syzkaller login: [ 270.915352][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 270.957691][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 270.998799][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 290.357663][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:23409' (ECDSA) to the list of known hosts. 1970/01/01 00:05:50 fuzzer started 1970/01/01 00:06:02 dialing manager at localhost:38841 [ 369.450397][ T2031] cgroup: Unknown subsys name 'net' [ 370.635239][ T2031] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:10 syscalls: 2918 1970/01/01 00:06:10 code coverage: enabled 1970/01/01 00:06:10 comparison tracing: enabled 1970/01/01 00:06:10 extra coverage: enabled 1970/01/01 00:06:10 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:10 setuid sandbox: enabled 1970/01/01 00:06:10 namespace sandbox: enabled 1970/01/01 00:06:10 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:10 fault injection: enabled 1970/01/01 00:06:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:10 net packet injection: enabled 1970/01/01 00:06:10 net device setup: enabled 1970/01/01 00:06:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:10 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:10 USB emulation: enabled 1970/01/01 00:06:10 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:10 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:10 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:10 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:14 fetching corpus: 50, signal 29906/33434 (executing program) 1970/01/01 00:06:18 fetching corpus: 100, signal 40518/45521 (executing program) 1970/01/01 00:06:20 fetching corpus: 149, signal 50984/57288 (executing program) 1970/01/01 00:06:24 fetching corpus: 199, signal 59541/67071 (executing program) 1970/01/01 00:06:26 fetching corpus: 248, signal 67397/76032 (executing program) 1970/01/01 00:06:29 fetching corpus: 298, signal 74623/84258 (executing program) 1970/01/01 00:06:31 fetching corpus: 347, signal 78419/89147 (executing program) 1970/01/01 00:06:34 fetching corpus: 397, signal 82303/94089 (executing program) 1970/01/01 00:06:37 fetching corpus: 447, signal 86526/99251 (executing program) 1970/01/01 00:06:39 fetching corpus: 497, signal 89261/103029 (executing program) 1970/01/01 00:06:44 fetching corpus: 547, signal 92322/107035 (executing program) 1970/01/01 00:06:46 fetching corpus: 597, signal 94757/110457 (executing program) 1970/01/01 00:06:49 fetching corpus: 647, signal 96865/113523 (executing program) 1970/01/01 00:06:51 fetching corpus: 697, signal 99478/117023 (executing program) 1970/01/01 00:06:53 fetching corpus: 747, signal 101624/120017 (executing program) 1970/01/01 00:06:55 fetching corpus: 797, signal 104083/123256 (executing program) 1970/01/01 00:07:00 fetching corpus: 847, signal 107121/126916 (executing program) 1970/01/01 00:07:02 fetching corpus: 897, signal 108932/129558 (executing program) 1970/01/01 00:07:05 fetching corpus: 945, signal 110828/132220 (executing program) 1970/01/01 00:07:08 fetching corpus: 995, signal 113094/135205 (executing program) 1970/01/01 00:07:10 fetching corpus: 1045, signal 114547/137396 (executing program) 1970/01/01 00:07:13 fetching corpus: 1095, signal 117230/140575 (executing program) 1970/01/01 00:07:15 fetching corpus: 1145, signal 118760/142878 (executing program) 1970/01/01 00:07:19 fetching corpus: 1195, signal 120881/145541 (executing program) 1970/01/01 00:07:22 fetching corpus: 1244, signal 123003/148245 (executing program) 1970/01/01 00:07:23 fetching corpus: 1294, signal 124932/150727 (executing program) 1970/01/01 00:07:26 fetching corpus: 1344, signal 126685/153073 (executing program) 1970/01/01 00:07:29 fetching corpus: 1394, signal 128413/155373 (executing program) 1970/01/01 00:07:32 fetching corpus: 1443, signal 130782/158113 (executing program) 1970/01/01 00:07:34 fetching corpus: 1493, signal 132382/160218 (executing program) 1970/01/01 00:07:37 fetching corpus: 1543, signal 134440/162649 (executing program) 1970/01/01 00:07:39 fetching corpus: 1593, signal 135551/164339 (executing program) 1970/01/01 00:07:41 fetching corpus: 1642, signal 136522/165902 (executing program) 1970/01/01 00:07:44 fetching corpus: 1692, signal 137951/167824 (executing program) 1970/01/01 00:07:48 fetching corpus: 1741, signal 139201/169564 (executing program) 1970/01/01 00:07:50 fetching corpus: 1791, signal 140564/171335 (executing program) 1970/01/01 00:07:53 fetching corpus: 1841, signal 141964/173151 (executing program) 1970/01/01 00:07:55 fetching corpus: 1891, signal 142767/174480 (executing program) 1970/01/01 00:07:59 fetching corpus: 1941, signal 143963/176114 (executing program) 1970/01/01 00:08:03 fetching corpus: 1991, signal 145597/178017 (executing program) 1970/01/01 00:08:08 fetching corpus: 2040, signal 146589/179466 (executing program) 1970/01/01 00:08:12 fetching corpus: 2089, signal 149418/182119 (executing program) 1970/01/01 00:08:14 fetching corpus: 2139, signal 150628/183629 (executing program) 1970/01/01 00:08:17 fetching corpus: 2189, signal 152139/185339 (executing program) 1970/01/01 00:08:19 fetching corpus: 2239, signal 153168/186704 (executing program) 1970/01/01 00:08:21 fetching corpus: 2289, signal 154034/187991 (executing program) 1970/01/01 00:08:23 fetching corpus: 2339, signal 155241/189472 (executing program) 1970/01/01 00:08:26 fetching corpus: 2389, signal 156282/190815 (executing program) 1970/01/01 00:08:28 fetching corpus: 2439, signal 157146/192040 (executing program) 1970/01/01 00:08:31 fetching corpus: 2489, signal 158507/193485 (executing program) 1970/01/01 00:08:34 fetching corpus: 2538, signal 159536/194748 (executing program) 1970/01/01 00:08:37 fetching corpus: 2588, signal 160567/195951 (executing program) 1970/01/01 00:08:40 fetching corpus: 2638, signal 161553/197160 (executing program) 1970/01/01 00:08:43 fetching corpus: 2688, signal 162739/198474 (executing program) 1970/01/01 00:08:45 fetching corpus: 2737, signal 163930/199731 (executing program) 1970/01/01 00:08:47 fetching corpus: 2787, signal 165784/201383 (executing program) 1970/01/01 00:08:50 fetching corpus: 2837, signal 166872/202547 (executing program) 1970/01/01 00:08:52 fetching corpus: 2887, signal 168065/203788 (executing program) 1970/01/01 00:08:55 fetching corpus: 2937, signal 169551/205168 (executing program) 1970/01/01 00:08:58 fetching corpus: 2987, signal 170354/206189 (executing program) 1970/01/01 00:09:00 fetching corpus: 3036, signal 171317/207258 (executing program) 1970/01/01 00:09:03 fetching corpus: 3086, signal 172289/208319 (executing program) 1970/01/01 00:09:05 fetching corpus: 3135, signal 172961/209222 (executing program) 1970/01/01 00:09:07 fetching corpus: 3185, signal 173661/210107 (executing program) 1970/01/01 00:09:09 fetching corpus: 3235, signal 174493/211061 (executing program) 1970/01/01 00:09:13 fetching corpus: 3285, signal 175165/211935 (executing program) 1970/01/01 00:09:16 fetching corpus: 3335, signal 176362/213036 (executing program) 1970/01/01 00:09:21 fetching corpus: 3385, signal 177264/213990 (executing program) 1970/01/01 00:09:23 fetching corpus: 3434, signal 177999/214856 (executing program) 1970/01/01 00:09:25 fetching corpus: 3483, signal 178601/215653 (executing program) 1970/01/01 00:09:28 fetching corpus: 3533, signal 179533/216561 (executing program) 1970/01/01 00:09:31 fetching corpus: 3583, signal 180255/217370 (executing program) 1970/01/01 00:09:35 fetching corpus: 3633, signal 181702/218480 (executing program) 1970/01/01 00:09:37 fetching corpus: 3683, signal 182227/219105 (executing program) 1970/01/01 00:09:41 fetching corpus: 3733, signal 183021/219879 (executing program) 1970/01/01 00:09:44 fetching corpus: 3783, signal 183833/220669 (executing program) 1970/01/01 00:09:47 fetching corpus: 3833, signal 184541/221403 (executing program) 1970/01/01 00:09:51 fetching corpus: 3883, signal 185213/222133 (executing program) 1970/01/01 00:09:52 fetching corpus: 3933, signal 185734/222792 (executing program) 1970/01/01 00:09:55 fetching corpus: 3983, signal 186298/223448 (executing program) 1970/01/01 00:09:58 fetching corpus: 4032, signal 187217/224238 (executing program) 1970/01/01 00:10:00 fetching corpus: 4082, signal 187965/224932 (executing program) 1970/01/01 00:10:02 fetching corpus: 4132, signal 188435/225476 (executing program) 1970/01/01 00:10:05 fetching corpus: 4182, signal 188978/226114 (executing program) 1970/01/01 00:10:08 fetching corpus: 4232, signal 189839/226804 (executing program) 1970/01/01 00:10:10 fetching corpus: 4281, signal 190593/227445 (executing program) 1970/01/01 00:10:13 fetching corpus: 4330, signal 191213/228096 (executing program) 1970/01/01 00:10:16 fetching corpus: 4380, signal 191967/228716 (executing program) 1970/01/01 00:10:20 fetching corpus: 4430, signal 192500/229291 (executing program) 1970/01/01 00:10:24 fetching corpus: 4480, signal 193105/229868 (executing program) 1970/01/01 00:10:28 fetching corpus: 4529, signal 193736/230418 (executing program) 1970/01/01 00:10:29 fetching corpus: 4579, signal 194544/231054 (executing program) 1970/01/01 00:10:32 fetching corpus: 4629, signal 195341/231650 (executing program) 1970/01/01 00:10:36 fetching corpus: 4679, signal 196156/232285 (executing program) 1970/01/01 00:10:39 fetching corpus: 4728, signal 196789/232797 (executing program) 1970/01/01 00:10:42 fetching corpus: 4777, signal 197830/233364 (executing program) 1970/01/01 00:10:44 fetching corpus: 4827, signal 198476/233854 (executing program) 1970/01/01 00:10:47 fetching corpus: 4877, signal 198961/234329 (executing program) 1970/01/01 00:10:51 fetching corpus: 4927, signal 199557/234776 (executing program) 1970/01/01 00:10:53 fetching corpus: 4977, signal 200308/235243 (executing program) 1970/01/01 00:10:56 fetching corpus: 5027, signal 200725/235645 (executing program) 1970/01/01 00:10:57 fetching corpus: 5075, signal 201119/236060 (executing program) 1970/01/01 00:11:00 fetching corpus: 5125, signal 201823/236510 (executing program) 1970/01/01 00:11:03 fetching corpus: 5175, signal 202259/236942 (executing program) 1970/01/01 00:11:05 fetching corpus: 5225, signal 202761/237349 (executing program) 1970/01/01 00:11:07 fetching corpus: 5275, signal 203273/237752 (executing program) 1970/01/01 00:11:08 fetching corpus: 5325, signal 203664/238132 (executing program) 1970/01/01 00:11:12 fetching corpus: 5375, signal 204187/238514 (executing program) 1970/01/01 00:11:15 fetching corpus: 5425, signal 204752/238890 (executing program) 1970/01/01 00:11:18 fetching corpus: 5475, signal 205347/239261 (executing program) 1970/01/01 00:11:20 fetching corpus: 5524, signal 205794/239591 (executing program) 1970/01/01 00:11:22 fetching corpus: 5574, signal 206354/239916 (executing program) 1970/01/01 00:11:26 fetching corpus: 5624, signal 206768/240246 (executing program) 1970/01/01 00:11:29 fetching corpus: 5673, signal 207496/240581 (executing program) 1970/01/01 00:11:31 fetching corpus: 5723, signal 208209/240930 (executing program) 1970/01/01 00:11:33 fetching corpus: 5772, signal 208883/241210 (executing program) 1970/01/01 00:11:35 fetching corpus: 5822, signal 209394/241493 (executing program) 1970/01/01 00:11:38 fetching corpus: 5872, signal 210261/241774 (executing program) 1970/01/01 00:11:41 fetching corpus: 5922, signal 210621/242041 (executing program) 1970/01/01 00:11:43 fetching corpus: 5971, signal 211167/242295 (executing program) 1970/01/01 00:11:45 fetching corpus: 6021, signal 211529/242353 (executing program) 1970/01/01 00:11:47 fetching corpus: 6071, signal 212090/242353 (executing program) 1970/01/01 00:11:50 fetching corpus: 6120, signal 212722/242377 (executing program) 1970/01/01 00:11:54 fetching corpus: 6170, signal 213193/242377 (executing program) 1970/01/01 00:11:55 fetching corpus: 6220, signal 213527/242377 (executing program) 1970/01/01 00:11:58 fetching corpus: 6269, signal 214011/242377 (executing program) 1970/01/01 00:12:01 fetching corpus: 6319, signal 214605/242849 (executing program) 1970/01/01 00:12:03 fetching corpus: 6369, signal 215168/242849 (executing program) 1970/01/01 00:12:05 fetching corpus: 6418, signal 215562/242851 (executing program) 1970/01/01 00:12:07 fetching corpus: 6467, signal 216648/242873 (executing program) 1970/01/01 00:12:10 fetching corpus: 6517, signal 217040/242873 (executing program) 1970/01/01 00:12:15 fetching corpus: 6567, signal 217503/242873 (executing program) 1970/01/01 00:12:20 fetching corpus: 6617, signal 218019/242899 (executing program) 1970/01/01 00:12:25 fetching corpus: 6667, signal 218623/242918 (executing program) 1970/01/01 00:12:30 fetching corpus: 6716, signal 219085/242923 (executing program) 1970/01/01 00:12:33 fetching corpus: 6765, signal 219397/242923 (executing program) 1970/01/01 00:12:36 fetching corpus: 6814, signal 219863/242923 (executing program) 1970/01/01 00:12:40 fetching corpus: 6863, signal 220221/242926 (executing program) 1970/01/01 00:12:43 fetching corpus: 6913, signal 220704/242929 (executing program) 1970/01/01 00:12:46 fetching corpus: 6962, signal 221174/242929 (executing program) 1970/01/01 00:12:48 fetching corpus: 7011, signal 221672/242929 (executing program) 1970/01/01 00:12:50 fetching corpus: 7061, signal 222161/242929 (executing program) 1970/01/01 00:12:52 fetching corpus: 7111, signal 222535/242929 (executing program) 1970/01/01 00:12:54 fetching corpus: 7161, signal 223181/242929 (executing program) 1970/01/01 00:12:57 fetching corpus: 7211, signal 223659/242929 (executing program) 1970/01/01 00:13:01 fetching corpus: 7261, signal 224096/242933 (executing program) 1970/01/01 00:13:03 fetching corpus: 7311, signal 224473/242933 (executing program) 1970/01/01 00:13:05 fetching corpus: 7361, signal 224891/242933 (executing program) 1970/01/01 00:13:07 fetching corpus: 7411, signal 225508/242933 (executing program) 1970/01/01 00:13:10 fetching corpus: 7461, signal 225910/242934 (executing program) 1970/01/01 00:13:14 fetching corpus: 7510, signal 226321/242934 (executing program) 1970/01/01 00:13:17 fetching corpus: 7560, signal 226609/242934 (executing program) 1970/01/01 00:13:19 fetching corpus: 7609, signal 226922/242934 (executing program) 1970/01/01 00:13:22 fetching corpus: 7659, signal 227323/242936 (executing program) 1970/01/01 00:13:24 fetching corpus: 7709, signal 227711/242936 (executing program) 1970/01/01 00:13:27 fetching corpus: 7759, signal 228308/242936 (executing program) 1970/01/01 00:13:29 fetching corpus: 7808, signal 228771/242936 (executing program) 1970/01/01 00:13:32 fetching corpus: 7857, signal 229214/242937 (executing program) 1970/01/01 00:13:36 fetching corpus: 7907, signal 229600/242937 (executing program) 1970/01/01 00:13:38 fetching corpus: 7956, signal 229897/242943 (executing program) 1970/01/01 00:13:41 fetching corpus: 8006, signal 230367/242945 (executing program) 1970/01/01 00:13:43 fetching corpus: 8056, signal 230636/242945 (executing program) 1970/01/01 00:13:45 fetching corpus: 8106, signal 231027/242952 (executing program) 1970/01/01 00:13:47 fetching corpus: 8156, signal 231474/242957 (executing program) 1970/01/01 00:13:50 fetching corpus: 8206, signal 231821/242960 (executing program) 1970/01/01 00:13:54 fetching corpus: 8256, signal 232232/242960 (executing program) 1970/01/01 00:13:56 fetching corpus: 8306, signal 232500/242983 (executing program) 1970/01/01 00:13:59 fetching corpus: 8356, signal 232897/242983 (executing program) 1970/01/01 00:14:01 fetching corpus: 8406, signal 233334/242995 (executing program) 1970/01/01 00:14:03 fetching corpus: 8456, signal 233746/242995 (executing program) 1970/01/01 00:14:05 fetching corpus: 8506, signal 234083/242995 (executing program) 1970/01/01 00:14:07 fetching corpus: 8556, signal 234574/243000 (executing program) 1970/01/01 00:14:10 fetching corpus: 8606, signal 234936/243000 (executing program) 1970/01/01 00:14:14 fetching corpus: 8655, signal 235270/243000 (executing program) 1970/01/01 00:14:17 fetching corpus: 8705, signal 235586/243000 (executing program) 1970/01/01 00:14:19 fetching corpus: 8755, signal 235830/243000 (executing program) 1970/01/01 00:14:22 fetching corpus: 8804, signal 236163/243000 (executing program) 1970/01/01 00:14:25 fetching corpus: 8853, signal 236582/243000 (executing program) 1970/01/01 00:14:26 fetching corpus: 8903, signal 236903/243000 (executing program) 1970/01/01 00:14:28 fetching corpus: 8953, signal 237264/243000 (executing program) 1970/01/01 00:14:31 fetching corpus: 9003, signal 237559/243002 (executing program) 1970/01/01 00:14:35 fetching corpus: 9051, signal 237939/243009 (executing program) 1970/01/01 00:14:38 fetching corpus: 9099, signal 238391/243009 (executing program) 1970/01/01 00:14:40 fetching corpus: 9148, signal 238722/243018 (executing program) 1970/01/01 00:14:43 fetching corpus: 9198, signal 239074/243018 (executing program) 1970/01/01 00:14:45 fetching corpus: 9248, signal 239448/243029 (executing program) 1970/01/01 00:14:48 fetching corpus: 9298, signal 239749/243029 (executing program) 1970/01/01 00:14:51 fetching corpus: 9347, signal 240155/243029 (executing program) 1970/01/01 00:14:54 fetching corpus: 9397, signal 240461/243031 (executing program) 1970/01/01 00:14:58 fetching corpus: 9447, signal 240936/243031 (executing program) 1970/01/01 00:14:59 fetching corpus: 9473, signal 241127/243048 (executing program) 1970/01/01 00:14:59 fetching corpus: 9474, signal 241129/243049 (executing program) 1970/01/01 00:15:00 fetching corpus: 9474, signal 241129/243049 (executing program) 1970/01/01 00:17:16 starting 2 fuzzer processes 00:17:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:17:16 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00'}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "46c88b9cb75bd6d2317777e9132d1d7027e1cb1349abaea78cce964365b50584901aed1c15bdf1c7c25350f1d09c3867572232d17767d5109b39063ae0b7061da06c0acd1707c66450be888f06db6814197ea64c5aa83ca43f4bbb056a8adf3fe33d587266b81f3cd16e4ad30d5003d7fee75c17cf51d9c97f2d9739fe0d7dd5", 0x12}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @remote, 0x0, 0x0, 'tunl0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) [ 1067.241980][ T2049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.922125][ T2049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.988611][ T2050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.865700][ T2050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.892451][ T2049] device hsr_slave_0 entered promiscuous mode [ 1081.970339][ T2049] device hsr_slave_1 entered promiscuous mode [ 1085.859231][ T2050] device hsr_slave_0 entered promiscuous mode [ 1085.946270][ T2050] device hsr_slave_1 entered promiscuous mode [ 1086.026892][ T2050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.054812][ T2050] Cannot create hsr debugfs directory [ 1097.640533][ T2049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1098.047575][ T2049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1098.255408][ T2049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1098.412468][ T2049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1101.038901][ T2050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1101.497956][ T2050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1101.752015][ T2050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1102.002325][ T2050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1118.079380][ T2049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.466987][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1119.629909][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1121.882194][ T2050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.231170][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1123.347239][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.212010][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.277780][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.619223][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1132.711598][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.008472][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1133.745445][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1134.157103][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1134.188734][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1134.370869][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1134.441659][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1134.849738][ T2049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1135.199980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1135.271271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1135.744944][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1135.778609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.165054][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1136.537979][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1137.695059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1137.762427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.097284][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1138.148782][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.432522][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1142.401305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1142.410372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.472495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.481578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.794433][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1159.870120][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.940701][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1163.010989][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.688358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1169.799780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.947701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1169.991438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1170.078300][ T2049] device veth0_vlan entered promiscuous mode [ 1170.640130][ T2049] device veth1_vlan entered promiscuous mode [ 1172.322350][ T2049] device veth0_macvtap entered promiscuous mode [ 1172.605784][ T2049] device veth1_macvtap entered promiscuous mode [ 1172.811791][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1172.901017][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1172.949274][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1173.029924][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1174.056147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1174.090215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1174.456195][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1174.490012][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1174.508991][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1174.528751][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1174.638120][ T2050] device veth0_vlan entered promiscuous mode [ 1175.107605][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1175.131061][ T2267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1175.389340][ T2049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.394867][ T2049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.396702][ T2049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.398483][ T2049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.585729][ T2050] device veth1_vlan entered promiscuous mode [ 1178.110646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1178.196689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1178.409010][ T2050] device veth0_macvtap entered promiscuous mode [ 1178.971455][ T2050] device veth1_macvtap entered promiscuous mode [ 1179.281451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1180.191670][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1180.230834][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1180.556399][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1180.632019][ T2114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.823695][ T2050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.830979][ T2050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.855030][ T2050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.860717][ T2050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.062066][ T2745] xt_CT: You must specify a L4 protocol and not use inversions on it 00:19:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:19:47 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00'}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "46c88b9cb75bd6d2317777e9132d1d7027e1cb1349abaea78cce964365b50584901aed1c15bdf1c7c25350f1d09c3867572232d17767d5109b39063ae0b7061da06c0acd1707c66450be888f06db6814197ea64c5aa83ca43f4bbb056a8adf3fe33d587266b81f3cd16e4ad30d5003d7fee75c17cf51d9c97f2d9739fe0d7dd5", 0x12}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @remote, 0x0, 0x0, 'tunl0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 00:19:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1192.489236][ T2749] xt_CT: You must specify a L4 protocol and not use inversions on it 00:19:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00'}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "46c88b9cb75bd6d2317777e9132d1d7027e1cb1349abaea78cce964365b50584901aed1c15bdf1c7c25350f1d09c3867572232d17767d5109b39063ae0b7061da06c0acd1707c66450be888f06db6814197ea64c5aa83ca43f4bbb056a8adf3fe33d587266b81f3cd16e4ad30d5003d7fee75c17cf51d9c97f2d9739fe0d7dd5", 0x12}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @remote, 0x0, 0x0, 'tunl0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 00:19:54 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1197.191020][ T2753] xt_CT: You must specify a L4 protocol and not use inversions on it 00:19:57 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00'}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "46c88b9cb75bd6d2317777e9132d1d7027e1cb1349abaea78cce964365b50584901aed1c15bdf1c7c25350f1d09c3867572232d17767d5109b39063ae0b7061da06c0acd1707c66450be888f06db6814197ea64c5aa83ca43f4bbb056a8adf3fe33d587266b81f3cd16e4ad30d5003d7fee75c17cf51d9c97f2d9739fe0d7dd5", 0x12}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @remote, 0x0, 0x0, 'tunl0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 00:20:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 1201.579045][ T2757] xt_CT: You must specify a L4 protocol and not use inversions on it 00:20:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:20:05 executing program 1: setgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) 00:20:09 executing program 1: setgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) 00:20:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0xe, 0x2, &(0x7f0000000080)="9636244be76527a4f8d9cf3559a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:20:14 executing program 1: setgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) 00:20:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:21 executing program 1: setgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) 00:20:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:20:49 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) [ 1250.930203][ T2808] tmpfs: Bad value for 'mpol' 00:20:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:20:51 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) [ 1254.640021][ T2813] tmpfs: Bad value for 'mpol' 00:20:54 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:20:55 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) [ 1257.979637][ T2817] tmpfs: Bad value for 'mpol' 00:20:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:20:58 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) [ 1261.329235][ T2821] tmpfs: Bad value for 'mpol' 00:21:02 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:02 executing program 0: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:04 executing program 0: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:05 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:07 executing program 0: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:09 executing program 1: timer_create(0xb, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002440)={{0x0, r0+60000000}, {0x0, r1+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 00:21:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) [ 1274.377601][ T2836] tmpfs: Bad value for 'mpol' 00:21:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) 00:21:14 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:21:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) [ 1277.566444][ T2840] tmpfs: Bad value for 'mpol' 00:21:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x39, 0x2d]}}}}]}) 00:21:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) [ 1281.428041][ T2844] tmpfs: Bad value for 'mpol' 00:21:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) 00:21:24 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1287.405165][ T27] audit: type=1800 audit(1286.190:2): pid=2849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:21:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x62480, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:28 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1292.601238][ T27] audit: type=1800 audit(1291.400:3): pid=2855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:21:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x62480, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:33 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1296.382100][ T27] audit: type=1800 audit(1295.190:4): pid=2859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:21:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x62480, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:37 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1301.196659][ T27] audit: type=1800 audit(1300.000:5): pid=2863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:21:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x62480, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:44 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1307.332352][ T27] audit: type=1800 audit(1306.140:6): pid=2869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:21:49 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:21:50 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1312.951306][ T27] audit: type=1800 audit(1311.760:7): pid=2873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 1314.476507][ T27] audit: type=1800 audit(1313.280:8): pid=2876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:21:54 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:21:55 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1318.431740][ T27] audit: type=1800 audit(1317.240:9): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 1320.490277][ T27] audit: type=1800 audit(1319.300:10): pid=2881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:21:59 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1323.327964][ T27] audit: type=1800 audit(1322.140:11): pid=2883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=639 res=0 errno=0 00:22:02 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1326.148615][ T27] audit: type=1800 audit(1324.860:12): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=635 res=0 errno=0 00:22:08 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:22:09 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) [ 1333.740705][ T27] audit: type=1800 audit(1332.470:13): pid=2889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:22:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) 00:22:16 executing program 0: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:22:20 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) [ 1343.351533][ T27] audit: type=1800 audit(1342.160:14): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=637 res=0 errno=0 00:22:26 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) 00:22:28 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) 00:22:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) 00:22:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r1, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:22:36 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0}) 00:22:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r1, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:22:41 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:22:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r1, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:22:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r1, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:22:49 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:22:51 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:22:59 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:01 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:08 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:16 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) readv(r0, &(0x7f0000001400)=[{0x0, 0x800000}, {&(0x7f0000000180)=""/64, 0x40}], 0x2) 00:23:20 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) readv(r0, &(0x7f0000001400)=[{0x0, 0x800000}, {&(0x7f0000000180)=""/64, 0x40}], 0x2) 00:23:23 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) readv(r0, &(0x7f0000001400)=[{0x0, 0x800000}, {&(0x7f0000000180)=""/64, 0x40}], 0x2) 00:23:24 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) readv(r0, &(0x7f0000001400)=[{0x0, 0x800000}, {&(0x7f0000000180)=""/64, 0x40}], 0x2) 00:23:30 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x6}) 00:23:31 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x0, &(0x7f0000002100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002580)={0x77359400}, &(0x7f00000025c0)={[0x80000001]}, 0x8) 00:23:32 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x6}) 00:23:36 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x6}) 00:23:39 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x6}) 00:23:40 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x6c19, 0x0, 0x0, 0x0, 0x0) 00:23:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:23:43 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x6c19, 0x0, 0x0, 0x0, 0x0) 00:23:47 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x6c19, 0x0, 0x0, 0x0, 0x0) 00:23:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:23:51 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x6c19, 0x0, 0x0, 0x0, 0x0) 00:23:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:23:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:23:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() 00:24:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() 00:24:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) 00:24:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() 00:24:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() 00:24:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:38 executing program 1: r0 = syz_io_uring_setup(0x7b51, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 00:24:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:41 executing program 1: r0 = syz_io_uring_setup(0x7b51, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 00:24:45 executing program 1: r0 = syz_io_uring_setup(0x7b51, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 00:24:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:48 executing program 1: r0 = syz_io_uring_setup(0x7b51, &(0x7f00000000c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 1490.784366][ C1] hrtimer: interrupt took 2510500 ns 00:24:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:24:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:25:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:25:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:25:09 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x9) fallocate(r0, 0x0, 0x0, 0x8800000) accept4(r0, &(0x7f0000000580)=@alg, &(0x7f0000000140)=0xfe36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe66e1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ftruncate(r1, 0x4d0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) statx(r1, &(0x7f0000000280)='./file0/../file0\x00', 0x4000, 0x2, &(0x7f0000000180)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x81000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4d0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a70209008ae910cc949e255fa78a19b321af3fff33f00124e9c47967b59d55383e48c12e6fc66e27a955118cb9f74214bb26b689d957bee74c215c73979af06e5e37da8cb9d849f62d02330996b952d246cfba686a8eda9d262809da81c8610465a0781ab10ad7a30852b8d9de10fa46891e96156457dcf1ac36def0d82ef5d13fd079ed7dd7f2c5d2a2c8e5940000000089cc6358b3c895e200"/164, @ANYRES16=r2, @ANYBLOB="000f2bbd7000fddbdf250100000014000900fe8000000000000000000000bb04000500061801004e2000000400050008000600ac1434bbf3edd8ab0ca291fb05ef83a9e49b"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8100, &(0x7f0000000340)={0x6, 0x6, 0x100000}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev}, {0x2, 0x3, @rand_addr=0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ae, 0x200000000800, 0x7}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000000) 00:25:13 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:17 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:21 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:22 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:26 executing program 1: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:27 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) 00:25:30 executing program 1: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:35 executing program 0: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:36 executing program 1: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:38 executing program 0: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:40 executing program 1: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:44 executing program 0: io_setup(0x3cc, &(0x7f0000000280)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:25:46 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:50 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:51 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:53 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:54 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:57 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:25:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) ioctl$RNDGETENTCNT(r1, 0x5207, 0x0) 00:26:00 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:01 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:03 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:05 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:07 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:09 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:15 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:19 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:24 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:25 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:30 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:32 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:37 executing program 1: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:39 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:43 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:43 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:46 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:48 executing program 0: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000003740)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 00:26:50 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:54 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:54 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffb) 00:26:56 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffb) 00:26:57 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:26:59 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffb) 00:27:01 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) sendto$inet(r4, 0x0, 0xac, 0x0, 0x0, 0x0) 00:27:03 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffb) 00:27:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e54}}, 0x0) 00:27:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fa"}]}}, &(0x7f0000005080)=""/183, 0x2a, 0xb7, 0x1}, 0x20) [ 1629.167911][ T3206] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1629.171093][ T3206] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1629.300006][ T3206] netlink: 6596 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e54}}, 0x0) 00:27:10 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fa"}]}}, &(0x7f0000005080)=""/183, 0x2a, 0xb7, 0x1}, 0x20) [ 1632.379986][ T3210] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1632.430746][ T3210] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1632.432043][ T3210] netlink: 6596 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="541e000030000100000000000000000000000000401e01003c1e01000b000100706f6c6963650000101e028004040200a10000001000000000000000ff0300000900000008000000060000008100000003000000c4f200000800000008000000000100000101000000020000000200000004000003000000ffffff7f5b410000090000000100000009000000ff0f0000090000000200000001000000f9ffffff7c000000ff01000020000000a440000002000000020000008d0d00003f000000ffffffff71050000010400001c25000001000100060000000100000000000080010000000100010000000000030000000000000005000000e3e40000080000000000000004000000050000000100000003000000040000000200000008000000b50200000000ffffff03000054cb431e080000000600000000000000f4000000ff030000880000000000000008000000070000001f00000003000000ff01000005000000000000000700000000000000ff010000020000000600000001fcffff00000100000100007f2e3014050000003f000000020000000300000007000000070000000900000001040000050000007f0000000200000001000000b195000008000000ff7f000000000100ff07000000000100010100000500000005000000020000000100000004000000ac0e0000020000001b0000000900000002000000d20a0000fd000000c80000000200b473c09500000100000069000000c000000000000000000000000300000000040000090000000004000009000000000001000600000007000000000200009400000005000000010000008100000002000000f03f000008000000fbffffff3b01000000000000fbffffff000400003d00000001010000040000003f000000070000003f000000920000002408000020000000ff00000005000000090000000400000008000000010000003f000000020000000100000035080000050016000700000001000000040000009c000000200000000eea000000000000090000001600000000040000ff070000ff0f000082000000ffff00000101000006000000f204000007000000ff0f00000600000006000000040000000080800007000000020000000800000008000000030000000100000001010000030000001f000000ff7f000007000000ff0700000100000001000000ac010000cd00000032950000070000000000020004000000400000000100000004000000800000000800000002000000000001003f000000030000000903000000000000ffffff7f00000080fdffffff40000000ff030000000000800400000014000000000200001f00000006000000ff000000010000000900000000100000060000000080000000000000060000003f0000000900000000020000000000000100000003000000070000003b0500000100000003000000de1b0000ff7f000007fcff0009000000020000000000000008000500000000003c000100ff"], 0x1e54}}, 0x0) 00:27:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fa"}]}}, &(0x7f0000005080)=""/183, 0x2a, 0xb7, 0x1}, 0x20) [ 1635.430092][ T3214] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1635.431742][ T3214] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1635.437143][ T3214] netlink: 6596 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e54}}, 0x0) 00:27:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005140)={&(0x7f0000004f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x5, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fa"}]}}, &(0x7f0000005080)=""/183, 0x2a, 0xb7, 0x1}, 0x20) [ 1638.950681][ T3218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1639.002470][ T3218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1639.018992][ T3218] netlink: 6596 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:22 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x8000) 00:27:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:24 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x8000) 00:27:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:28 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x8000) 00:27:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:32 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x3c, 0x1c, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x3c}}, 0x8000) 00:27:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:35 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'geneve0\x00'}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {}, {}, 0x3, @can={{}, 0x0, 0x0, 0x0, 0x0, "b95156f5008b9b0a"}}, 0x48}}, 0x0) 00:27:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:39 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'geneve0\x00'}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {}, {}, 0x3, @can={{}, 0x0, 0x0, 0x0, 0x0, "b95156f5008b9b0a"}}, 0x48}}, 0x0) 00:27:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 00:27:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'geneve0\x00'}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {}, {}, 0x3, @can={{}, 0x0, 0x0, 0x0, 0x0, "b95156f5008b9b0a"}}, 0x48}}, 0x0) 00:27:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() 00:27:46 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'geneve0\x00'}}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {}, {}, 0x3, @can={{}, 0x0, 0x0, 0x0, 0x0, "b95156f5008b9b0a"}}, 0x48}}, 0x0) 00:27:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() 00:27:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0)) 00:27:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() 00:27:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0)) 00:27:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0)) 00:27:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() 00:28:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0)) 00:28:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:07 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:21 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:30 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:42 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1726.228692][ T3298] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1726.232546][ T3298] [ 1726.233130][ T3298] ====================================================== [ 1726.234414][ T3298] WARNING: possible circular locking dependency detected [ 1726.235266][ T3298] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1726.236230][ T3298] ------------------------------------------------------ [ 1726.236956][ T3298] syz-executor.0/3298 is trying to acquire lock: [ 1726.238592][ T3298] ffffffff84fc0408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 1726.241116][ T3298] [ 1726.241116][ T3298] but task is already holding lock: [ 1726.243096][ T3298] ffffaf80128de350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1726.244780][ T3298] [ 1726.244780][ T3298] which lock already depends on the new lock. [ 1726.244780][ T3298] [ 1726.245824][ T3298] [ 1726.245824][ T3298] the existing dependency chain (in reverse order) is: [ 1726.246882][ T3298] [ 1726.246882][ T3298] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1726.248443][ T3298] lock_acquire.part.0+0x1d0/0x424 [ 1726.249302][ T3298] lock_acquire+0x54/0x6a [ 1726.250132][ T3298] __mutex_lock+0x114/0xade [ 1726.251013][ T3298] mutex_lock_nested+0x14/0x1c [ 1726.251850][ T3298] nci_start_poll+0x4de/0x6b8 [ 1726.252839][ T3298] nfc_start_poll+0x10c/0x1e8 [ 1726.253761][ T3298] nfc_genl_start_poll+0xfe/0x252 [ 1726.254558][ T3298] genl_family_rcv_msg_doit+0x19a/0x23c [ 1726.255449][ T3298] genl_rcv_msg+0x236/0x3ba [ 1726.256238][ T3298] netlink_rcv_skb+0xf8/0x2be [ 1726.257014][ T3298] genl_rcv+0x36/0x4c [ 1726.257672][ T3298] netlink_unicast+0x40e/0x5fe [ 1726.259281][ T3298] netlink_sendmsg+0x4e0/0x994 [ 1726.260128][ T3298] sock_sendmsg+0xa0/0xc4 [ 1726.260988][ T3298] ____sys_sendmsg+0x46e/0x484 [ 1726.262049][ T3298] ___sys_sendmsg+0x16c/0x1f6 [ 1726.263305][ T3298] __sys_sendmsg+0xba/0x150 [ 1726.264382][ T3298] sys_sendmsg+0x2c/0x3a [ 1726.265694][ T3298] ret_from_syscall+0x0/0x2 [ 1726.266587][ T3298] [ 1726.266587][ T3298] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1726.267706][ T3298] lock_acquire.part.0+0x1d0/0x424 [ 1726.268461][ T3298] lock_acquire+0x54/0x6a [ 1726.269347][ T3298] __mutex_lock+0x114/0xade [ 1726.270141][ T3298] mutex_lock_nested+0x14/0x1c [ 1726.271110][ T3298] nfc_urelease_event_work+0x126/0x218 [ 1726.272190][ T3298] process_one_work+0x654/0xffe [ 1726.273376][ T3298] worker_thread+0x360/0x8fa [ 1726.274165][ T3298] kthread+0x19e/0x1fa [ 1726.274916][ T3298] ret_from_exception+0x0/0x10 [ 1726.275872][ T3298] [ 1726.275872][ T3298] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1726.277793][ T3298] lock_acquire.part.0+0x1d0/0x424 [ 1726.278670][ T3298] lock_acquire+0x54/0x6a [ 1726.279508][ T3298] __mutex_lock+0x114/0xade [ 1726.280627][ T3298] mutex_lock_nested+0x14/0x1c [ 1726.281544][ T3298] nfc_register_device+0x44/0x29e [ 1726.282355][ T3298] nci_register_device+0x538/0x612 [ 1726.283572][ T3298] virtual_ncidev_open+0x82/0x12c [ 1726.284832][ T3298] misc_open+0x272/0x2c8 [ 1726.285695][ T3298] chrdev_open+0x1d4/0x478 [ 1726.286520][ T3298] do_dentry_open+0x2a4/0x7d4 [ 1726.287743][ T3298] vfs_open+0x52/0x5e [ 1726.288754][ T3298] path_openat+0x12b6/0x189e [ 1726.289538][ T3298] do_filp_open+0x10e/0x22a [ 1726.290448][ T3298] do_sys_openat2+0x174/0x31e [ 1726.291664][ T3298] sys_openat+0xdc/0x164 [ 1726.292748][ T3298] ret_from_syscall+0x0/0x2 [ 1726.293932][ T3298] [ 1726.293932][ T3298] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1726.295463][ T3298] check_noncircular+0x1de/0x1fe [ 1726.296706][ T3298] __lock_acquire+0x19a4/0x333e [ 1726.297572][ T3298] lock_acquire.part.0+0x1d0/0x424 [ 1726.298533][ T3298] lock_acquire+0x54/0x6a [ 1726.299568][ T3298] __mutex_lock+0x114/0xade [ 1726.300433][ T3298] mutex_lock_nested+0x14/0x1c [ 1726.301429][ T3298] virtual_nci_close+0x28/0x58 [ 1726.302821][ T3298] nci_close_device+0x12e/0x1de [ 1726.304071][ T3298] nci_unregister_device+0x34/0x182 [ 1726.304979][ T3298] virtual_ncidev_close+0x9c/0xbc [ 1726.305891][ T3298] __fput+0x164/0x502 [ 1726.306815][ T3298] ____fput+0x1a/0x24 [ 1726.307935][ T3298] task_work_run+0xdc/0x154 [ 1726.308742][ T3298] do_notify_resume+0x894/0xa56 [ 1726.309604][ T3298] ret_from_exception+0x0/0x10 [ 1726.310915][ T3298] [ 1726.310915][ T3298] other info that might help us debug this: [ 1726.310915][ T3298] [ 1726.312960][ T3298] Chain exists of: [ 1726.312960][ T3298] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1726.312960][ T3298] [ 1726.314881][ T3298] Possible unsafe locking scenario: [ 1726.314881][ T3298] [ 1726.315561][ T3298] CPU0 CPU1 [ 1726.316843][ T3298] ---- ---- [ 1726.318014][ T3298] lock(&ndev->req_lock); [ 1726.318906][ T3298] lock(&genl_data->genl_data_mutex); [ 1726.319954][ T3298] lock(&ndev->req_lock); [ 1726.321727][ T3298] lock(nci_mutex); [ 1726.322578][ T3298] [ 1726.322578][ T3298] *** DEADLOCK *** [ 1726.322578][ T3298] [ 1726.324083][ T3298] 1 lock held by syz-executor.0/3298: [ 1726.324847][ T3298] #0: ffffaf80128de350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1726.327355][ T3298] [ 1726.327355][ T3298] stack backtrace: [ 1726.328132][ T3298] CPU: 1 PID: 3298 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1726.329411][ T3298] Hardware name: riscv-virtio,qemu (DT) [ 1726.330731][ T3298] Call Trace: [ 1726.331271][ T3298] [] dump_backtrace+0x2e/0x3c [ 1726.332172][ T3298] [] show_stack+0x34/0x40 [ 1726.333531][ T3298] [] dump_stack_lvl+0xe4/0x150 [ 1726.335016][ T3298] [] dump_stack+0x1c/0x24 [ 1726.335882][ T3298] [] print_circular_bug+0x34e/0x3d8 [ 1726.336887][ T3298] [] check_noncircular+0x1de/0x1fe [ 1726.337823][ T3298] [] __lock_acquire+0x19a4/0x333e [ 1726.338648][ T3298] [] lock_acquire.part.0+0x1d0/0x424 [ 1726.339500][ T3298] [] lock_acquire+0x54/0x6a [ 1726.340325][ T3298] [] __mutex_lock+0x114/0xade [ 1726.341235][ T3298] [] mutex_lock_nested+0x14/0x1c [ 1726.342089][ T3298] [] virtual_nci_close+0x28/0x58 [ 1726.342918][ T3298] [] nci_close_device+0x12e/0x1de [ 1726.343761][ T3298] [] nci_unregister_device+0x34/0x182 [ 1726.344616][ T3298] [] virtual_ncidev_close+0x9c/0xbc [ 1726.345495][ T3298] [] __fput+0x164/0x502 [ 1726.346283][ T3298] [] ____fput+0x1a/0x24 [ 1726.347027][ T3298] [] task_work_run+0xdc/0x154 [ 1726.347837][ T3298] [] do_notify_resume+0x894/0xa56 [ 1726.348657][ T3298] [] ret_from_exception+0x0/0x10 00:28:46 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:46 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) [ 1735.505471][ T3313] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:28:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:54 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:28:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:28:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) [ 1743.665537][ T3332] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:29:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:29:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:29:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:29:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x37, r3}) sendto$inet6(r0, &(0x7f0000000040)="220dba48", 0xfe81, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x7f) 00:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 00:29:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:12 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:14 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380)='p', 0x1, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="fc", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r2, 0x5460, 0xec000) close_range(r0, 0xffffffffffffffff, 0x0) VM DIAGNOSIS: 00:38:06 Registers: info registers vcpu 0 pc ffffffff802010c8 mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff80173f70 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8013fa28 x2/sp ffffaf800f7c3860 x3/gp ffffffff85863ac0 x4/tp ffffaf800bf6b080 x5/t0 ffffaf800ddbee40 x6/t1 ffffffffcee80000 x7/t2 00007fffde7eb1b7 x8/s0 ffffaf800f7c38e0 x9/s1 ffffaf800ddbed98 x10/a0 ffffffff836ee440 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff800b9ea2 x14/a4 ffffaf800bf6c080 x15/a5 0000000000000000 x16/a6 ffffaf800ddbedf8 x17/a7 ffffaf800ddbedfb x18/s2 ffffaf800bf6b080 x19/s3 ffffaf80078200f0 x20/s4 ffffaf8007820108 x21/s5 ffffaf8007820100 x22/s6 ffffaf801b86d06a x23/s7 ffffffff85892a80 x24/s8 ffffaf8007727200 x25/s9 ffffaf8007820148 x26/s10 ffffaf80078200f8 x27/s11 ffffaf8011e553c0 x28/t3 0000000000000000 x29/t4 fffff5ef01bb7dbf x30/t5 fffff5ef01bb7dc0 x31/t6 0000000000000005 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80123dea mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8010f364 sepc ffffffff800bdb3e mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80123dea x2/sp ffffaf802425afd0 x3/gp ffffffff85863ac0 x4/tp ffffaf800ec3b080 x5/t0 ffffffff86bcb657 x6/t1 fffff5ef0484b614 x7/t2 0000000000000000 x8/s0 ffffaf802425b180 x9/s1 ffffffff84a88a00 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff80123dea x14/a4 ffffaf800ec3c080 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf802425b0a7 x18/s2 ffffaf802425b240 x19/s3 ffffaf802425b100 x20/s4 0000000000000ce2 x21/s5 00000000ffffe34a x22/s6 ffffaf802425b200 x23/s7 0000000000000002 x24/s8 ffffffff84a88a00 x25/s9 ffffaf802425b248 x26/s10 ffffffff84a88a18 x27/s11 ffffaf802425b240 x28/t3 1ffff5f00484b680 x29/t4 fffff5ef0484b614 x30/t5 fffff5ef0484b615 x31/t6 ffffaf802425b0b8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000