff8, &(0x7f0000000940)=[{&(0x7f0000000380)="171c8002e67bae3273986d98a360087fa1", 0x11}, {&(0x7f00000003c0)="76402b3a5b1324f179a4eb27bdcb3e8a03f37076c5d39d2c7be4dd3394a11b5aa167c5221272b8d48882662c25ea8634237f6d96d005e46fd93eee57a01435cff7b59fed781037cf12ae598fa30bff67871c084cc71c6d32f09ba27cbf8a80251ffeb3871b92b72695e35cbd06c93fa1f9f2e6ceb63ae0975c7acc446f142d8fcbcee283fa30b224d3b9ed4841f0e5d1b9a1d9955af2559e8b98741916d1f0cb577e2e9d87f657", 0xa7}, {&(0x7f0000000480)="7940c86ce57b1facb19f55bced03a259fe11e995ebc6348e8e45dc020cf85ba738120b4029c2a3570e25b1bcfb6a2d9cb891310c629b85268530bee628b93cef738eeee0f028c8b75bd472065647e987d727355494f07e7efb29135862a8e4875c51bdd0b4a0c71a13750003353c0a551de3dd19fedf708291160a669f04acac5e8a9bab20bcd07fd635832006b74cf7741f65132e76a8d26bd4b8c4b814ebb2f92953ecc252ea1a8deb046dce1fdddb88f878c7b3d804aee1582f070f24ab380ab046cdeec181cffaf50c0cf09c8ab574b078", 0xd3}, {&(0x7f0000000580)="924e24cf61f91be4a3726becea1abe2c5efedda79432e022e760afd3b3e22ce78e01ee55fb1cd2151c0cee53300d396271ebba048a3ac8c7d3d5e8efc34db274cb672e5c93917a72aae725c3d6ca6ec993bb63d04f8ff060b64e9fc06b4235a4d445160ed6c772d1bc20335161540b84782e291c14f582e445ed3b52888a170a98f7021074d5efda1c87cbd263bba6a35bae773b15778cfbf12303a8c352d806518ce9b84c88a6eebeb7a286e702e39bbe6d44b401233777975a51eb65c7d2c8cf345f608169ee52ebc6088c3be61614f25605de6c255c5b75f3329b75339338921654e8ff295e48c3c90245c4b652b6cb75", 0xf2}, {&(0x7f0000000680)="cd338a09886b9e516227902847f10c67c4e1791ef1e1999afed69c71ffe5f5d44668f52292ca0b0020eab6e1", 0x2c}, {&(0x7f00000006c0)="b7cc02f2d040f053dfb24ab304974db571684ec3b1be88aedeb03358602472d59742615eaa3093eeb803efac66b136e5967429d6ec762c94d7045a3998763f5d0102b4c41aa497e0b05014ef45aedb71012b66fe6a31", 0x56}, {&(0x7f0000000740)="521f6202a6ccb0126c531eb8be2e04bf6e0637b64a9657cd61d891341a99b5684e81db", 0x23}, {&(0x7f0000000780)="533d226fe8a22a360fe8ec157b5e5fb19a7447f3d48b7748d3934a9e69c1449d029a2add73660ae840cb56ef9a7f2b09d267d7b0d8d9c2ed3ee1d0d69492ee801937cece40e2d145f06b2ad45b53a68b55ec3566699ee1ace05fc395c2395d8c2f0ecbd1df366713074a711ef80fff7c752c6d7c2d71921046adc8757e6fdcd39eb98d5a54a81cbc1df7c272d4d06ee9f0c386ebe0ce5839691a928b4e61e5f07dbc808cfafbbb6fcf7bcc72b5275a197fe288deeb131fe00b9132f681fa8b8197deb258cc49586217ae9630b838761ed390e1249b24ca784ac3dd38a3f13303d68dd341820a58846a575cb4914ebcaa57ebdb33", 0xf4}, {&(0x7f0000000880)="adf25171e2d19fe5a72ae847d4827959de707fd618159795ba44e32e82263642eaa1521e90eac1746e8762e719aff5bec8aa279fce1697ea60b1f71c0e2261a25d71cae3608892813b7da856b1cd60a49551fa8874314309299590c4cac063e67a0843433125e73c5fd8dd92232520406894e3425e542f7d118e534543693a885379ce1d3aee2c6f60fdde1bbf68f47a1f4c2cc3dc68d574bb40c415e8d048dab7", 0xa1}], 0x9, 0x3, 0x1}, 0xffffff80) 00:40:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x2) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) [ 2460.146190][ T5870] [ 2460.146921][ T5870] ==================================== [ 2460.147446][ T5870] WARNING: iou-sqp-5863/5870 still has locks held! [ 2460.148227][ T5870] 5.12.0-rc5-syzkaller #0 Not tainted [ 2460.148948][ T5870] ------------------------------------ [ 2460.149877][ T5870] 1 lock held by iou-sqp-5863/5870: [ 2460.151332][ T5870] #0: ffffffe00666f470 (&sqd->lock){+.+.}-{3:3}, at: io_sq_thread+0xb28/0xc0e [ 2460.201816][ T5870] [ 2460.201816][ T5870] stack backtrace: [ 2460.202908][ T5870] CPU: 0 PID: 5870 Comm: iou-sqp-5863 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.204370][ T5870] Hardware name: riscv-virtio,qemu (DT) [ 2460.206076][ T5870] Call Trace: [ 2460.206886][ T5870] [] walk_stackframe+0x0/0x23c [ 2460.208008][ T5870] [] dump_backtrace+0x40/0x4e [ 2460.209103][ T5870] [] show_stack+0x22/0x2e [ 2460.210148][ T5870] [] dump_stack+0x148/0x1d8 [ 2460.211219][ T5870] [] debug_check_no_locks_held+0xc8/0xca [ 2460.212403][ T5870] [] get_signal+0x108a/0x14ba [ 2460.213614][ T5870] [] io_sq_thread+0x7e0/0xc0e [ 2460.215410][ T5870] [] ret_from_exception+0x0/0x14 00:40:58 executing program 0: keyctl$get_keyring_id(0x0, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:40:59 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0xa) 00:41:01 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4000, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa000) 00:41:01 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x10, 0x40, 0x8, 0x0, {{0x47, 0x4, 0x1, 0x4, 0x11c, 0x67, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, {[@lsrr={0x83, 0x1b, 0xc4, [@remote, @local, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x44, 0xdd, 0x3, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@remote, 0x7}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x5a1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @generic={0x89, 0x10, "4adc8f7b6761a2b709b4d86147e6"}, @end, @ssrr={0x89, 0x17, 0x3c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @multicast2, @multicast2]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x9, "057081a8ec6619"}, {0x1, 0x2}, {0x2, 0x10, "f59a630aeb27ed2b2d897406c135"}, {0x0, 0xb, "06fda775a13c27db18"}]}, @timestamp_addr={0x44, 0x54, 0x3f, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x400}, {@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}, {@remote, 0xffff}, {@private=0xa010101, 0x7}, {@multicast2, 0x7c}, {@empty, 0x4}, {@local, 0x4}, {@rand_addr=0x64010101, 0x7f}, {@rand_addr=0x64010100, 0x5}]}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r3, 0x0, 0xee01) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r3) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4) 00:41:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r4, 0x0, 0xee01) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r6, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3f, 0x1}], "be85070004f1ea18"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040812}, 0x24000840) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x82000000) 00:41:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r0) r1 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='**{[\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) 00:41:12 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:41:13 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000ffd000/0x2000)=nil, 0x7655c3cf33af0f80) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x2000)=nil) 00:41:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) fchmod(r1, 0x6e1a33a5789638ee) fchown(r1, 0x0, 0xffffffffffffffff) close(r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\b\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="04002bbd7000fe030000000000000000000009410000001c0018000000076574683a76657468315f766972745f7769666900"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x1) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:41:15 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x4) 00:41:16 executing program 1: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x36, 0x38, 0x15, 0x18, 0x1, 0x1f, 0x4, 0xe4, 0xffffffffffffffff}) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0], 0x4) 00:41:18 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000040), 0x0, 0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x4) 00:41:19 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4) 00:41:21 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000000)=""/220, 0xdc) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:41:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], 0x10) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) 00:41:24 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) mmap$usbfs(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x7f) syncfs(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) 00:41:25 executing program 1: get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0xffff, {}, 0x4, 0x9}, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r4, 0x0, 0xee01) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect(r5, &(0x7f0000000000)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@getchain={0x5c, 0x66, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0x6}, {0x8, 0x6}, {0xfff3, 0xfff2}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xffff7fff}, {0x8, 0xb, 0xd6}, {0x8, 0xb, 0x66}, {0x8, 0xb, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6e7d64138a65e85a}, 0x20000000) 00:41:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) get_mempolicy(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0xee01) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r0, 0x82000000) 00:41:27 executing program 1: mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xd6000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x6) VM DIAGNOSIS: 18:24:20 Registers: info registers vcpu 0 pc ffffffe0003fbaec mhartid 0000000000000000 mstatus 00000000000001a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe0000c9cc0 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe00042ba72 x2/sp ffffffe0211cbc50 x3/gp ffffffe004588b08 x4/tp ffffffe00868df00 x5/t0 ffffffc400e5f035 x6/t1 0000000056855bf5 x7/t2 0000003fff9c01d7 x8/s0 ffffffe0211cbc50 x9/s1 ffffffe005ac2468 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 1ffffffc010d1be1 x13/a3 ffffffe0000d8b8e x14/a4 0000000000000000 x15/a5 ffffffe005ac2500 x16/a6 0000000000f00000 x17/a7 ffffffe0211cba70 x18/s2 0000000000000000 x19/s3 0000000000000000 x20/s4 ffffffe00b191728 x21/s5 ffffffe00458c0d0 x22/s6 0000000000000000 x23/s7 0000000000008000 x24/s8 ffffffe005860da0 x25/s9 ffffffe005ac2468 x26/s10 0000000000000010 x27/s11 ffffffe00b191728 x28/t3 000000007a180000 x29/t4 ffffffc404239760 x30/t5 ffffffc404239765 x31/t6 0000000000000003 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe0000e34be mhartid 0000000000000001 mstatus 00000000000001a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe0003b2e6c mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe000a86a20 x2/sp ffffffe0216bf980 x3/gp ffffffe004588b08 x4/tp ffffffe007858000 x5/t0 ffffffe0042635a0 x6/t1 ffffffc400a0261a x7/t2 0000000000000000 x8/s0 ffffffe0216bfb60 x9/s1 ffffffe004263548 x10/a0 0000000000000000 x11/a1 ffffffe007859000 x12/a2 0000000000000000 x13/a3 ffffffe0000df80a x14/a4 0000000000000003 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe0050130d4 x18/s2 0000000000000000 x19/s3 0000000000000000 x20/s4 0000000000000005 x21/s5 0000000000000080 x22/s6 0000000000000000 x23/s7 ffffffe0216bfac0 x24/s8 ffffffe00458c0d0 x25/s9 ffffffe0216bfaa8 x26/s10 ffffffe004588690 x27/s11 0000000000000005 x28/t3 0000000000000031 x29/t4 ffffffc400a0261a x30/t5 ffffffc400a0261b x31/t6 ffffffe0050130d5 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000