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", 0x1000, 0x8000}, {&(0x7f0000000280)="4979c6e46734e11f9e8a48", 0xb, 0x2}, {&(0x7f00000002c0)="65d12bd5a7fe56d1199ff5fe729a8cdfb4c0ae5b3e923bbe0edf8468a9133276fac55d8b1b4c6cf87068d7ccee9d8608f568a986f3cd270d22cdecfa687445c11ad74a785e23f9610cdec4eb78d9135e4dc9e09f6ac35bc0048101a250740e366927c418f81adbc96fdc60b65e577f26b68ea6dc5a9a538390e0fb6d2aa32bebba85d2cfd40bfd0c3f4b0f8a29cc133d87d2df1c2f34fedb00d445eaf23dda8d2c6c1f0a5d350b27b96f2462", 0xac, 0x3ff}, {&(0x7f0000000380)="96d56c993028e6a512ced0f05ae2ed9eef82b75acb88ef97e88e10fab57a1cdb552070d67f74cb5c822ccf2825747c2c9145eeaee4cfaba9ad4a4a087224d9a115b2f78c31d30d0afaf66f8165db69e58b91e3620117aa03f45b1fd8f4f0930516da8be059d0", 0x66, 0x4}, {&(0x7f0000000400)="2adb1cef643ca4d2193fdc2c4e9b2bc44b5f935193ee30bcec2125266629157eb2b3a3cd5bf32ea69804f4d9275bc5052edde25d5b87eff30fa7d8764d26da9e4a51b30a3e2a971fe47e6c4ffb6bf110446394fab50ec5fa2fe01fb1808e7c70c8c2a20746fe2051a7e06efb9abdb6241d3a323d330d112d97ddff40", 0x7c, 0x1}, {&(0x7f0000000500)="7b227f6b525f79fc050c7227eca66fc18b9be6452361dd1c0e5f7c3b84473c9c516890541ee1b285443302dcef666f5458cb51c8e56f3a877bfb40a606603027a0cdeab51c5caf5593bfe3f0f06df32b43c4c2a7a1460f439b3c23", 0x5b, 0x8}], 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="756e695f786c6174010000006e6e6f6e756d7461696c3d312c7317686f72746e7bd30fea616d653d77696e39352c726f6469722c73686f77657865632c6175"]) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002ac0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="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"/4096, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x810) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x0, 0x6, 0x5}) (async) socket$packet(0x11, 0x3, 0x300) (async) mlock(&(0x7f000025f000/0x4000)=nil, 0x4000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x7, &(0x7f0000000580)=[{&(0x7f0000000140)="18878b8b2227c600dfe30c60ba899956e2fdce43e5bcc119b2792c1260a5e5ed0427fe56f4d367953499ce506ca8d9539df504fd542162f4f04ce9a4d145c90e065ca24537234da0aadc9ce168d515b5332f951c681efc691aa9937b4cf8b35de0beadaf65366be1dfed33c821953c1fefb15ea6dacbd3bb30d73ff26d861e56f885bc94bef4e6ba33ad2d2539acc54537f07a108e2085fcc12ec829f9d721b6cf4cd3c9fe125880af50868ea1a2d167b298ba31cbc366c4b575880e408e98155a831cd144ba982840a90feb06f9", 0xce, 0xc85f}, {&(0x7f0000000a40)="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", 0x1000, 0x8000}, {&(0x7f0000000280)="4979c6e46734e11f9e8a48", 0xb, 0x2}, {&(0x7f00000002c0)="65d12bd5a7fe56d1199ff5fe729a8cdfb4c0ae5b3e923bbe0edf8468a9133276fac55d8b1b4c6cf87068d7ccee9d8608f568a986f3cd270d22cdecfa687445c11ad74a785e23f9610cdec4eb78d9135e4dc9e09f6ac35bc0048101a250740e366927c418f81adbc96fdc60b65e577f26b68ea6dc5a9a538390e0fb6d2aa32bebba85d2cfd40bfd0c3f4b0f8a29cc133d87d2df1c2f34fedb00d445eaf23dda8d2c6c1f0a5d350b27b96f2462", 0xac, 0x3ff}, {&(0x7f0000000380)="96d56c993028e6a512ced0f05ae2ed9eef82b75acb88ef97e88e10fab57a1cdb552070d67f74cb5c822ccf2825747c2c9145eeaee4cfaba9ad4a4a087224d9a115b2f78c31d30d0afaf66f8165db69e58b91e3620117aa03f45b1fd8f4f0930516da8be059d0", 0x66, 0x4}, {&(0x7f0000000400)="2adb1cef643ca4d2193fdc2c4e9b2bc44b5f935193ee30bcec2125266629157eb2b3a3cd5bf32ea69804f4d9275bc5052edde25d5b87eff30fa7d8764d26da9e4a51b30a3e2a971fe47e6c4ffb6bf110446394fab50ec5fa2fe01fb1808e7c70c8c2a20746fe2051a7e06efb9abdb6241d3a323d330d112d97ddff40", 0x7c, 0x1}, {&(0x7f0000000500)="7b227f6b525f79fc050c7227eca66fc18b9be6452361dd1c0e5f7c3b84473c9c516890541ee1b285443302dcef666f5458cb51c8e56f3a877bfb40a606603027a0cdeab51c5caf5593bfe3f0f06df32b43c4c2a7a1460f439b3c23", 0x5b, 0x8}], 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="756e695f786c6174010000006e6e6f6e756d7461696c3d312c7317686f72746e7bd30fea616d653d77696e39352c726f6469722c73686f77657865632c6175"]) (async) dup(r0) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) 00:18:50 executing program 5: openat$proc_capi20(0xffffff9c, &(0x7f0000000440), 0x18041, 0x0) 00:18:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1200.186491][T23704] loop2: detected capacity change from 0 to 200 [ 1200.200230][T23707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1200.212392][T20518] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1200.239392][T20518] Buffer I/O error on dev loop2, logical block 0, async page read [ 1200.258322][T20518] loop2: unable to read partition table [ 1200.264530][T23704] FAT-fs (loop2): Unrecognized mount option "uni_xlat" or missing value [ 1200.293254][T23707] device veth11 entered promiscuous mode 00:18:51 executing program 1: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)) 00:18:51 executing program 0: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6dc9, &(0x7f0000000580)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 00:18:51 executing program 5: openat$autofs(0xffffff9c, &(0x7f00000004c0), 0x6801, 0x0) 00:18:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:51 executing program 5: r0 = openat$nullb(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) [ 1200.407982][ T27] audit: type=1400 audit(1660522731.056:878): avc: denied { write } for pid=23718 comm="syz-executor.5" name="autofs" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 00:18:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) rmdir(&(0x7f0000000040)='./file0\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:18:51 executing program 0: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x8) [ 1200.519156][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1200.593533][T23724] device veth13 entered promiscuous mode 00:18:51 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:18:51 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000080)={0x0, @raw_data="99a9d0fc84bf7cf94f1dfcdff4509e5ab105a336ffc9b3c05aceef346530d9a9791446751f10b98a60a6892fd27fafebc339026afbe53246a591e9cb738005bf1bbba177e111c65c2b2d661c0c9eda7836cfd7ff05f045000f444fb2d2eb22dd9fab26895526ca31ce20ae230791f099a83219e0826dc3e8580b28191cf017d65df64ce332334e997fb96a9307ea8df0a633f04fa441bbbe932075a25551b48f978f34fb27ea41bad8afdfbb3ff90eaa2364a2edbb5f20e7eb13e92bd9f7a6461794a2ab87b86e1b"}) 00:18:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:51 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[0x4]}, 0x8) 00:18:51 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x100000}, 0x20) 00:18:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async, rerun: 64) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (rerun: 64) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:18:51 executing program 1: openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x42000680) 00:18:51 executing program 5: socket$inet(0x2, 0x5, 0x2) 00:18:51 executing program 0: openat$autofs(0xffffff9c, &(0x7f0000000400), 0x400, 0x0) 00:18:51 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) openat$null(0xffffff9c, &(0x7f0000000440), 0x101000, 0x0) 00:18:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async, rerun: 32) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (rerun: 32) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) (async) rmdir(&(0x7f0000000040)='./file0\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1200.767476][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:51 executing program 0: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 1200.826263][ T27] audit: type=1400 audit(1660522731.476:879): avc: denied { append } for pid=23749 comm="syz-executor.0" name="autofs" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1200.888849][T23740] device veth15 entered promiscuous mode 00:18:51 executing program 4: r0 = openat$null(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 00:18:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:51 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0, 0x0) 00:18:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$usbmon(&(0x7f00006fa000/0x2000)=nil, 0x2000, 0x200000e, 0x4010, r0, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x400, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) 00:18:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'gre0\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3ec) 00:18:51 executing program 4: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1201.094760][T23769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1201.244528][T23769] device veth17 entered promiscuous mode 00:18:51 executing program 1: syz_io_uring_setup(0x70ff, &(0x7f00000005c0), &(0x7f00007fd000/0x800000)=nil, &(0x7f00009b9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ca3, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 00:18:51 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000240)={0xf3}, 0x20) 00:18:51 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x0) 00:18:51 executing program 0: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000440), 0x8141, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 00:18:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$usbmon(&(0x7f00006fa000/0x2000)=nil, 0x2000, 0x200000e, 0x4010, r0, 0x0) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x400, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) 00:18:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:52 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, 0x2000000}, 0x1c, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 00:18:52 executing program 4: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6dc9, &(0x7f0000000580), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 00:18:52 executing program 5: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) 00:18:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mmap$usbmon(&(0x7f00006fa000/0x2000)=nil, 0x2000, 0x200000e, 0x4010, r0, 0x0) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) (async) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0xa) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x400, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) [ 1201.379844][T23791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:52 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x87) 00:18:52 executing program 4: syz_io_uring_setup(0x12ee, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0xfffffff7) [ 1201.520069][T23791] device veth19 entered promiscuous mode 00:18:52 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000492000/0x1000)=nil, 0x1000, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001920010000000000000040021d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:18:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$qrtrtun(r0, 0x0, 0xf0ffffff7f0000) 00:18:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 00:18:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 00:18:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x0, 0x100}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)='l', 0x1}], 0x1, &(0x7f0000000540)=[{0x10}], 0x10}}], 0x1, 0x0) [ 1201.691838][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1201.732756][T23821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=23821 comm=syz-executor.2 [ 1201.772582][T23822] device veth21 entered promiscuous mode 00:18:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @dev}}) 00:18:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700800000000a0100000008461a0018006400003f2f53a29f"]}) 00:18:52 executing program 1: syz_clone(0xf005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) 00:18:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:52 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8953, 0x0) 00:18:52 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) mprotect(&(0x7f0000492000/0x1000)=nil, 0x1000, 0x2) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001920010000000000000040021d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:18:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) [ 1202.326855][T23836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000492000/0x1000)=nil, 0x1000, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001920010000000000000040021d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) mprotect(&(0x7f0000492000/0x1000)=nil, 0x1000, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001920010000000000000040021d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) 00:18:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0xa010100}}}}) 00:18:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '.\\{){].]\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '])\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.+!+,\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(\\,{B]:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(}\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1d8}}, 0x0) [ 1202.443910][T23836] device veth23 entered promiscuous mode 00:18:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000054c0)={'ip6_vti0\x00', &(0x7f0000005440)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @remote}}) [ 1202.547142][T23855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=23855 comm=syz-executor.2 00:18:53 executing program 0: syz_io_uring_setup(0x70ff, &(0x7f00000005c0), &(0x7f00007fd000/0x800000)=nil, &(0x7f00009b9000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_io_uring_setup(0x3ca3, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000780)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x6205) 00:18:53 executing program 4: syz_clone(0xf005000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="d7") [ 1202.608383][T23860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1202.667632][T23874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x999}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr={{0x18}}], 0x18}, 0x0) 00:18:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x3, 0x8, 0x8, 0x401, 0x0, 0x4}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) 00:18:53 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000440)='1\x00', 0x2) 00:18:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000009b40)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x0) 00:18:53 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x4006010) [ 1202.772456][T23874] device veth25 entered promiscuous mode 00:18:53 executing program 5: getpid() syz_clone(0x41004000, &(0x7f0000000000)="647651a17b1fe396c0c5e57fb63cb766b9f1f13a3253553ed92324504084d322acc54b8d70a2bef3b6", 0x29, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a09f78420c292f5dd94660565a95e729f22156a8c92c6742c9e1682ee711fdb2b99059a482ca19f21102b686b2419dccc76cf47d72b6042a57ad1d893731c1b21e0341110af0281d00771c167ab924d3925d70909664b66c0b088a7d1352efb21ccc9ca9b23c0abb5f745accae5c56bfa590c26033fec96eed97069b8073b084cee78fa1a0f78a9b0d2666c84c5c8f395c551ec81112226854a43e0842ea8db0caced9b6d9f2b23c5ef9540f71c3818937150aeef7c6c15b81e56de7bb1e906397c6cf35") 00:18:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 00:18:53 executing program 1: syz_clone(0x41004000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x3, 0x8, 0x8, 0x401, 0x0, 0x4}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) 00:18:53 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) [ 1202.984902][T23898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x40000003, 0x0, 0x0) 00:18:53 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) [ 1203.101629][T23898] device veth27 entered promiscuous mode 00:18:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x3, 0x8, 0x8, 0x401, 0x0, 0x4}, 0x1c) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) 00:18:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@hci, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) [ 1203.289087][T23921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mremap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000823000/0x3000)=nil) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a764058b3eb4934427a0616623758f7700d76bfc8dc47c13a15926aab74464649e7d3a3fc33511df8e8caafb0c655b3bbe33515b0faffedd18d49c66ed370ccc587c4687fcdfc5fa7f20f302a8c99c8ce725240573477aab2c91d565692296ca8642366464cab884a64ce134836c666b612dd1695d90b1f08799123eb1e1bc9828f1850d8"], 0x24}}, 0x0) [ 1203.347283][T23921] device veth29 entered promiscuous mode 00:18:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:54 executing program 5: getpid() syz_clone(0x41004000, &(0x7f0000000000)="647651a17b1fe396c0c5e57fb63cb766b9f1f13a3253553ed92324504084d322acc54b8d70a2bef3b6", 0x29, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a09f78420c292f5dd94660565a95e729f22156a8c92c6742c9e1682ee711fdb2b99059a482ca19f21102b686b2419dccc76cf47d72b6042a57ad1d893731c1b21e0341110af0281d00771c167ab924d3925d70909664b66c0b088a7d1352efb21ccc9ca9b23c0abb5f745accae5c56bfa590c26033fec96eed97069b8073b084cee78fa1a0f78a9b0d2666c84c5c8f395c551ec81112226854a43e0842ea8db0caced9b6d9f2b23c5ef9540f71c3818937150aeef7c6c15b81e56de7bb1e906397c6cf35") 00:18:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) mremap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000823000/0x3000)=nil) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a764058b3eb4934427a0616623758f7700d76bfc8dc47c13a15926aab74464649e7d3a3fc33511df8e8caafb0c655b3bbe33515b0faffedd18d49c66ed370ccc587c4687fcdfc5fa7f20f302a8c99c8ce725240573477aab2c91d565692296ca8642366464cab884a64ce134836c666b612dd1695d90b1f08799123eb1e1bc9828f1850d8"], 0x24}}, 0x0) [ 1203.492438][T23932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1203.607903][T23932] device veth31 entered promiscuous mode 00:18:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) mremap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000823000/0x3000)=nil) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a764058b3eb4934427a0616623758f7700d76bfc8dc47c13a15926aab74464649e7d3a3fc33511df8e8caafb0c655b3bbe33515b0faffedd18d49c66ed370ccc587c4687fcdfc5fa7f20f302a8c99c8ce725240573477aab2c91d565692296ca8642366464cab884a64ce134836c666b612dd1695d90b1f08799123eb1e1bc9828f1850d8"], 0x24}}, 0x0) 00:18:54 executing program 1: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:18:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1203.796466][T23954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1203.842091][T23954] device veth33 entered promiscuous mode 00:18:54 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='-)\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 00:18:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB="08001a08", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:18:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}, 0x300}, 0x0) [ 1204.053654][T23960] device veth35 entered promiscuous mode [ 1204.065717][T20681] usb 2-1: new high-speed USB device number 75 using dummy_hcd 00:18:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @loopback, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5000000}) 00:18:54 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'hsr0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 00:18:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:18:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB="08001a08", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB="08001a08", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) 00:18:54 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x541b, 0x0) [ 1204.286493][T23975] device veth37 entered promiscuous mode [ 1204.379660][T20681] usb 2-1: Using ep0 maxpacket: 32 [ 1204.505705][T20681] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1204.517962][T20681] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1204.532228][T20681] usb 2-1: config 1 has no interface number 1 [ 1204.539998][T20681] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1204.554816][T20681] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.566195][T20681] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1204.755816][T20681] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.765845][T20681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.773920][T20681] usb 2-1: Product: syz [ 1204.778743][T20681] usb 2-1: Manufacturer: syz [ 1204.783431][T20681] usb 2-1: SerialNumber: syz [ 1205.168877][T20681] usb 2-1: USB disconnect, device number 75 [ 1205.185750][T20518] udevd[20518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:18:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$qrtrtun(r0, 0x0, 0x0) 00:18:56 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast2}, @l2tp={0x2, 0x0, @dev}, @in={0x2, 0x0, @loopback}}) 00:18:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r7, @ANYBLOB="08001a08", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:18:56 executing program 5: r0 = getpid() ptrace$peekuser(0x3, r0, 0x0) syz_clone(0x41004000, &(0x7f0000000000)="647651a17b1fe396c0c5e57fb63cb766b9f1f13a3253553ed92324504084d322acc54b8d70a2bef3b6fe2279c3a232a1b01ebd03996c4eaa0992d135ebbcd323ff", 0x41, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a09f78420c292f5dd94660565a95e729f22156a8c92c6742c9e1682ee711fdb2b99059a482ca19f21102b686b2419dccc76cf47d72b6042a57ad1d893731c1b21e0341110af0281d00771c167ab924d3925d70909664b66c0b088a7d1352efb21ccc9ca9b23c0abb5f745accae5c56bfa590c26033fec96eed97069b8073b084cee78fa1a0f78a9b0d2666c84c5c8f395c551ec81112226854a43e0842ea8db0caced9b6d9f2b23c5ef9540f71c3818937150aeef7c6c15b81e56de7bb1e906397c6cf355f9d16648f7153baa4e228e21c3132404e06f4b2e1") syz_clone(0x30000800, &(0x7f0000000200)="e224d02e48c4af5c8beb5468f591ecee3df6e74cd85851c51d2138407881f1cd9d098c40b60407b91ba29d897bdb9d8489491e33d38077ddaadb1f7eeef5594e1fadb79a1ae8be46d831a8040d9953bb10870b454401b2bb382f7a79", 0x5c, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="d2fed33b92e99cb4965779238a2b9c9aaab3e690fd16826ed4523d445711aa41f4bee1f80b7f26d8") 00:18:56 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:18:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:56 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x4006010) 00:18:56 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x891a, 0x0) 00:18:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @loopback, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x5000000, r2}) 00:18:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x50000000}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:18:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="11", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1205.725551][T24007] device veth39 entered promiscuous mode 00:18:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="110000000000000000000000010000001f00000000000000110000000000000000000000010000004d000000000000001148"], 0xb8}, 0x0) 00:18:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:56 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x891b, 0x0) 00:18:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x50000000}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x50000000}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) [ 1206.030899][T24031] device veth41 entered promiscuous mode 00:18:56 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x1, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xbb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xab, 0x81, 0x0, {0x7, 0x25, 0x1, 0x0, 0x11, 0x7}}}}}}}]}}, 0x0) 00:18:56 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts={{0x18}}], 0x18}, 0x0) 00:18:56 executing program 4: r0 = syz_clone3(0x0, 0x0) r1 = syz_clone(0x44000000, &(0x7f0000000140)="7ee912c2881e6aaf2440124f2b213300a0ab0a3a950e92520aeabd16e815aaed8c7a62063a2dcbc87ce3b510df10103ec0121a06db4aa67e5e8fbe8a19f80173b6aa7cb09a97563976fe86ba2e794dd6011c4b23cb0dffbb93665e9eea64f866a0620c34d5bf1ba3f7f039a7fa040351abdd7b17dea624e29e3c00721e1d9ca43ae5dbab4b9ccf9d", 0x88, &(0x7f0000000240), 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000a00), 0x4) tee(r2, r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_clone3(&(0x7f0000000480)={0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x2}, 0x58) kcmp(r4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone3(&(0x7f0000000340)={0x214011000, 0x0, &(0x7f0000000040), &(0x7f0000000100), {0x2e}, 0x0, 0x0, &(0x7f00000000c0)=""/55, &(0x7f0000000300)=[r1, r4, r0], 0x3}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x202480, 0x0) syz_clone(0x98041080, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 00:18:56 executing program 1: syz_clone(0x41004000, &(0x7f0000000000)="647651a17b1fe3", 0x7, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a09f78420c292f5dd94660565a95e729f22156a8c92c6742c9e1682ee711fdb2b99059a482ca19f21102b686b2419dccc76cf47d72b6042a57ad1d893731c1b21e0341110af0281d00771c167ab924d3925d70909664b66c0b088a7d1352efb21ccc9ca9b23c0abb5f745accae5c56bfa590c26033fec96eed97069b8073b084cee78fa1a0f78a9b0d2666c84c5c8f395c551ec81112226854a43e0842ea8db0caced9b6d9f2b23c5ef9540f71c3818937150aeef7c6c15b81e56de7bb1e906397c6cf355f9d16") 00:18:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x50000000}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:18:56 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) [ 1206.249889][T24053] __nla_validate_parse: 4 callbacks suppressed [ 1206.249907][T24053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:56 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000005b00)=[{{&(0x7f0000000000)=@isdn={0xa}, 0x80, 0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x0) 00:18:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) mprotect(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x2000000) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1206.318842][T24053] device veth43 entered promiscuous mode 00:18:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 00:18:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:18:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) (rerun: 64) mprotect(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x2000000) (async) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x12) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1206.501636][T24075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1206.545803][T20681] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1206.575647][T24075] device veth45 entered promiscuous mode [ 1206.785631][T20681] usb 6-1: Using ep0 maxpacket: 32 [ 1206.915606][T20681] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1206.924340][T20681] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1206.934967][T20681] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1207.097544][T20681] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1207.115747][T20681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.123932][T20681] usb 6-1: Product: syz [ 1207.135606][T20681] usb 6-1: Manufacturer: syz [ 1207.140305][T20681] usb 6-1: SerialNumber: syz [ 1207.505783][T20681] usb 6-1: 0:2 : does not exist [ 1207.518982][T20681] usb 6-1: USB disconnect, device number 83 [ 1207.544319][T20518] udevd[20518]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:18:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@unspec, @isdn, @sco}) 00:18:58 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) mprotect(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x2000000) (async) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x12) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:18:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:18:58 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8917, 0x0) 00:18:58 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}) 00:18:58 executing program 0: syz_clone(0x44000000, &(0x7f0000000140)="7ee912c2881e6aaf2440124f2b213300a0ab0a3a950e92520aeabd16e815aaed8c7a62063a2dcbc87ce3b510df10103ec0121a06db4aa67e5e8fbe8a19f80173b6aa7cb09a97563976fe86ba2e794dd6011c4b23cb0dffbb93665e9eea64f866a0620c", 0x63, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="97b60a5df60ab9eaf7ddd4316b0af0638f50a377") write$char_usb(0xffffffffffffffff, &(0x7f0000000500)="8850fed1b93bd46a2284bf304d0ea9590e03406bdbc8cf7361586973fc9cb58d6e4dbe7fa880158036563ebeb91860868b61fcb2", 0x34) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000a00), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) syz_clone3(&(0x7f0000000340)={0x214011000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x2e}, &(0x7f00000005c0)=""/53, 0x35, &(0x7f00000000c0)=""/55, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x58) 00:18:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffdbdf2510000000080008"], 0x2c}}, 0x0) 00:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f"], 0x40}}, 0x0) [ 1207.982815][T24096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:58 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80) [ 1208.101788][T24096] device veth47 entered promiscuous mode [ 1208.107984][T24108] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) 00:18:58 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8935, 0x0) 00:18:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:18:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @mcast1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2320082}) 00:18:58 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x4006010) 00:18:58 executing program 5: r0 = getpid() ptrace$peekuser(0x3, r0, 0x0) syz_clone(0x41004000, &(0x7f0000000000)="647651a17b1fe396c0c5e57fb63cb766b9f1f13a3253553ed92324504084d322acc54b8d70a2bef3b6fe2279c3a232a1b01ebd03996c4eaa0992d135ebbcd323ff", 0x41, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="a09f78420c292f5dd94660565a95e729f22156a8c92c6742c9e1682ee711fdb2b99059a482ca19f21102b686b2419dccc76cf47d72b6042a57ad1d893731c1b21e0341110af0281d00771c167ab924d3925d70909664b66c0b088a7d1352efb21ccc9ca9b23c0abb5f745accae5c56bfa590c26033fec96eed97069b8073b084cee78fa1a0f78a9b0d2666c84c5c8f395c551ec81112226854a43e0842ea8db0caced9b6d9f2b23c5ef9540f71c3818937150aeef7c6c15b81e56de7bb1e906397c6cf355f9d16648f7153baa4e228e21c3132404e06f4b2e1") r1 = syz_clone(0x0, &(0x7f0000000200)="e224d02e48c4af5c8beb5468f591ecee3df6e74cd85851c51d2138407881f1cd9d098c40b60407b91ba29d897bdb9d8489491e33d38077ddaadb1f7eeef5594e1fadb79a1ae8be46d831a8040d9953bb10870b454401b2bb382f7a79", 0x5c, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="d2fed33b92e99cb4965779238a2b9c9aaab3e690fd16826ed4523d445711aa41f4bee1f80b7f26d8") sched_rr_get_interval(r1, 0x0) 00:18:59 executing program 1: ptrace$peekuser(0x3, 0x0, 0x0) syz_clone(0xf005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) getpid() [ 1208.384846][T24117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:59 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 00:18:59 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) connect(r0, &(0x7f0000000500)=@in={0x2, 0x0, @empty}, 0x80) [ 1208.498160][T24117] device veth49 entered promiscuous mode 00:18:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:18:59 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8916, 0x0) 00:18:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x0, r2}) 00:18:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff18, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 00:18:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x200}, 0x48) [ 1208.699788][T24136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c8c9) [ 1208.764539][T24136] device veth51 entered promiscuous mode 00:18:59 executing program 0: r0 = epoll_create(0xf0f2) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 00:18:59 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000240), 0x10) 00:18:59 executing program 5: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) 00:18:59 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000005540), &(0x7f0000005580)) 00:18:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x1e, r0, 0xfffffffffffffffc) 00:18:59 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 00:18:59 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000240), 0x10) 00:18:59 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x3}, 0x10) 00:18:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d}]}, 0x10) 00:18:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0xd}, {}]}]}}, &(0x7f0000000080)=""/261, 0x3e, 0x105, 0x801}, 0x20) 00:18:59 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) 00:18:59 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000240), 0x10) 00:18:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=[{0x61, 0x0, 0x0, 0x90}]}, 0x10) 00:18:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x41, 0x0, &(0x7f0000000180)) 00:18:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000) 00:18:59 executing program 4: setxattr$security_capability(&(0x7f0000000740)='.\x00', 0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:18:59 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 00:18:59 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 00:18:59 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') setns(r0, 0x10000000) 00:18:59 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 1209.344291][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:00 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x63]}}}]}}) 00:19:00 executing program 0: unshare(0x4a000400) 00:19:00 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30}, {}]}) 00:19:00 executing program 5: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) [ 1209.476596][T24196] fuse: Bad value for 'fd' [ 1209.483300][T24184] device veth53 entered promiscuous mode 00:19:00 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x7000) 00:19:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 00:19:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x401}, 0x14}}, 0x0) 00:19:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x8000000) 00:19:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x35}]}, 0x10) 00:19:00 executing program 5: socket$netlink(0x2, 0x2, 0x0) [ 1209.685285][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x0, @broadcast}}) 00:19:00 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x82c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0/file1\x00', &(0x7f0000000680), 0x0, &(0x7f0000000800)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 00:19:00 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = getuid() ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000011c0)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast2}}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000700)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x24, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300080, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, 'trusted.overlay.upper\x00'}}, {@fscache}, {@cache_none}, {@aname={'aname', 0x3d, '/-@'}}, {@access_uid={'access', 0x3d, r1}}], [{@appraise}, {@seclabel}, {@audit}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, '&'}}]}}) setxattr$trusted_overlay_upper(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), &(0x7f0000000300)=ANY=[@ANYBLOB="00fb150000f7dc67df627e70cda1336ac08825f1adc2c0dfec55dfcfee85c97cad80b587a5c4eebb848233c288aaa62a1d03fe9d03532526d6f34b2019cbfb9af524a99418474b015a19d31f431c7b1aa6975d2338dbd12ebfaed4b2fa54ce22ba2f4643b39a0e2d83a7feb564f8c9879c89b74e00cdd92f9ef9bb8c2e18238b3bb8ca7e298ecc0d4c60da15f7bffd68c8c460feb24a7ada01be6a92837cb91b98a3a1d76ddc5a39e1edddc60b12a6da2e"], 0x15, 0x0) 00:19:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/252, 0x32, 0xfc, 0x1}, 0x20) 00:19:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:00 executing program 4: clock_gettime(0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x86, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x1, 0x0) 00:19:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x2d}]}, 0x10) 00:19:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f00000001c0)=@delchain={0xe84, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_rsvp={{0x9}, {0xe4c, 0x2, [@TCA_RSVP_ACT={0xe48, 0x6, [@m_ctinfo={0x108, 0x15, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x84000000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x10001, 0x2, 0x8, 0x400}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x71, 0x6, "d495685d55c4db19dbab8a7a3049284dfed92606e5fe80d57dd3e76793bd784652014fb3db828e0dd9830299071c741d9e98230c118dfc2a2e8021ed4b35e688c6969fdc684cd96cb83fe68a929a657d311f0b0dec383eb9d630d57e88e2b5ba40241d95c3b858c7b0c35df076"}, {0xc}, {0xc}}}, @m_mpls={0xdc, 0xa, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7687, 0x7ff, 0x7, 0x800, 0x200}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x805}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa934}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}]}, {0x52, 0x6, "025e6ebc44cbcc55928233f11761056d9f20171b6eee7f93007b7e490e9482da514550064cdd77ab0491fa8a2c19fdc18d3ec44556fe1f3fdfccf9c7110c608206aa56bf9e5ee62cda2f0b6ad494"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x19c, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x663b, 0x6, 0x1, 0x3f, 0x8}, @dev={0xac, 0x14, 0x14, 0x21}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8001, 0x7, 0xbb10, 0xff}, @empty, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x20, 0x7, 0x89, 0x4}, @local, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x1, 0x5, 0x2, 0x99}, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x28b, 0xbea, 0x20000000, 0x1, 0x81}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x5, 0x8819, 0xd1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xff, 0x1}}]}, {0x83, 0x6, "5a43da87e7004abd8f1a2dfb7cf901ae7e0742e3de71d3a7c07d5d0800fd9a0e33bcc69be353c2d0dde93a57f7a0d08f936159f5a49ddce8d12064eec5e0a31104c3daf60043bbb329c0fca612fe463c97ff44b4e2e4e0ca5d8902937b0eb0ac8ee489d335a12b3aa606d4b8c40cf6d0d547109b80aff4de1c54bcdc00dbc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xa94, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xa62, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe84}}, 0x20008054) [ 1209.936708][T24222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1209.966865][T24226] fuse: blksize only supported for fuseblk 00:19:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x0, 0x0, 0x0, 0xa04, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 00:19:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000240)={'pimreg1\x00', @ifru_hwaddr=@link_local}) 00:19:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:00 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:19:00 executing program 4: prctl$PR_GET_IO_FLUSHER(0x22) 00:19:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:00 executing program 5: socketpair$unix(0x2, 0x2, 0x11, &(0x7f0000000140)) 00:19:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f00000001c0)=@delchain={0xe84, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_rsvp={{0x9}, {0xe4c, 0x2, [@TCA_RSVP_ACT={0xe48, 0x6, [@m_ctinfo={0x108, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x71, 0x6, "d495685d55c4db19dbab8a7a3049284dfed92606e5fe80d57dd3e76793bd784652014fb3db828e0dd9830299071c741d9e98230c118dfc2a2e8021ed4b35e688c6969fdc684cd96cb83fe68a929a657d311f0b0dec383eb9d630d57e88e2b5ba40241d95c3b858c7b0c35df076"}, {0xc}, {0xc}}}, @m_mpls={0xdc, 0x0, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}]}, {0x51, 0x6, "025e6ebc44cbcc55928233f11761056d9f20171b6eee7f93007b7e490e9482da514550064cdd77ab0491fa8a2c19fdc18d3ec44556fe1f3fdfccf9c7110c608206aa56bf9e5ee62cda2f0b6ad4"}, {0xc}, {0xc}}}, @m_nat={0x19c, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}]}, {0x81, 0x6, "5a43da87e7004abd8f1a2dfb7cf901ae7e0742e3de71d3a7c07d5d0800fd9a0e33bcc69be353c2d0dde93a57f7a0d08f936159f5a49ddce8d12064eec5e0a31104c3daf60043bbb329c0fca612fe463c97ff44b4e2e4e0ca5d8902937b0eb0ac8ee489d335a12b3aa606d4b8c40cf6d0d547109b80aff4de1c54bcdc00"}, {0xc}, {0xc}}}, @m_connmark={0xac4, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xa91, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xe84}}, 0x0) 00:19:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000006c0)=ANY=[]) 00:19:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) 00:19:00 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) 00:19:00 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x12, 0x4}, 0x4c}}, 0x0) [ 1210.297956][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:01 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x4c}, 0x4c}}, 0x0) 00:19:01 executing program 0: pselect6(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x4]}, 0x8}) 00:19:01 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='smaps_rollup\x00') 00:19:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x19, 0x9, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:01 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "fff0368e8f7b8336e785cb65e21e8f62"}, 0x15, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1210.508035][T24252] device veth55 entered promiscuous mode 00:19:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) 00:19:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0xe5) 00:19:01 executing program 1: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0xc2, {{0x2, 0x4e20, @local}}}, 0x88) syz_open_dev$loop(&(0x7f0000000100), 0x1000, 0x400000) r0 = syz_open_dev$loop(0x0, 0x5, 0x212002) r1 = dup(r0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@allow_other}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, '/dev/loop#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/loop#\x00'}}]}}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4004) splice(r3, &(0x7f00000006c0), r1, &(0x7f0000000700)=0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000740)='.\x00', &(0x7f0000000780), &(0x7f00000007c0)=@v2={0x2000000, [{0xffffffff, 0x2}, {0x100000, 0x4}]}, 0x14, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x9, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="bf87a8dd8a03c6ba860a024acb7ce12b6bd043b791b5e3eebab567e2251108b9dee2fe27bc3dc99127c602c9027ac2c9981b72954619138e7a4c723bd5d90c6a3d5521462f58f14a810e3e14cbac10febbcb4651a5b23686d6c767d91617dd95132ac11305785f09af9fea65f60fa8d18d31509cd49032155212320246abade3cca9792bd75600c9574fc30d48811b112e026e265094a2469f6a3e7e495c3fe43353eab4f203fa83fce622ac157e98393d18aa17e09a2d8bdfa1b93925a75166de12af275d", 0xc5, 0xbf}, {&(0x7f0000000980)="ce907c870bfaf6f27f8ede1f0ec39fa4c19b22a212e07d0467aa057dac6f8217400fe8f2f9cc4153f0538b00716bc43848fe2c7a26e0cc5e6c447a6fc51f2d23ca2bdb4328a9f65626e5e96b203ea91ab774f0a1c6f94cdcf98b7b435c", 0x5d, 0x1f}], 0x1000488, &(0x7f0000000b00)={[{@jqfmt_vfsv1}, {@nolazytime}, {@jqfmt_vfsv0}, {@abort}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@uid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'hash'}}]}) 00:19:01 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) 00:19:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a1, &(0x7f00000001c0)={'tunl0\x00', 0x0}) [ 1210.646485][T24277] fuse: Bad value for 'fd' 00:19:01 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0xc, 0xc48, 0x80}, 0x10}, 0x80) [ 1210.680516][T24277] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 00:19:01 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="795b703ceb94f287273191be0257d1c90f72899baa30ec63cd4643c1eb9ecb8a261672b86e1f33d82a51f1a2e3f01526f7eeab8290f72606944da327da7aefbc69c81dea65b189f88cc15dfa33cece38c762c958d92ab83c42079e42d2847f", 0x5f, 0x0) keyctl$unlink(0xf, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 00:19:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) [ 1210.752033][T24280] device veth57 entered promiscuous mode 00:19:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) 00:19:01 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 00:19:01 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0xd}, 0x10) 00:19:01 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={0x0}}, 0x20000050) 00:19:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fmask=000000000000000000007772n']) 00:19:01 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x18101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x0) [ 1210.999494][T24293] device veth59 entered promiscuous mode 00:19:01 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3}]}]}}, &(0x7f0000000080)=""/261, 0x2e, 0x105, 0x801}, 0x20) 00:19:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x18a7, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 00:19:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:01 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_hash}]}}) [ 1211.071830][T24307] FAT-fs (loop5): Unrecognized mount option "fmask=000000000000000000007772n" or missing value 00:19:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0xf, r0, 0xfffffffffffffffc) 00:19:01 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) [ 1211.190801][T24315] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 00:19:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x40000001, 0x0) 00:19:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001900), 0xffffffffffffffff) 00:19:02 executing program 1: socketpair$unix(0x10, 0x0, 0xf, &(0x7f0000000140)) 00:19:02 executing program 4: syz_mount_image$msdos(0x0, &(0x7f000000cf80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000008000)='./file0\x00', &(0x7f000000c080), 0x0, 0x0) 00:19:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000471000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB="68b57084612662102231320746426c6561fb146416e061aac0f506184780186a8e42425fa818298ff92e2788f7b4291729643bd43f5a4692b40f27654dc368db44a265224052b71576ced821aecd4e26e210257c54bf691be1a48b30d5616d7853ccaed0c5ee5728da0927e00b4f40a744c6b3d98f814b390059c993616abf46337da4d11e3431e5dafc25410c550e1d87df7caaac6050219bfbb693aaf0f9145eb17be95ef165f20a667e34558e4ea67e1bc60c065207999dcb345d18ba7436e1de4812403b373b33c058e96e7377084ebee2aaafc84c100acd90383a268de56893b3c2d0bc9d80ee866ffd362f0c445403861faebf1022c688bf26efa4d1c269fb8d8bd6de08aea9630a94ee809bbfc4d68dcf2e184e", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) [ 1211.393469][T24322] __nla_validate_parse: 3 callbacks suppressed [ 1211.393485][T24322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x45}]}) 00:19:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 00:19:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x890e, &(0x7f0000004d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 00:19:02 executing program 4: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:19:02 executing program 5: mount$fuse(0x0, 0x0, 0x0, 0x1afda63bafaf79ba, 0x0) 00:19:02 executing program 1: bpf$BPF_GET_PROG_INFO(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1211.567575][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x40}}, 0x0) [ 1211.609962][T24344] fuse: Bad value for 'fd' 00:19:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000471000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000471000/0x1000)=nil, 0x1000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) pkey_alloc(0x0, 0x1) (async) pkey_mprotect(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x0, r0) (async) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) (async) 00:19:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) 00:19:02 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) bind$packet(r0, 0x0, 0x0) 00:19:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @remote, [], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 'veth0_to_team\x00', 'pimreg\x00', {0xff}, {0xff}, 0x67, 0x0, 0x3, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 00:19:02 executing program 0: prctl$PR_GET_IO_FLUSHER(0x36) [ 1211.734947][T24351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1211.805119][T24358] x_tables: duplicate underflow at hook 2 00:19:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) 00:19:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000080)=""/4096, 0x7e, 0x1000, 0x1}, 0x20) 00:19:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 00:19:02 executing program 1: setxattr$security_capability(&(0x7f0000000740)='.\x00', &(0x7f0000000780), 0x0, 0x0, 0x0) [ 1211.851914][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:02 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xe}]}]}}, &(0x7f0000000180)=""/252, 0x3e, 0xfc, 0x1}, 0x20) 00:19:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:02 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x200000) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) 00:19:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000471000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x0, r0) (async) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) 00:19:02 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000001900), 0xffffffffffffffff) 00:19:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}}, 0x0) 00:19:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r4) 00:19:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:02 executing program 4: prctl$PR_GET_IO_FLUSHER(0x2a) 00:19:02 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f0000000040)='btrfs\x00', 0x2188011, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8903, &(0x7f0000004d40)) 00:19:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x2}]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x30d}, 0x14}}, 0x0) 00:19:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 00:19:03 executing program 1: r0 = epoll_create(0xce70) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:19:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 00:19:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x4, r0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) 00:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (rerun: 64) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f0000000040)='btrfs\x00', 0x2188011, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000180)=""/252, 0x32, 0xfc, 0x1}, 0x20) 00:19:03 executing program 4: add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 00:19:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 00:19:03 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid}]}}) 00:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mount(0x0, 0x0, &(0x7f0000000040)='btrfs\x00', 0x2188011, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:03 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 00:19:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x0, 0x0, 0x6}, 0x48) [ 1212.667237][T24439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.699564][T24441] fuse: Bad value for 'fd' 00:19:03 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 00:19:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000010201f0ffffff00000000000a0000015c000180060003400001000006000340000100002c000180140003000063ff000000000000000000000000011400040000000000000000000040ffffe00000010600034000000000140002"], 0x70}}, 0x0) 00:19:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1000000}]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:03 executing program 4: bpf$BPF_GET_PROG_INFO(0xb, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) 00:19:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x9, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x10) [ 1212.905183][T24462] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r3) (async) fcntl$dupfd(r0, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) (async) 00:19:03 executing program 4: prctl$PR_GET_IO_FLUSHER(0x26) 00:19:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0x0) 00:19:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 00:19:03 executing program 0: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}]}}) pipe2$watch_queue(0x0, 0x80) [ 1213.051212][T24476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0x0) 00:19:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='2', 0x1, r0) keyctl$link(0x8, r1, r0) 00:19:03 executing program 1: clock_nanosleep(0xf386cb7ffb1d3ac8, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) futex(&(0x7f00000000c0), 0x8, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='compact_retry\x00'}, 0x10) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) clock_gettime(0x4, &(0x7f0000000340)) [ 1213.162110][T24485] fuse: Bad value for 'fd' 00:19:03 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x3, r1}) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) (async) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}}, 0x0) 00:19:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0x0) 00:19:03 executing program 0: prctl$PR_GET_IO_FLUSHER(0x2c) 00:19:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x60}]}, 0x10) 00:19:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="37ccf5ea", 0x4) 00:19:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x4, r1, 0x0) 00:19:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x88}}, 0x0) 00:19:04 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) open$dir(&(0x7f00000001c0)='./file0/file1\x00', 0x4000, 0x0) 00:19:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64}, {}]}) 00:19:04 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r6 = fcntl$dupfd(r4, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r7 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3387946ea80d5aa29a37f4976981ab93cd43b2e638e36f790a8210cab278666c64a88a377f8e9d3425d1aabee92ad44c350827c1b6135143e8c8c6f33a3364b7000000000000"], 0x24}}, 0x0) [ 1213.440344][T24518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:04 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) 00:19:04 executing program 1: r0 = socket(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 1213.578583][ T27] audit: type=1400 audit(1660522744.226:880): avc: denied { ioctl } for pid=24530 comm="syz-executor.1" path="socket:[191048]" dev="sockfs" ino=191048 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 00:19:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ffa08798c88f3da793b4d1cb311632740af93e3bca88f3ef37f171abd8e73e773624e85e019490b158f91d2cae0b7ac86144105140322ebca6518883c9877654", "e954d62f7586947fc4ef48f66f92722caafcedec6a00c398b12c1ab9e78b17b62aefe450a7433afd0a951a2f57dc4d05fdabd091a94f9804c11ed2e886cbbcc6", "bd917b7c646fa8e52c7af079ca7e07cdd948a8f61e2b88abd8ea2bd8d507d40f"}) 00:19:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8b02, 0x0) 00:19:04 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001b40)=[{&(0x7f0000000a80)="cd", 0x1, 0x100000000}], 0x0, 0x0) 00:19:04 executing program 1: keyctl$unlink(0x18, 0x0, 0xfffffffffffffffc) 00:19:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:04 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r6 = fcntl$dupfd(r4, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3387946ea80d5aa29a37f4976981ab93cd43b2e638e36f790a8210cab278666c64a88a377f8e9d3425d1aabee92ad44c350827c1b6135143e8c8c6f33a3364b7000000000000"], 0x24}}, 0x0) 00:19:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45}]}, 0x10) 00:19:04 executing program 4: syz_open_dev$usbmon(&(0x7f00000010c0), 0x0, 0xe102) 00:19:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x2, r0, 0xfffffffffffffffc) clock_gettime(0x0, 0x0) [ 1213.734482][T24543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1213.763653][T24540] loop5: detected capacity change from 0 to 264192 [ 1213.769899][T20518] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:19:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3}]}, 0x10) [ 1213.808784][T20518] Buffer I/O error on dev loop5, logical block 0, async page read [ 1213.830996][T20518] loop5: unable to read partition table 00:19:04 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async, rerun: 64) r6 = fcntl$dupfd(r4, 0x0, r1) (rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3387946ea80d5aa29a37f4976981ab93cd43b2e638e36f790a8210cab278666c64a88a377f8e9d3425d1aabee92ad44c350827c1b6135143e8c8c6f33a3364b7000000000000"], 0x24}}, 0x0) 00:19:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x20000000}]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:04 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 00:19:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x3}]}, 0x10) 00:19:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000240)={'macsec0\x00', @ifru_flags}) 00:19:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1214.052696][T24571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x1d, r0, 0xfffffffffffffffc) 00:19:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xa4000, 0x3) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mremap(&(0x7f000036c000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r5 = dup(r3) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="9a84a5f136d86703b0e819b6726afd367d967101dc32778a27f20e71e5738c12ff28ee900e18b77aaf44bd7843d9341d8641bf16a0fb8c92d17291f51facc0f25cdd532a3d495c800176c1f8577e607e4d7f0c008f0080ca54eddf9a9969000375e79fbf55e0d95089824cfdc3a95152ceebddf3c5be4598caf2f18058bd5cfb2c8f323ec3200e3c354d7efa6a98b430c970820fef789cfa1d84423cc2dfd1d82bd1dc2bfedd88e3c966b92c58789cca1de0c82f1ae8d6f06c9ebf629a80a45fae896d1c48b9e099b2375fefa91b2921530032f2b817fddc7ce03eff2b5a7a686a21fcc2ad0604150d395a7243c85141c588fa94d5ec6b"], 0x24}}, 0x0) 00:19:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 00:19:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000000ff"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:04 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000004d40)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x8901, &(0x7f0000004d40)) 00:19:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x14}, 0x48) 00:19:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) 00:19:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9}]}, 0x10) 00:19:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x205, 0xffffffffffffffff, 0x2}, 0x48) 00:19:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xa4000, 0x3) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mremap(&(0x7f000036c000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r5 = dup(r3) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="9a84a5f136d86703b0e819b6726afd367d967101dc32778a27f20e71e5738c12ff28ee900e18b77aaf44bd7843d9341d8641bf16a0fb8c92d17291f51facc0f25cdd532a3d495c800176c1f8577e607e4d7f0c008f0080ca54eddf9a9969000375e79fbf55e0d95089824cfdc3a95152ceebddf3c5be4598caf2f18058bd5cfb2c8f323ec3200e3c354d7efa6a98b430c970820fef789cfa1d84423cc2dfd1d82bd1dc2bfedd88e3c966b92c58789cca1de0c82f1ae8d6f06c9ebf629a80a45fae896d1c48b9e099b2375fefa91b2921530032f2b817fddc7ce03eff2b5a7a686a21fcc2ad0604150d395a7243c85141c588fa94d5ec6b"], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xa4000, 0x3) (async) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) mremap(&(0x7f000036c000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="9a84a5f136d86703b0e819b6726afd367d967101dc32778a27f20e71e5738c12ff28ee900e18b77aaf44bd7843d9341d8641bf16a0fb8c92d17291f51facc0f25cdd532a3d495c800176c1f8577e607e4d7f0c008f0080ca54eddf9a9969000375e79fbf55e0d95089824cfdc3a95152ceebddf3c5be4598caf2f18058bd5cfb2c8f323ec3200e3c354d7efa6a98b430c970820fef789cfa1d84423cc2dfd1d82bd1dc2bfedd88e3c966b92c58789cca1de0c82f1ae8d6f06c9ebf629a80a45fae896d1c48b9e099b2375fefa91b2921530032f2b817fddc7ce03eff2b5a7a686a21fcc2ad0604150d395a7243c85141c588fa94d5ec6b"], 0x24}}, 0x0) (async) 00:19:05 executing program 5: clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 00:19:05 executing program 1: mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) 00:19:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x5}]}, 0x10) 00:19:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0) 00:19:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xa4000, 0x3) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) mremap(&(0x7f000036c000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r5 = dup(r3) r6 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000001d01020008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="9a84a5f136d86703b0e819b6726afd367d967101dc32778a27f20e71e5738c12ff28ee900e18b77aaf44bd7843d9341d8641bf16a0fb8c92d17291f51facc0f25cdd532a3d495c800176c1f8577e607e4d7f0c008f0080ca54eddf9a9969000375e79fbf55e0d95089824cfdc3a95152ceebddf3c5be4598caf2f18058bd5cfb2c8f323ec3200e3c354d7efa6a98b430c970820fef789cfa1d84423cc2dfd1d82bd1dc2bfedd88e3c966b92c58789cca1de0c82f1ae8d6f06c9ebf629a80a45fae896d1c48b9e099b2375fefa91b2921530032f2b817fddc7ce03eff2b5a7a686a21fcc2ad0604150d395a7243c85141c588fa94d5ec6b"], 0x24}}, 0x0) 00:19:05 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x11, r0, 0x0) 00:19:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x3, r0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) 00:19:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x4d}]}, 0x10) 00:19:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@can_newroute={0x34, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x0, 0x1, 0x0, 0x0, "8c844091889edc12"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0x3, 0xfffffffffffffffe, 0x3}}]}, 0x34}}, 0x0) 00:19:05 executing program 5: clock_nanosleep(0xb, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) [ 1215.117207][T24613] device veth61 entered promiscuous mode 00:19:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x42) 00:19:05 executing program 4: socketpair$unix(0x10, 0x0, 0xb, &(0x7f0000000140)) 00:19:05 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x15, r0, 0x0) 00:19:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff18, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 00:19:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async, rerun: 64) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async, rerun: 64) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async, rerun: 32) r6 = fcntl$dupfd(r0, 0x0, r3) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@can_newroute={0x34, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x0, 0x1, 0x0, 0x0, "8c844091889edc12"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0x3, 0xfffffffffffffffe, 0x3}}]}, 0x34}}, 0x0) [ 1215.293562][ T27] audit: type=1400 audit(1660522745.936:881): avc: denied { create } for pid=24636 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 00:19:06 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x7fff}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x100000000]}, 0x8}) 00:19:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 00:19:06 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0, 0xfffffff5, 0x10}, 0xc) 00:19:06 executing program 5: mount$fuseblk(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 00:19:06 executing program 1: r0 = socket(0x2, 0x3, 0xc4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) 00:19:06 executing program 4: unshare(0x64020400) [ 1215.424956][T24635] device veth63 entered promiscuous mode 00:19:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:06 executing program 0: socketpair$unix(0xa, 0x1, 0x0, &(0x7f0000000000)) 00:19:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x11, r0, 0xfffffffffffffffc) 00:19:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async) r6 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@can_newroute={0x34, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x0, 0x1, 0x0, 0x0, "8c844091889edc12"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0x3, 0xfffffffffffffffe, 0x3}}]}, 0x34}}, 0x0) 00:19:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0, 0x0, 0x9238}, {&(0x7f0000000200)="11d640d9a3fa9fa511db80892bc2c23c3994a0", 0x13, 0x3}], 0x0, &(0x7f0000002500)) 00:19:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) timerfd_gettime(r0, 0x0) 00:19:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x9, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1215.706775][T24663] device veth65 entered promiscuous mode 00:19:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x0) 00:19:06 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109022400ff0100100009"], 0x0) 00:19:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1215.757239][T24676] loop1: detected capacity change from 0 to 146 [ 1215.774351][T20518] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.794141][T20518] Buffer I/O error on dev loop1, logical block 0, async page read 00:19:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000431000/0x4000)=nil) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB="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"]) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x1000, 0x1a, &(0x7f00000000c0)=""/26}, {0xd000, 0x0, &(0x7f0000000100)}, {0xf000, 0x1000, &(0x7f0000001a40)=""/4096}, {0x0, 0xdf, &(0x7f0000000140)=""/223}, {0xd000, 0x1000, &(0x7f0000002a40)=""/4096}]}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1215.847501][T20518] loop1: unable to read partition table [ 1215.886036][T24676] FAT-fs (loop1): invalid media value (0xa0) [ 1215.892180][T24676] FAT-fs (loop1): Can't find a valid FAT filesystem 00:19:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000400)=0xbf, 0x4) 00:19:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, 0x0, 0x60ff}, 0x20) 00:19:06 executing program 1: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) 00:19:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:19:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) 00:19:06 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000431000/0x4000)=nil) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB="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"]) (async) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x1000, 0x1a, &(0x7f00000000c0)=""/26}, {0xd000, 0x0, &(0x7f0000000100)}, {0xf000, 0x1000, &(0x7f0000001a40)=""/4096}, {0x0, 0xdf, &(0x7f0000000140)=""/223}, {0xd000, 0x1000, &(0x7f0000002a40)=""/4096}]}) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:06 executing program 4: futex(0x0, 0x86, 0x0, &(0x7f0000000040), 0x0, 0x0) 00:19:06 executing program 0: futex(&(0x7f0000000000), 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0) [ 1216.205641][T23996] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1216.365898][T12807] usb 1-1: Failed to early initialize device [ 1216.437101][T12807] usb 1-1: USB2VGA dongle found at address 13 [ 1216.448907][T12807] usb 1-1: Allocated 8 output buffers [ 1216.455568][T23996] usb 6-1: Using ep0 maxpacket: 8 [ 1216.575617][T23996] usb 6-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1216.584558][T23996] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.601782][T23996] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 1216.766695][T23996] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1216.779355][T23996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.787887][T23996] usb 6-1: Product: syz [ 1216.792156][T23996] usb 6-1: Manufacturer: syz [ 1216.797298][T23996] usb 6-1: SerialNumber: syz [ 1217.044561][T23996] usb 6-1: USB disconnect, device number 84 00:19:08 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000431000/0x4000)=nil) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB="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"]) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x1000, 0x1a, &(0x7f00000000c0)=""/26}, {0xd000, 0x0, &(0x7f0000000100)}, {0xf000, 0x1000, &(0x7f0000001a40)=""/4096}, {0x0, 0xdf, &(0x7f0000000140)=""/223}, {0xd000, 0x1000, &(0x7f0000002a40)=""/4096}]}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000431000/0x4000)=nil) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB="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"]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r1) (async) fcntl$dupfd(r0, 0x406, r0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x1000, 0x1a, &(0x7f00000000c0)=""/26}, {0xd000, 0x0, &(0x7f0000000100)}, {0xf000, 0x1000, &(0x7f0000001a40)=""/4096}, {0x0, 0xdf, &(0x7f0000000140)=""/223}, {0xd000, 0x1000, &(0x7f0000002a40)=""/4096}]}) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) 00:19:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x18a7, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 00:19:08 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b000101fe0000099bf600000701000009"], 0x0) 00:19:08 executing program 1: futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000100), 0x0, 0x0) 00:19:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:08 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 00:19:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000004d40)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x1, 0x1, 0x4000000, {{0x3e, 0x4, 0x0, 0x8, 0xf8, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x93, 0x9, "fb707046de3ee0"}, @rr={0x7, 0x17, 0xb6, [@private=0xa010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x52}, 0x7}, {@remote, 0x56}, {@remote, 0xe022}]}, @cipso={0x86, 0x55, 0xffffffffffffffff, [{0x0, 0xa, "eca917a6d67b89c6"}, {0x6, 0x10, "6a82aca0d0c5d6de27ffdbce9726"}, {0x6, 0x5, '\tZA'}, {0x7, 0x3, 'E'}, {0x1, 0x10, "0bfdbab29e182c1ce7a3997a72a8"}, {0x5, 0xc, "dba8c4c54b6ab700f934"}, {0x2, 0x4, "b2f3"}, {0x6, 0xa, "1431e1e495d62098"}, {0x6, 0x3, "c3"}]}, @timestamp={0x44, 0x10, 0xfd, 0x0, 0x8, [0x3, 0x3, 0x4]}, @end, @timestamp={0x44, 0x14, 0xb2, 0x0, 0x6, [0x5, 0x2, 0x7, 0x80000001]}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xf, "0b607334f2a9a610be1c493eb4"}, {0x5, 0xc, "166546501761bd88978d"}, {0x5, 0xa, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="ac1e010101000000500000000000000000000000000000000000000000000000ac1414bb00000000e9ff000000000000e000000100000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000cbe1d57885d01145eb23e9c9ec618d08de0887c908ee"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8919, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 00:19:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x400c0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001900), 0xffffffffffffffff) [ 1217.656752][T24716] __nla_validate_parse: 6 callbacks suppressed [ 1217.656771][T24716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @private, {[@rr={0x7, 0x7, 0x0, [@dev]}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @local, @local, @dev, @private, @loopback]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @loopback]}]}}}}}) 00:19:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 00:19:08 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_setup(0x347d, &(0x7f00000000c0)={0x0, 0xf57d, 0x20, 0x3, 0x64}, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:08 executing program 1: r0 = socket$netlink(0x2, 0x3, 0xe) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) [ 1217.945909][ T3700] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1217.960280][T24751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1218.205664][ T3700] usb 5-1: Using ep0 maxpacket: 8 [ 1218.325701][ T3700] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1218.505794][ T3700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1218.518423][ T3700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.532770][ T3700] usb 5-1: Product: syz [ 1218.539989][ T3700] usb 5-1: Manufacturer: syz [ 1218.544677][ T3700] usb 5-1: SerialNumber: syz [ 1218.855645][ T3700] usb 5-1: USB disconnect, device number 16 00:19:09 executing program 4: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) 00:19:09 executing program 0: socket$inet6(0xa, 0x2, 0x3) 00:19:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_addrs=@can}) 00:19:09 executing program 1: sysinfo(&(0x7f0000000080)=""/124) 00:19:09 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) (async, rerun: 32) syz_io_uring_setup(0x347d, &(0x7f00000000c0)={0x0, 0xf57d, 0x20, 0x3, 0x64}, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) [ 1219.337580][T24760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:10 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 00:19:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x64}]}, 0x10) 00:19:10 executing program 5: bpf$BPF_GET_PROG_INFO(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:10 executing program 4: r0 = socket(0xa, 0x3, 0x9) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 00:19:10 executing program 5: keyctl$unlink(0xa, 0x0, 0xfffffffffffffffc) 00:19:10 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000004d40)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000004d40)) [ 1219.566331][T24779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:10 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 00:19:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 00:19:10 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_setup(0x347d, &(0x7f00000000c0)={0x0, 0xf57d, 0x20, 0x3, 0x64}, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) syz_io_uring_setup(0x347d, &(0x7f00000000c0)={0x0, 0xf57d, 0x20, 0x3, 0x64}, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) 00:19:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan1\x00') 00:19:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}, 0x10) [ 1219.746728][T23997] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1219.995560][T23997] usb 2-1: Using ep0 maxpacket: 8 [ 1220.115632][T23997] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.285811][T23997] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1220.294882][T23997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.303248][T23997] usb 2-1: Product: syz [ 1220.307616][T23997] usb 2-1: Manufacturer: syz [ 1220.312297][T23997] usb 2-1: SerialNumber: syz [ 1220.563284][ T144] usb 2-1: USB disconnect, device number 76 00:19:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x25}]}, 0x10) 00:19:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:11 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:19:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c0001000800030001000000700001"], 0xbc}}, 0x0) 00:19:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0, 0x0, 0x9238}, {&(0x7f0000000200)="11d640d9a3fa9fa511db80892bc2", 0xe, 0x3}], 0x0, &(0x7f0000002500)) 00:19:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) fstat(r1, &(0x7f00000000c0)) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@can_newroute={0x34, 0x19, 0x200, 0x0, 0xfffffffe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x82, 0x1, 0x0, 0x0, "37fa5245de02f989"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0xf8, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x150}, 0x0) r7 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x9, &(0x7f0000000740)=[{&(0x7f0000000180)="819df1", 0x3, 0x8}, {&(0x7f00000001c0)="7951b96b88cc8268e81b0726a6d701bcac483f70", 0x14, 0xc51b}, {&(0x7f00000002c0)="e098a62b953ebc155672f1d98715192ee1c25df7ff33085ec0a3588b607f11423c7def0af58c2d6340bb19894152887e1b473fe49c1251bbb0b1e7ea68e7baf4d7b037c2d43f19c9c8ec996bc62ac6483f731e7112e1b3e75016b7b5a09de7e6f25dde9bb49a9d76caad67fada407f9bb14625fc8510cb05c33d25f60825a8546edd35a6c6bab15206173bd3bfe0db1e54d916223d8fd767c24df94ab2ea45d028a2feb361f9d162d9322007de49d94f5e555bbd4b0fbb3861e27fb84db1c3655f676d50b5d212d8c0baf1b8c51ea744", 0xd0, 0x7fff}, {&(0x7f0000000a40)="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", 0x1000, 0x1f}, {&(0x7f0000000200)="eccc7342d9939061bacf6ec9b01bcaca3a7e5ac3623a66128fb47cc0ccd29c", 0x1f, 0x200}, {&(0x7f00000003c0)="adf4eac7fceb26c9913c633162eb4d5f196023b06d760543912a5c1ac6743f0159660c0e633d832d089b750d38aa93bcea8880e82e518425e25656af4e9ff1c4ada7e75cc397d0291835ae32c75604125b394251d937f4e78623810232632cd1b7a388a4a7af5b6512192707841cea4cfb2e9fcb52d959e8e0bb3a923780bd51d1b708e4f026b7af242d9935736786c18b352d4b355ffd0354036be8ed1dd8d659f56f8af8dfb2bbfa8cd2676e7ac1ed8d6bd412b257ab471031821132be5d235905e8c12271c9d3ebdaff43b2f1cd7af6df192e87e018627caa63195b035485af65cdae5d5293fc47", 0xe9, 0x9}, {&(0x7f0000000500)="e6c420c8a1a19db24e0434431285b1a367f53865b449427e1cc7ebaa23964421e6a1660ea929c6be1b65ce6ed7e915933dbfa048593ab03447a74aa307c8da41070627db57f57e195800f794d7d198d83487e790d7ab6a737842d5ee7afefc2c760590476cc8ef0ed5a586db1dace8a91d83713e24d129263936887cef62adc60b62729843e3792978fbdd995803f14b41d58201c7f148123482c73663d8cfe2aa928cdce79093e37e11c62293325e877063b90ce9666e05a2c207b02724f699223aff9a0d84ca46f5d9be92a545b241", 0xd0, 0x8}, {&(0x7f0000000600)="6f409c19f4d53b712da4c8ad9d87aea32b637c15edfb7da33faa2c5807a0c4542f84346beff026f19c9ebb09", 0x2c, 0x100000001}, {&(0x7f0000000640)="806c778689f1bc199c7db8135f445e76821267d2c8ffaa00395335908512e6d9253da61367655a13d0e7b7677e15068ac101a3ac7d32802f0df6b8c5df9a543473bee6e05b6aa2c1d596a5071048e4927e5157390cfeebc33c6451a47e0731a5bd0311877be5d96aef584358efb9a01209b83d09f947c27ea721ab9bd76cb76493a34363a1ae20726e81fb8167a7321471ead20296ad35c9566b2f19766df58bd9778403c9948f5279e99f7e61bcfcb4bff8eae93770e2aaa50be6215a558cc6440ae38a51c850c5c2a342bddf30580f01c516c22ffe3cbe", 0xd8, 0x8}], 0x100004, &(0x7f0000000840)={[{@upgrade}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vhost-net\x00'}}, {@subj_user={'subj_user', 0x3d, 'vxcan0\x00'}}]}) signalfd4(r7, &(0x7f00000008c0)={[0xa0]}, 0x8, 0x80800) 00:19:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) [ 1221.109767][T24811] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1221.145578][T24811] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}]}}) 00:19:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x6, r0, 0xfffffffffffffffc) [ 1221.157623][T24819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1221.199013][T24815] loop2: detected capacity change from 0 to 264192 00:19:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0, 0x4}, 0x20) 00:19:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 00:19:11 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) [ 1221.229209][T24826] fuse: Bad value for 'fd' 00:19:11 executing program 1: socket$inet6(0x2, 0x5, 0x84) 00:19:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x890e, &(0x7f0000004d40)) 00:19:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) fstat(r1, &(0x7f00000000c0)) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@can_newroute={0x34, 0x19, 0x200, 0x0, 0xfffffffe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x82, 0x1, 0x0, 0x0, "37fa5245de02f989"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0xf8, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x150}, 0x0) r7 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x9, &(0x7f0000000740)=[{&(0x7f0000000180)="819df1", 0x3, 0x8}, {&(0x7f00000001c0)="7951b96b88cc8268e81b0726a6d701bcac483f70", 0x14, 0xc51b}, {&(0x7f00000002c0)="e098a62b953ebc155672f1d98715192ee1c25df7ff33085ec0a3588b607f11423c7def0af58c2d6340bb19894152887e1b473fe49c1251bbb0b1e7ea68e7baf4d7b037c2d43f19c9c8ec996bc62ac6483f731e7112e1b3e75016b7b5a09de7e6f25dde9bb49a9d76caad67fada407f9bb14625fc8510cb05c33d25f60825a8546edd35a6c6bab15206173bd3bfe0db1e54d916223d8fd767c24df94ab2ea45d028a2feb361f9d162d9322007de49d94f5e555bbd4b0fbb3861e27fb84db1c3655f676d50b5d212d8c0baf1b8c51ea744", 0xd0, 0x7fff}, {&(0x7f0000000a40)="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", 0x1000, 0x1f}, {&(0x7f0000000200)="eccc7342d9939061bacf6ec9b01bcaca3a7e5ac3623a66128fb47cc0ccd29c", 0x1f, 0x200}, {&(0x7f00000003c0)="adf4eac7fceb26c9913c633162eb4d5f196023b06d760543912a5c1ac6743f0159660c0e633d832d089b750d38aa93bcea8880e82e518425e25656af4e9ff1c4ada7e75cc397d0291835ae32c75604125b394251d937f4e78623810232632cd1b7a388a4a7af5b6512192707841cea4cfb2e9fcb52d959e8e0bb3a923780bd51d1b708e4f026b7af242d9935736786c18b352d4b355ffd0354036be8ed1dd8d659f56f8af8dfb2bbfa8cd2676e7ac1ed8d6bd412b257ab471031821132be5d235905e8c12271c9d3ebdaff43b2f1cd7af6df192e87e018627caa63195b035485af65cdae5d5293fc47", 0xe9, 0x9}, {&(0x7f0000000500)="e6c420c8a1a19db24e0434431285b1a367f53865b449427e1cc7ebaa23964421e6a1660ea929c6be1b65ce6ed7e915933dbfa048593ab03447a74aa307c8da41070627db57f57e195800f794d7d198d83487e790d7ab6a737842d5ee7afefc2c760590476cc8ef0ed5a586db1dace8a91d83713e24d129263936887cef62adc60b62729843e3792978fbdd995803f14b41d58201c7f148123482c73663d8cfe2aa928cdce79093e37e11c62293325e877063b90ce9666e05a2c207b02724f699223aff9a0d84ca46f5d9be92a545b241", 0xd0, 0x8}, {&(0x7f0000000600)="6f409c19f4d53b712da4c8ad9d87aea32b637c15edfb7da33faa2c5807a0c4542f84346beff026f19c9ebb09", 0x2c, 0x100000001}, {&(0x7f0000000640)="806c778689f1bc199c7db8135f445e76821267d2c8ffaa00395335908512e6d9253da61367655a13d0e7b7677e15068ac101a3ac7d32802f0df6b8c5df9a543473bee6e05b6aa2c1d596a5071048e4927e5157390cfeebc33c6451a47e0731a5bd0311877be5d96aef584358efb9a01209b83d09f947c27ea721ab9bd76cb76493a34363a1ae20726e81fb8167a7321471ead20296ad35c9566b2f19766df58bd9778403c9948f5279e99f7e61bcfcb4bff8eae93770e2aaa50be6215a558cc6440ae38a51c850c5c2a342bddf30580f01c516c22ffe3cbe", 0xd8, 0x8}], 0x100004, &(0x7f0000000840)={[{@upgrade}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vhost-net\x00'}}, {@subj_user={'subj_user', 0x3d, 'vxcan0\x00'}}]}) signalfd4(r7, &(0x7f00000008c0)={[0xa0]}, 0x8, 0x80800) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) fstat(r1, &(0x7f00000000c0)) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@can_newroute={0x34, 0x19, 0x200, 0x0, 0xfffffffe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x82, 0x1, 0x0, 0x0, "37fa5245de02f989"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0xf8, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x150}, 0x0) (async) syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x9, &(0x7f0000000740)=[{&(0x7f0000000180)="819df1", 0x3, 0x8}, {&(0x7f00000001c0)="7951b96b88cc8268e81b0726a6d701bcac483f70", 0x14, 0xc51b}, {&(0x7f00000002c0)="e098a62b953ebc155672f1d98715192ee1c25df7ff33085ec0a3588b607f11423c7def0af58c2d6340bb19894152887e1b473fe49c1251bbb0b1e7ea68e7baf4d7b037c2d43f19c9c8ec996bc62ac6483f731e7112e1b3e75016b7b5a09de7e6f25dde9bb49a9d76caad67fada407f9bb14625fc8510cb05c33d25f60825a8546edd35a6c6bab15206173bd3bfe0db1e54d916223d8fd767c24df94ab2ea45d028a2feb361f9d162d9322007de49d94f5e555bbd4b0fbb3861e27fb84db1c3655f676d50b5d212d8c0baf1b8c51ea744", 0xd0, 0x7fff}, {&(0x7f0000000a40)="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", 0x1000, 0x1f}, {&(0x7f0000000200)="eccc7342d9939061bacf6ec9b01bcaca3a7e5ac3623a66128fb47cc0ccd29c", 0x1f, 0x200}, {&(0x7f00000003c0)="adf4eac7fceb26c9913c633162eb4d5f196023b06d760543912a5c1ac6743f0159660c0e633d832d089b750d38aa93bcea8880e82e518425e25656af4e9ff1c4ada7e75cc397d0291835ae32c75604125b394251d937f4e78623810232632cd1b7a388a4a7af5b6512192707841cea4cfb2e9fcb52d959e8e0bb3a923780bd51d1b708e4f026b7af242d9935736786c18b352d4b355ffd0354036be8ed1dd8d659f56f8af8dfb2bbfa8cd2676e7ac1ed8d6bd412b257ab471031821132be5d235905e8c12271c9d3ebdaff43b2f1cd7af6df192e87e018627caa63195b035485af65cdae5d5293fc47", 0xe9, 0x9}, {&(0x7f0000000500)="e6c420c8a1a19db24e0434431285b1a367f53865b449427e1cc7ebaa23964421e6a1660ea929c6be1b65ce6ed7e915933dbfa048593ab03447a74aa307c8da41070627db57f57e195800f794d7d198d83487e790d7ab6a737842d5ee7afefc2c760590476cc8ef0ed5a586db1dace8a91d83713e24d129263936887cef62adc60b62729843e3792978fbdd995803f14b41d58201c7f148123482c73663d8cfe2aa928cdce79093e37e11c62293325e877063b90ce9666e05a2c207b02724f699223aff9a0d84ca46f5d9be92a545b241", 0xd0, 0x8}, {&(0x7f0000000600)="6f409c19f4d53b712da4c8ad9d87aea32b637c15edfb7da33faa2c5807a0c4542f84346beff026f19c9ebb09", 0x2c, 0x100000001}, {&(0x7f0000000640)="806c778689f1bc199c7db8135f445e76821267d2c8ffaa00395335908512e6d9253da61367655a13d0e7b7677e15068ac101a3ac7d32802f0df6b8c5df9a543473bee6e05b6aa2c1d596a5071048e4927e5157390cfeebc33c6451a47e0731a5bd0311877be5d96aef584358efb9a01209b83d09f947c27ea721ab9bd76cb76493a34363a1ae20726e81fb8167a7321471ead20296ad35c9566b2f19766df58bd9778403c9948f5279e99f7e61bcfcb4bff8eae93770e2aaa50be6215a558cc6440ae38a51c850c5c2a342bddf30580f01c516c22ffe3cbe", 0xd8, 0x8}], 0x100004, &(0x7f0000000840)={[{@upgrade}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vhost-net\x00'}}, {@subj_user={'subj_user', 0x3d, 'vxcan0\x00'}}]}) (async) signalfd4(r7, &(0x7f00000008c0)={[0xa0]}, 0x8, 0x80800) (async) 00:19:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010"], 0x70}}, 0x0) 00:19:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/consoles\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 00:19:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2}]}) [ 1221.437367][T24844] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1221.449571][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1221.466460][T24841] loop2: detected capacity change from 0 to 264192 00:19:12 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) 00:19:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff18, 0x6, 0x5}, 0x48) [ 1221.553672][T20518] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:19:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) fstat(r1, &(0x7f00000000c0)) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@can_newroute={0x34, 0x19, 0x200, 0x0, 0xfffffffe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x82, 0x1, 0x0, 0x0, "37fa5245de02f989"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0xf8, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x150}, 0x0) r7 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x9, &(0x7f0000000740)=[{&(0x7f0000000180)="819df1", 0x3, 0x8}, {&(0x7f00000001c0)="7951b96b88cc8268e81b0726a6d701bcac483f70", 0x14, 0xc51b}, {&(0x7f00000002c0)="e098a62b953ebc155672f1d98715192ee1c25df7ff33085ec0a3588b607f11423c7def0af58c2d6340bb19894152887e1b473fe49c1251bbb0b1e7ea68e7baf4d7b037c2d43f19c9c8ec996bc62ac6483f731e7112e1b3e75016b7b5a09de7e6f25dde9bb49a9d76caad67fada407f9bb14625fc8510cb05c33d25f60825a8546edd35a6c6bab15206173bd3bfe0db1e54d916223d8fd767c24df94ab2ea45d028a2feb361f9d162d9322007de49d94f5e555bbd4b0fbb3861e27fb84db1c3655f676d50b5d212d8c0baf1b8c51ea744", 0xd0, 0x7fff}, {&(0x7f0000000a40)="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", 0x1000, 0x1f}, {&(0x7f0000000200)="eccc7342d9939061bacf6ec9b01bcaca3a7e5ac3623a66128fb47cc0ccd29c", 0x1f, 0x200}, {&(0x7f00000003c0)="adf4eac7fceb26c9913c633162eb4d5f196023b06d760543912a5c1ac6743f0159660c0e633d832d089b750d38aa93bcea8880e82e518425e25656af4e9ff1c4ada7e75cc397d0291835ae32c75604125b394251d937f4e78623810232632cd1b7a388a4a7af5b6512192707841cea4cfb2e9fcb52d959e8e0bb3a923780bd51d1b708e4f026b7af242d9935736786c18b352d4b355ffd0354036be8ed1dd8d659f56f8af8dfb2bbfa8cd2676e7ac1ed8d6bd412b257ab471031821132be5d235905e8c12271c9d3ebdaff43b2f1cd7af6df192e87e018627caa63195b035485af65cdae5d5293fc47", 0xe9, 0x9}, {&(0x7f0000000500)="e6c420c8a1a19db24e0434431285b1a367f53865b449427e1cc7ebaa23964421e6a1660ea929c6be1b65ce6ed7e915933dbfa048593ab03447a74aa307c8da41070627db57f57e195800f794d7d198d83487e790d7ab6a737842d5ee7afefc2c760590476cc8ef0ed5a586db1dace8a91d83713e24d129263936887cef62adc60b62729843e3792978fbdd995803f14b41d58201c7f148123482c73663d8cfe2aa928cdce79093e37e11c62293325e877063b90ce9666e05a2c207b02724f699223aff9a0d84ca46f5d9be92a545b241", 0xd0, 0x8}, {&(0x7f0000000600)="6f409c19f4d53b712da4c8ad9d87aea32b637c15edfb7da33faa2c5807a0c4542f84346beff026f19c9ebb09", 0x2c, 0x100000001}, {&(0x7f0000000640)="806c778689f1bc199c7db8135f445e76821267d2c8ffaa00395335908512e6d9253da61367655a13d0e7b7677e15068ac101a3ac7d32802f0df6b8c5df9a543473bee6e05b6aa2c1d596a5071048e4927e5157390cfeebc33c6451a47e0731a5bd0311877be5d96aef584358efb9a01209b83d09f947c27ea721ab9bd76cb76493a34363a1ae20726e81fb8167a7321471ead20296ad35c9566b2f19766df58bd9778403c9948f5279e99f7e61bcfcb4bff8eae93770e2aaa50be6215a558cc6440ae38a51c850c5c2a342bddf30580f01c516c22ffe3cbe", 0xd8, 0x8}], 0x100004, &(0x7f0000000840)={[{@upgrade}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vhost-net\x00'}}, {@subj_user={'subj_user', 0x3d, 'vxcan0\x00'}}]}) signalfd4(r7, &(0x7f00000008c0)={[0xa0]}, 0x8, 0x80800) [ 1221.709834][T24863] loop2: detected capacity change from 0 to 264192 [ 1221.766456][T20518] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1221.776072][T20518] Buffer I/O error on dev loop2, logical block 0, async page read [ 1221.784161][T20518] ldm_validate_partition_table(): Disk read failed. [ 1221.791611][T20518] Dev loop2: unable to read RDB block 0 [ 1221.797372][T20518] loop2: unable to read partition table [ 1221.803085][T20518] loop2: partition table beyond EOD, truncated 00:19:12 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) 00:19:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}, 0x10) 00:19:12 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) lstat(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)) 00:19:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x411}, 0x14}}, 0x0) 00:19:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000155000/0x1000)=nil, 0x1000, 0xd) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000585000/0x3000)=nil) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2, r4}) 00:19:12 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 00:19:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0}}], 0x1, 0x0) 00:19:12 executing program 1: clock_gettime(0x6, &(0x7f00000004c0)) [ 1222.218291][T24873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:12 executing program 0: pselect6(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 00:19:13 executing program 5: clock_gettime(0x1, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) 00:19:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff00, 0x80000006, 0x5}, 0x48) 00:19:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 00:19:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@tz_utc}, {@fat=@allow_utime}, {@fat=@showexec}]}) 00:19:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000155000/0x1000)=nil, 0x1000, 0xd) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (rerun: 32) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async, rerun: 32) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000585000/0x3000)=nil) (async, rerun: 32) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async, rerun: 64) r4 = fcntl$dupfd(r0, 0x0, r1) (rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2, r4}) 00:19:13 executing program 5: clock_gettime(0x0, &(0x7f0000005e40)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1072, 0xffffffffffffffff, 0x10000000) 00:19:13 executing program 1: bpf$BPF_GET_PROG_INFO(0x13, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64}]}, 0x10) 00:19:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000155000/0x1000)=nil, 0x1000, 0xd) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000585000/0x3000)=nil) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2, r4}) 00:19:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 5: umount2(0x0, 0x2879881e4048a824) 00:19:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x89a0, &(0x7f0000004d40)) 00:19:13 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) [ 1222.518806][T24902] FAT-fs (loop4): bogus number of reserved sectors [ 1222.547508][T24902] FAT-fs (loop4): Can't find a valid FAT filesystem 00:19:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0xa}, 0x48) 00:19:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5421, 0x0) 00:19:13 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 0: clock_nanosleep(0xf386cb7ffb1d3ac8, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 00:19:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x2}]}]}}, &(0x7f0000000080)=""/261, 0x2e, 0x105, 0x801}, 0x20) 00:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000713000/0x4000)=nil, 0x4000}}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021c000/0x3000)=nil, 0x3000, &(0x7f0000000040)='ramfs\x00') r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r1, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="24000000aefac7b2bb2125ea000000001d01020008000900", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) 00:19:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {0x227}]}, 0x10) 00:19:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 1: syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x300000) 00:19:13 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x1d, r0, 0x0) 00:19:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) ftruncate(r2, 0x401) 00:19:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000b00)={[{@jqfmt_vfsv1}, {@abort}], [{@appraise}, {@subj_user={'subj_user', 0x3d, 'hash'}}]}) 00:19:13 executing program 0: socket$netlink(0x9, 0x3, 0x0) 00:19:13 executing program 1: socket(0x1e, 0x0, 0xffffffe0) [ 1222.899418][T24939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64174 sclass=netlink_route_socket pid=24939 comm=syz-executor.2 00:19:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={0x0, &(0x7f0000000080)=""/4096, 0x7e, 0x1000, 0x1}, 0x20) 00:19:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x3d}]}) 00:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000713000/0x4000)=nil, 0x4000}}) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021c000/0x3000)=nil, 0x3000, &(0x7f0000000040)='ramfs\x00') (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async) r6 = fcntl$dupfd(r1, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="24000000aefac7b2bb2125ea000000001d01020008000900", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) 00:19:13 executing program 0: socket(0x2d, 0x0, 0x0) 00:19:13 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) clock_getres(0x0, &(0x7f0000000300)) 00:19:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 00:19:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000080)=""/261, 0x2e, 0x105, 0x801}, 0x20) 00:19:13 executing program 5: r0 = socket(0x2, 0x3, 0xc4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x4040001) [ 1223.092294][ T27] audit: type=1400 audit(1660522753.736:882): avc: denied { create } for pid=24963 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 00:19:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000713000/0x4000)=nil, 0x4000}}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000021c000/0x3000)=nil, 0x3000, &(0x7f0000000040)='ramfs\x00') (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup(r4) (async) r6 = fcntl$dupfd(r1, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="24000000aefac7b2bb2125ea000000001d01020008000900", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) 00:19:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)='7', 0x1) 00:19:13 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c}, 0x4c}}, 0x0) 00:19:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{}]}, 0x10) 00:19:13 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x28}]}, 0x10) 00:19:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d}, {}]}) 00:19:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) 00:19:14 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891c, &(0x7f0000000000)={'wg2\x00'}) 00:19:14 executing program 5: futex(&(0x7f0000000000)=0x2, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:14 executing program 1: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000100), 0x1000, 0x400000) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x212002) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@allow_other}, {@default_permissions}], [{@hash}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/loop#\x00'}}]}}) pipe2$watch_queue(0x0, 0x80) setxattr$security_capability(&(0x7f0000000740)='.\x00', 0x0, 0x0, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000880)="bf87a8dd8a03c6ba860a024acb7ce12b6bd043b791b5e3eebab567e2251108b9dee2fe27bc3dc99127c602c9027ac2c9981b72954619138e7a4c723bd5d90c6a3d5521462f58f14a810e3e14cbac10febbcb4651a5b23686d6c767d91617dd95132ac11305785f09af9fea65f60fa8d18d31509cd49032155212320246abade3cca9792bd75600c9574fc30d48811b112e026e265094a2469f6a3e7e495c3fe43353eab4f203fa83fce622ac157e98393d18aa17e09a2d8bdfa1b93925a75166de12af275d", 0xc5, 0xbf}, {&(0x7f0000000980), 0x0, 0x1f}], 0x0, &(0x7f0000000b00)={[{@jqfmt_vfsv1}, {@nolazytime}, {@jqfmt_vfsv0}, {@abort}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'hash'}}]}) 00:19:14 executing program 0: pselect6(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:19:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff00, 0x6, 0x5}, 0x48) 00:19:14 executing program 5: bpf$BPF_GET_PROG_INFO(0x11, 0x0, 0x0) 00:19:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) socket$packet(0x11, 0x3, 0x300) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) (async) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) (async) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 00:19:14 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000000)={'wg2\x00'}) 00:19:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001640)={[{@fat=@nocase}, {@fat=@umask}]}) [ 1223.589925][T25017] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 00:19:14 executing program 1: prctl$PR_GET_IO_FLUSHER(0xf) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 00:19:14 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x18101, 0x0) 00:19:14 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1) 00:19:14 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x1c}, 0x10) 00:19:14 executing program 0: bpf$BPF_GET_PROG_INFO(0x2, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) (async) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x1f, 0x6, @multicast}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x0) 00:19:14 executing program 4: futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x0) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c000100080003"], 0xbc}}, 0x0) 00:19:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x158, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @REJECT={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'vlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 00:19:14 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x10, "eee0ba8f7e05abf68ec73da549c2f3cd"}, 0x19, 0x0) 00:19:14 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 00:19:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200), 0x10) [ 1223.987755][T25058] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1224.026792][T25062] x_tables: duplicate underflow at hook 2 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:14 executing program 1: syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x0) 00:19:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@fat=@uid}]}) 00:19:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001840)={[{@fat=@gid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}]}) [ 1224.146158][T25076] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:14 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000d9b805d3fa79cc4b07beef719c0900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:19:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180006"], &(0x7f0000000080)=""/4096, 0x7e, 0x1000, 0x1}, 0x20) 00:19:14 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x18, "eee0ba8f7e05abf68ec73da549c2f3cde810f68a3b56038b"}, 0x21, 0x0) 00:19:14 executing program 0: mount$fuseblk(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 00:19:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1224.249261][T25082] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 00:19:14 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000004d40)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x5452, &(0x7f0000004d40)) 00:19:15 executing program 1: prctl$PR_GET_IO_FLUSHER(0xd) 00:19:15 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+60000000}) [ 1224.323488][T25090] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:15 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x4020940d, &(0x7f0000004d40)) 00:19:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[], &(0x7f0000000080)=""/4096, 0x7e, 0x1000, 0x1}, 0x20) 00:19:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000010c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x240000c0) 00:19:15 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000d9b805d3fa79cc4b07beef719c0900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000d9b805d3fa79cc4b07beef719c0900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) 00:19:15 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 1224.512276][T25101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:15 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 00:19:15 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x5}, 0x0, 0x0, 0x0, 0x0) 00:19:15 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000050) 00:19:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x94}]}, 0x10) 00:19:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x61}]}, 0x10) 00:19:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000180)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 00:19:15 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000004d40)) 00:19:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:15 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="240000001900010000d9b805d3fa79cc4b07beef719c0900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) [ 1224.748431][T25133] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}, 0x10) 00:19:15 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, 0x0) 00:19:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}, 0x10) [ 1224.953853][T25152] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00 '], 0x30}}, 0x0) 00:19:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000401000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000a95000/0x2000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r3) fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce340000d376780000008000"/24, @ANYRES32, @ANYBLOB="ead44a06e6d0f922c59109e90f53d54f2aa4f738544c5af04f881ebaf5d6c31d877c848c90fc51fcf5151e97552a71199a7f78cec45aabdf7b1ce2d65903f803abd24b2512a41e0c6448e5479f37d1f00f3e2e0658f7f57970ad9e81ca2119e30201acd9", @ANYRES32=r6, @ANYRESHEX=r4], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) 00:19:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 00:19:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xb, 0x300}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) pipe(&(0x7f0000000100)) 00:19:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8940, &(0x7f0000004d40)) [ 1225.537221][T25159] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 4: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000001440)="de", 0x1, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) 00:19:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000100000085200000020000001813"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff002800"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x301280) read$usbmon(r0, 0x0, 0x0) 00:19:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}]}]}, 0x2c}}, 0x0) 00:19:16 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff002800"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1225.768531][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1225.799305][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1225.835870][T20681] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1226.036106][T20681] usb 3-1: device descriptor read/64, error 18 [ 1226.315600][T20681] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1226.505573][T20681] usb 3-1: device descriptor read/64, error 18 [ 1226.626581][T20681] usb usb3-port1: attempt power cycle [ 1227.065564][T20681] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1227.245755][T20681] usb 3-1: device descriptor read/8, error -61 [ 1227.525642][T20681] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1227.706427][T20681] usb 3-1: device descriptor read/8, error -61 [ 1227.825693][T20681] usb usb3-port1: unable to enumerate USB device 00:19:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000401000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000a95000/0x2000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) (async) r4 = socket$netlink(0x10, 0x3, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce340000d376780000008000"/24, @ANYRES32, @ANYBLOB="ead44a06e6d0f922c59109e90f53d54f2aa4f738544c5af04f881ebaf5d6c31d877c848c90fc51fcf5151e97552a71199a7f78cec45aabdf7b1ce2d65903f803abd24b2512a41e0c6448e5479f37d1f00f3e2e0658f7f57970ad9e81ca2119e30201acd9", @ANYRES32=r6, @ANYRESHEX=r4], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) 00:19:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x42c}, 0x48) 00:19:19 executing program 5: bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 00:19:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff002800"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x0, 0x5}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x3}, 0x8) 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 00:19:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)) 00:19:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002440)=[{0x0, 0x0, 0x9238}, {&(0x7f0000000200)="11d640d9a3fa9fa511db80892bc2", 0xe, 0x3}], 0x0, &(0x7f0000002500)={[{@fat=@umask}, {@fat=@nfs_nostale_ro}, {@fat=@check_normal}]}) 00:19:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@fat=@allow_utime}]}) 00:19:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (rerun: 64) mremap(&(0x7f0000401000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000a95000/0x2000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r3) (async, rerun: 64) fcntl$dupfd(r1, 0x0, r2) (rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) (async) r4 = socket$netlink(0x10, 0x3, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce340000d376780000008000"/24, @ANYRES32, @ANYBLOB="ead44a06e6d0f922c59109e90f53d54f2aa4f738544c5af04f881ebaf5d6c31d877c848c90fc51fcf5151e97552a71199a7f78cec45aabdf7b1ce2d65903f803abd24b2512a41e0c6448e5479f37d1f00f3e2e0658f7f57970ad9e81ca2119e30201acd9", @ANYRES32=r6, @ANYRESHEX=r4], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) [ 1228.671393][T25205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:19 executing program 5: syz_mount_image$msdos(0x0, &(0x7f000000cf80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000008000)='./file0\x00', &(0x7f000000c080), 0x0, &(0x7f000000f2c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'ip6_vti0\x00'}}]}}) 00:19:19 executing program 0: pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x6}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 00:19:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000bf000000bf"], &(0x7f00000001c0)=""/152, 0xdb, 0x98, 0x1}, 0x20) 00:19:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1228.745860][T25211] FAT-fs (loop1): bogus number of reserved sectors [ 1228.775633][T25211] FAT-fs (loop1): Can't find a valid FAT filesystem 00:19:19 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xaaaaaaaaaaaabbc, &(0x7f00000003c0)=[{&(0x7f00000005c0)="912f4687fbd47df68a5e4388c5a42a11d5a0f2f316f8317a1a52148d28f7820700000000000000c7e71366a10e23113900fa6375f3df6789f43d84a2e5", 0x3d}], 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="696e69745f697461626c65376e6f6175746f5f64615f616c6c6f631a6a71666d743d7666736f6c642c6175746f5f64615f616c6c6f633d3078303030303030303030303030303030372c757365725f78617474722c7379737667726f7570732c71756f74612c736d61636b6673666c6f6f723d747275737465642e6f7665726c61792e6f726967696e002c7569643d", @ANYRESDEC, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 00:19:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:19:19 executing program 4: socketpair(0x10, 0x0, 0x7, &(0x7f0000000040)) 00:19:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}}, 0x0) [ 1228.846986][T25224] 9pnet_fd: Insufficient options for proto=fd 00:19:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:19 executing program 5: r0 = socket(0xa, 0x3, 0x9) getsockopt$inet_mreqn(r0, 0x3a, 0x0, 0x0, 0x0) 00:19:19 executing program 4: socketpair(0x10, 0x0, 0x7, &(0x7f0000000500)) 00:19:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) [ 1229.006763][T25237] __nla_validate_parse: 1 callbacks suppressed [ 1229.006780][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:19 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) (async) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}}, 0x0) 00:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c00010008"], 0xbc}}, 0x0) 00:19:19 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 00:19:19 executing program 4: bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x1}, 0x10) [ 1229.158653][T25254] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. 00:19:20 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0) 00:19:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000001000000852000000200000018"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001007665"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x0, 0x6, 0x5}, 0x48) 00:19:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf) 00:19:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}}, 0x0) 00:19:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0xc8, 0x160, 0xc8, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x20, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffc00}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x5, 0x4]}}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0x5, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 00:19:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002c5000/0x1000)=nil) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) [ 1229.793497][T25265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34}]}, 0x10) 00:19:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8941, &(0x7f0000004d40)) [ 1229.911816][T25279] x_tables: duplicate underflow at hook 2 00:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fmask=']) 00:19:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001007665"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x42c, 0xffffffffffffffff, 0x800}, 0x48) 00:19:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f000061c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002c5000/0x1000)=nil) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x90}]}, 0x10) 00:19:20 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}}) 00:19:20 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c58c0, 0x0) [ 1230.061127][T25290] FAT-fs (loop4): Unrecognized mount option "fmask=" or missing value [ 1230.082062][T25293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:20 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000700)) 00:19:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000700)={0x28000000}) 00:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x9, 0x1, @private}, {0x8, 0x2, @private}}}]}]}, 0x2c}}, 0x0) 00:19:20 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 00:19:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002c5000/0x1000)=nil) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f000061c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00002c5000/0x1000)=nil) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) (async) 00:19:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001007665"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {}]}) 00:19:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3500}]}, 0x10) [ 1230.299403][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1230.336719][T25318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x5, 0xff12, 0x6}, 0x48) 00:19:21 executing program 5: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 00:19:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x10162, 0x0, 0x0) [ 1230.346497][T25312] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1230.360423][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:19:21 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000440)=@name, 0x10) 00:19:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240004001908000900000000000000000000000000000000674604f96395bfa73c15bdcfd088ee835ec8d4d2b4dba9b3b632d1cc527b8a5600"/69, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 00:19:21 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x5}, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 00:19:21 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @common=@SET}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x1}, @REJECT={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'vcan0\x00', 'pimreg0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffca) 00:19:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c000100766574"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:21 executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaae1a, &(0x7f0000000500)=[{&(0x7f0000000240)="44d3d329cd4adfbec15ac8c2802538e72ea8b25491d8cf60e97b81d326b19e98eb47be8305503552e66535532764eb49a3202c53a021306b4a3d3223e332611d0c9aadb9d967e8b1e6b929c88c809a43ca4a94062de68b8d3f6d31c8cfae59fd46a6508e63038794bba1e3da4ec1d0", 0x0, 0x9}, {&(0x7f00000001c0)="ca6f465159156685fff6b0561e755b5028999f8a2c2f0e153a9b23b16eb73062157c9e9c4d5a77ce", 0x28, 0xb}, {&(0x7f0000000240)}], 0x800400, &(0x7f0000000200)=ANY=[@ANYRES8]) [ 1230.490334][T25341] tipc: Can't bind to reserved service type 0 [ 1230.490345][ T27] audit: type=1400 audit(1660522761.163:883): avc: denied { bind } for pid=25338 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 00:19:21 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, 0x0) 00:19:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240004001908000900000000000000000000000000000000674604f96395bfa73c15bdcfd088ee835ec8d4d2b4dba9b3b632d1cc527b8a5600"/69, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r2) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240004001908000900000000000000000000000000000000674604f96395bfa73c15bdcfd088ee835ec8d4d2b4dba9b3b632d1cc527b8a5600"/69, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) (async) 00:19:21 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, 0x0) 00:19:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 00:19:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x80) [ 1230.647953][T25349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:21 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fsuuid={'fsuuid', 0x3d, {[0x63]}}}]}}) 00:19:21 executing program 5: getrandom(&(0x7f0000001200)=""/208, 0xd0, 0x0) 00:19:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c000100766574"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1230.865875][T25378] fuse: Bad value for 'fd' 00:19:21 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) 00:19:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async, rerun: 32) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (rerun: 32) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async, rerun: 32) r4 = fcntl$dupfd(r0, 0x0, r1) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240004001908000900000000000000000000000000000000674604f96395bfa73c15bdcfd088ee835ec8d4d2b4dba9b3b632d1cc527b8a5600"/69, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) [ 1230.962885][T25383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1231.015690][T25388] tmpfs: Bad value for 'uid' 00:19:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile, @struct={0x10}]}}, &(0x7f0000000180)=""/252, 0x32, 0xfc, 0x1}, 0x20) 00:19:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 00:19:22 executing program 5: bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0) 00:19:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000038a000/0x2000)=nil, 0x2000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c000100766574"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:22 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x9800000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:22 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xaaaaaaaaaaaabbc, &(0x7f00000003c0)=[{&(0x7f00000005c0)="912f4687fbd47df68a5e4388c5a42a11d5a0f2f316f8317a1a52148d28f7820700000000000000c7e71366a10e23113900fa6375f3df6789f43d84a2e5", 0x3d}], 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="696e69745f697461626c65376e6f6175746f5f64615f616c6c6f631a6a71666d743d7666736f6c642c6175746f5f64615f616c6c6f633d3078303030303030303030303030303030372c757365725f78617474722c7379737667726f7570732c71756f74612c736d61636b6673666c6f6f723d747275737465642e6f7665726c61792e6f726967696e002c7569643d", @ANYRESDEC, @ANYBLOB=',\x00']) [ 1231.511942][T25397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000038a000/0x2000)=nil, 0x2000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:22 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x14, "eee0ba8f7e05abf68ec73da549c2f3cde810f68a"}, 0x1d, 0x0) 00:19:22 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x5}, &(0x7f0000000040)={0x2}, 0x0, 0x0, 0x0) 00:19:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 00:19:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x200020, &(0x7f0000000540)) 00:19:22 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "18aad40662feb377a906df298ab9e8d0602f37fcc05cd41bd124371fd3debcec9c87eaf4e3912a876db1d33ebf2753c88fd95d629146d649d4d59842bbb26f918882467ae471e66845f396b2", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a4) 00:19:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f000038a000/0x2000)=nil, 0x2000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) (async) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:19:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c00010008000300010000007000010010001a0009000100676163740000000010001c000b0001006d6972726564e5ff0f000b000b000100736b626d6f64000010000000090001006373756d0000000010001d000b0001006d6972726564000010000f000b000100706f6c69636500000c"], 0xbc}}, 0x0) 00:19:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x4d}]}) 00:19:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x0) 00:19:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000880)={[{@fat=@time_offset}, {@fat=@nfs}]}) 00:19:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x1d}]}, 0x10) 00:19:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x8, 0x80000000, 0x62, 0xfffff800], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:19:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@local}, {@multicast1}, {@remote}, {@private}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{}, {@dev}, {@loopback}, {@private}]}, @timestamp_addr={0x44, 0x54, 0x0, 0x1, 0x0, [{@remote}, {}, {}, {}, {@private}, {@empty}, {@empty}, {@empty}, {@remote}, {@multicast2}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) 00:19:23 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x1d, r0, 0x0) 00:19:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0xc8, 0x160, 0xc8, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) [ 1232.532479][T25451] FAT-fs (loop4): bogus number of reserved sectors 00:19:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) [ 1232.573500][T25451] FAT-fs (loop4): Can't find a valid FAT filesystem 00:19:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x8, 0x80000000, 0x62, 0xfffff800], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:19:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x35}]}, 0x10) 00:19:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d}]}, 0x10) 00:19:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x90}]}, 0x10) 00:19:23 executing program 0: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000001440)="de", 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 00:19:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x10000000) 00:19:23 executing program 5: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0xc2, {{0x2, 0x4e20, @local}}}, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x212002) dup(r0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@allow_other}, {@default_permissions}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, '/dev/loop#\x00'}}]}}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000680)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4004) splice(0xffffffffffffffff, &(0x7f00000006c0)=0x9, 0xffffffffffffffff, &(0x7f0000000700)=0xffffffffffffffff, 0x7ff, 0x5) setxattr$security_capability(&(0x7f0000000740)='.\x00', &(0x7f0000000780), 0x0, 0x0, 0x3) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x1, &(0x7f0000000a00)=[{0x0, 0x0, 0x1f}], 0x1000488, &(0x7f0000000b00)={[{@nolazytime}], [{@uid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'hash'}}]}) 00:19:23 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x0) 00:19:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 32) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x8, 0x80000000, 0x62, 0xfffff800], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async, rerun: 64) r7 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:19:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 00:19:23 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f00000015c0)) syz_open_procfs(0x0, &(0x7f0000001800)='fd/4\x00') [ 1232.863920][T25483] fuse: Bad value for 'fd' [ 1232.880719][ T27] audit: type=1400 audit(1660522763.553:884): avc: denied { execute } for pid=25481 comm="syz-executor.4" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1232.887590][T25483] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 00:19:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f000000cf80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000008000)='./file0\x00', &(0x7f000000c080), 0x0, &(0x7f000000f2c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, '+,'}}]}}) 00:19:23 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0xc, &(0x7f00000006c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a}]}}) 00:19:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r0, &(0x7f0000000040), 0x0, 0x7, 0x1) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xcdbdf000) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:19:23 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1b4}}, 0x0) 00:19:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:23 executing program 5: keyctl$unlink(0x5, 0x0, 0xfffffffffffffffc) [ 1233.022245][T25501] 9pnet_fd: Insufficient options for proto=fd 00:19:23 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r0, &(0x7f0000000040), 0x0, 0x7, 0x1) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xcdbdf000) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) preadv(r0, &(0x7f0000000040), 0x0, 0x7, 0x1) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xcdbdf000) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) (async) 00:19:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 00:19:23 executing program 1: add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 00:19:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004380)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000500)=""/221, 0xffffffffffffff89}], 0x4, &(0x7f000000c340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000000002000000500"/20, @ANYRES8, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)}, {&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x7, &(0x7f0000002a80)}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002a80)=""/127, 0x7f}, {&(0x7f0000002c00)=""/130, 0x82}, {&(0x7f0000002cc0)=""/225, 0xe1}], 0x3, &(0x7f0000002e00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000002f80), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/165, 0xa5}, {&(0x7f00000040c0)=""/100, 0x64}, {&(0x7f0000004140)=""/131, 0x83}, {&(0x7f0000004200)=""/242, 0xf2}], 0x5}}], 0x4, 0x20, 0x0) 00:19:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:23 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x6000) [ 1233.255590][T15295] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1233.505559][T15295] usb 5-1: Using ep0 maxpacket: 8 [ 1233.705648][T15295] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1233.895831][T15295] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1233.904941][T15295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.913355][T15295] usb 5-1: Product: syz [ 1233.917829][T15295] usb 5-1: Manufacturer: syz [ 1233.922475][T15295] usb 5-1: SerialNumber: syz [ 1234.180036][T20681] usb 5-1: USB disconnect, device number 17 00:19:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'macvlan1\x00'}) 00:19:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd}, {}]}]}}, &(0x7f0000000080)=""/261, 0x36, 0x105, 0x801}, 0x20) 00:19:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r0, &(0x7f0000000040), 0x0, 0x7, 0x1) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xcdbdf000) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) preadv(r0, &(0x7f0000000040), 0x0, 0x7, 0x1) (async) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) (async) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) dup(r3) (async) fcntl$dupfd(r1, 0x0, r2) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xcdbdf000) (async) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) (async) 00:19:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/252, 0x0, 0xfc, 0x1}, 0x20) 00:19:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25}]}, 0x10) 00:19:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x1) 00:19:25 executing program 5: r0 = socket(0xa, 0x3, 0x9) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0, 0xfc}}, 0x0) 00:19:25 executing program 1: bpf$BPF_GET_PROG_INFO(0xd, 0x0, 0x0) 00:19:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:25 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaaaaaaaaaae1a, &(0x7f0000000500)=[{&(0x7f0000000240)="44d3d329cd4adfbec15ac8c2802538e72ea8b25491d8cf60e97b81d326b19e98eb47be8305503552e66535532764eb49a3202c53a021306b4a3d3223e332611d0c9aadb9d967e8b1e6b929c88c809a43ca4a94062de68b8d3f6d31c8cfae59fd46a6508e63038794bba1e3da4ec1d0", 0x0, 0x9}, {&(0x7f00000001c0)="ca6f465159156685fff6b0561e755b5028999f8a2c2f0e153a9b23b16eb73062157c9e9c4d5a77ce", 0x28, 0xb}, {&(0x7f0000000240)}], 0x800400, &(0x7f0000000200)=ANY=[@ANYRES8]) 00:19:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0}], 0x9003, &(0x7f0000000140)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/)('}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash}]}) 00:19:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000009100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) 00:19:25 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2e28c3, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000480)='ro\x00', 0x0, 0x0) 00:19:25 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000000)={'wg1\x00'}) 00:19:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x90}]}, 0x10) 00:19:25 executing program 0: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1072, 0xffffffffffffffff, 0x10000000) 00:19:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={0x0, 0x0, 0x7e, 0x0, 0x1}, 0x20) 00:19:25 executing program 5: futex(&(0x7f0000000080)=0x1, 0x18b, 0x1, &(0x7f0000000100), 0x0, 0x0) 00:19:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:19:25 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2a171, 0xffffffffffffffff, 0x8000000) 00:19:26 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f00000018c0)="655055aaac6758098c14500e3a5b403b8ffc0af7542f58852432483de4b4dddeef3a0cdbdd2d5a75e870a438317f3e240006e1e4cc1718df8e4f9561ffe6448a20ba752db901c689c3b14588a441eb6211416b94c80129bc637c47bbbfd758f4a337707130c6835acb02547421f34ebcbeb4622a44af467d163caac366884a02e1821d4728ae262cf5063e6b7c9694a7759ac0ddf38ef12368d9d1e2ab2256158d76ed151351cacb6c4c1c2cf7fa031dae97efde3811c85619b04607620ac91f8295bdad57cb4ede393c629f2ee6052d20f8aaf349e745f309edc964fdbabfa030c5aeae5781dd6130bf30f5f63342316c03b8a35c8688f114d79f5bcbd39be75bd81e4513b2cc603a8c53df09bbdf2501bb1afe6f4b3af2178ac67d030ae294e933ef52c9aba7551af696c0a72a9d77d24075283b97381a5361e5377a0ff627f862a33b625d913bc00dde9010aea97420c50549ca995b77fc9cda721b5a2eccce93568b7ef97170d546f01108c90145bc761f5bc3378d3551a8cf9546a66e5f9b5ec4be68617d4d33ecb5b384964964dd1c2ab466dc3eb7bea80daa3cf5d8bd086a84008b042190bd11a5962c689421cba846dc2d143a2998fbd6370974ff7716493cbe2ad0dbc55be279cf606a016b15cd1760874529b3c116ed5c46cb5d81469aabcf5ab563beb8453e414d29c767f1d30f0a20f79ef0142f155b203c5c6021df8a12d1103f827a4ae5e30fe727c87cbf1cff96ceb137ec1e2f56d0698ea775a2bdd4ccb39a5327bfcc40a0f1647c0b93ea78e368038c8002af6a91c972d8f94024982c082ec33b28352e8d8c8dadeff614de65ee7f4dba2ffb594a633d0fc5766fb1b123a2e88c4dab15cd5c95bec9d98baabbd67e96a21e83d5c5e5a7f180c852fc891dad76a5f5e1001585cb6e667c4390d680400b9cc94eb49ac821691f534ae3b52d6501690330b2eb2758eaff74fe4d01b5c0840d04cc656d845d37583c1976a2b16e062ced70f72a5831bd2b7974816e704ef20205a5df58ab6de3ed3215400eae711fb9ff826af2db73d21c06779e5d4bd9cc988927ea63a43e55dedee8225cebc30a3c315b0d55235a0bf711bec32399665933c15147eed907aa5e3a6c74cbe5aceb734fbe5e3cd697aea0209507bb11a6a440f024cafb5f919441ba4242fac0ca344bb1f7a69dd3fadedcb2e3811fb4fa429ada8301022873e9850e3c2790314eb9da0d0f04142a883ecbdf75defdec15ba7252caae1fb0f17ff1b82b5456622b988d38df2b00625d7931f6f08d94c13701d78a2c5b100bacc4d009b8a5ed68bc01197b595e63433d422f249d147d10a5629e43754c0c1af4267e55ff7d46732596cbfd16d42e6fca1aad7897dcae2fe6bfaffc83b69d98b8cc1cef38dce2ebbe81dfb7b92a76a10f4bff17e67b1c4c6530c7c7aabf5fcb997b3da00702a27fdc96de3d205453f7c50afd24ba163797155b0613686581549b715534cfe894ff5ec23cac90b2b2f0451d77759af4baf4986d0261ab042a9957de484befefbc1fcf5ee97e3172f3c2c6836850c5633998b0df63610c17e2fa331cbe66c4b4915f36758d7fbe93e92af1f0a8a20ed2f542693ad80a64e06ea2d2fee188b44191983f3c7a3e936ba0842cfd13db310fbd5aefac9b3ca271f4723a57b9568e1c96c28573290cb9bae79eb99cbae5e81d946cb5763115d4a4c2a15303b89ed64e3720f831af495843a9a2d8bd000900bb53c509c7b54fd3dbbad6604be2ff7421fa5ca68cb590fd983b69071e49607f0e5d23f75b4b2d6b53f2970b2e9e49fb9ba9824ecf34f87996e6b7b698f03bee08b86304e99baaa38dd9b02f1e47179b5dc7a69e4248760a93bdb312c6eac9b53e59e2f260c8e18ce85d1fd3324f8db6a8a22c13526d84cb9ee09d6c73e5bfe94d3b95ec68e8116895163218a4625173214efca3ed10bf6f613b3c052b2d7c2ae84df8b86936dfc6ad6cf0d4502a1517d9b8a22edd8a9669a1b60650721e768f7052383c7f2d9e088eca32196db7551d2bd0878e3b5d92e24044ef5117099cd8add190051f4ead0ebce35a873eaaf70d794fe22690844019e8ce4adf1ee22e7cd33a4dda6a847af878f39a21ca752b5e561d7f5e9700947ad33e174f9241d38d09e2315d7d17e2ec0ea4e82dd72701066d771a2510d6a48ccf9730d93a533c5e79ac4ee5ec13aa4586b0dbde34edf0b8357bddf9cfe7b27fd2fca3cadc96def4498dae664d3ecc2da82c757f2fb622a698291764d118810b028a6d6bd24a3609d2f5085cdb1917432b6a7919a914ecc28ccc182ccaa50865bb8ddc3d15c91d67aab86458a9007824f0b6d6ae5b60fd65bee7acbaf516c791799db10e4cc6c509d1cd510f313e369b933a0de498bd0d664c90229726fd5f10fc5191b582bd7cb857c48166f19d6aaac53a780b0f7dcd51690c0705929e0c40f7e6d54a2fe1b9c903bbb81cfe9ae820888ba148c0a6966f0e6b798a54a917e598fd1f9734a5a63b1bb10d2bf9d3a3066e46796f09e8d0f024cc67a5868ad19dd3ac5d84e8bd101f9ad92d915625ab484e70ea3392d8298b9699a47f94356bedee288998de3eedab0cfa85a5af1fba8e3aa85defaddc0bffeea6333a1bde3b6469113394c98f363104bb2072afff84d4fe99959b0a1c46d2b25544d790d393ad2ae2201109e502f47aefd101c87549963e6cbdfb842d647a2f5056a6a1200b0ce2a4c89d9824163bbea0da0d82d6a2b0ef9970e45dd97c6dacfde1a37cb60ad47b30a781ca58a75aa2e27c8a7f3766f5272f6a3618d3319e0754676e76b00ccce60240a4398ca8b59f62c5713c7165b9ade7ba257544f89281a5ea96a7950389d68edb1366373607c247a8f8b7f3b2a6b0ca178c4f8ac3d20ba33f48898cb6e34a5d979078a6c07ec1b5d187f333988d802e349c2fdfca896e7c00bd16963f941798500816c055fcc5e4730f040f2de4e08949530e0a9d44c88b591ca644998ecc52f8ef31816a15e22003b052fdca4909523e0abbca95a3a81ee03149538b536b2f73d0ee467bbf7e013a30ea3a18195e05c155fff99e377058e9a1e97af51b92e23799926321ae07ddb7a4e46d4eb3385723f853bbcbae64d504ac2604e2a43a5c04432e94e24e63b55abcbd94fa353ff54a5096b61a3427ba0e4630889d2182036c80ff353adb566bad116fefd5fd82bcb09b0436f1669d4c1dba870303df575ef607eb3a4eca60d3b41cd4dd3097c4e47374d1749e8397e5decff61603aef84180994acc431b978c0a31e5f3377c1ec369a70e46f82a8bc9ba642600748f735579647de9a8cd452799fe57feb6c81fb8e111afad3064683f6ec8b81bf5c6e200217ef9b545b9f5d5b653f0494a08d446c102d802728fe24ac58a3b239a9ef667d626c7cce9307dd5b03757f49cd9c4566205a818d112582380cf6656280742e89ea094eca4aa32f5fe99c0a4082fc3efd2e4769d620f543b17d28220d2b8c56bebec878aeccf6a8547b3abaad9e13ed0f80e5f756695a4a78cea90514224176006533699ab9524f8bcd7bc7a1edc8e40fef0ad64b0692cad124f327afbb7a14b5948c01b71af07785aa0912ab3f278c74353e067a8fac7427631d2deb2acc86c663dcc79cf4065136f5e065c0b2bde6278996d7c6a4a70fefb80e2f1c01d7e5f67a233b6fb978d513bf6d58cb921772e7beea8767b2a7230bd40945b888d57facc4748e6b4f2ab113825bb6ac2a591fa8d7008bd88515c351e40e0a72d94666cd63aa899803444b3d2b9bed4b01bcd2a030606925557ac7d92c6cd9788b371155f78c5fe1497f6cc3284df943b08908b3cadaa31316d358c12a4dd5932d581bcdf0366e1b3453058ec6ad04d6adb0a0476a7b71d2e95ee4bb7900736fe4510b1a0e754db34e496ded87725a86ba12ad9b6054dd4d11bee0e99a551b195b1bfc5da9054ce13b847e351f6bc812d340fc543ad048bc9d6850b2480a474ceed4e7c0a72e7c3b60caf21fe34c6cc13f1a112bcfcf4e7adf6fb735aa0e6a47e8e2e4ae377cea857c1b61d106a70b8ee42d92efb6cd8251d99e4ab0bc2fad86b11806d356729f740dcfe274c921ec4f24d72cb6f9dbce6694bd789e02f3cbf19bae71294d83c4bd81fde6667033417234c58cf13e580a0c40cfeff18f8b932642471468f81efaf5f9a7f467ceac5845fa76c53260f25f5627dd76494eba0d45b1e09b1093563f0eb2643ece002ee2762061b43beb705d9709590f5e3278d6bec6142e12b3e74a04dac6a9e820f85a30fc29b73b649ff26ed8d0816ae3fce4db0ad89c9794af2f27e0311eda75a495ae059a191aa502eb6de68f35fb6d4178f39f3a0fbb1cb38f05b345ccdbfcf2a7e560dbd478b6ae74e585ab43c0c8f8508f12b52a865f3969f7dd1efb74b161a05800dce2d3b90dc7e11846fc86c43e46c6f8f8e3377bc874ad524113e4b9decadcae4d8c3c116ced1f2071e75581e70d071bbb9d8083b168b27cf5f47e7e78c47eaf81d5fab0154a796481ed9e749f5f434a1abbf72479b7b38515d39f6ed847353db52ec3537f76bdad1ca3c8611464d11b7a2399b6ef5dae80d8e108a4f566379ec18962212f3eb42485c612cc0a91bbcc873f27d6750860db44962aea1fc3d86b98b46e831d0c9f8fa29fd644fa60d5781d7faeb7c4714bee3593a9b8dd309564138c577247c235fb490239284b47c2f621580951032e1fc0ec0dfc98621816b43f716a369e966864980145ec60628c367be5e2edf461b33ee398cb43238f0aa1c0508aeb3c767bb6cdf895d9cc8b0b740d2a8be8f5ff0365868c0bf29c412a17f55d2e17b4851215a2f35bef012bb9a1960e335a9da85dea1291da91fea84c213cd76d5fd22c4812343b9e7ce8b0bd6194200d77aa9ab694d662f435801e4370ecfa72c4b6db8151cfc69fcf0c6f084d34988535f2f3848d8f816cea5d5399b848211d757555f25bf976f3fc60f6f1d61ffac6e5f5ecb0a20afc36561d7cc68149887d7fd0714920bb3615a67d46061f8001bc8d7e02f647740a6e829d406b5c4d4fd0a1171aa919547ee253c612e2860f342fbda14684aa3a1702680ac16834ba5d4389beaa2778c04a40756f20de2ae24225517093712f1e80223e36a15eb5eda75a72d0633a93b05e7cb8280e89e33e57e53a0a5466bcc5986e3a7f7a80958d17cf9ec463e582ab71e94d6b8fe05417a079d1a6ca3857d27ef05e86e68c85860eb4e1cf733df92de36ac2f28dbb014bb33696b9ca09571db8ed002d30c18a4467e91b3f9bb30d815d27228c57173c5424763b49542dc265a4807e99d91d45c970a9f2231213f664d51353f7547f4545c8b4dede27d2e85067e56cb0df9683bc0aaaec207f41429f9960d5a550c6d13d30ace73794066ef44a94fdfda283bb4e53552bf43ba012fb4c7b82f77e6bd58fd6f6c00eb59b820a5d13e7b9fdb1b40f61555eec556b0a604ce31cf9c68def63d223b8821f757c0eeb345039479c76ef40d5325e002313cee4c52caf1c197c359c6f1ef41c4160375a1759f8cd729d6f95ca3d0c404fafbf0eb0b9723260b1fd9678d2bce434c190981a5b6582342fc571d708780f2ed059185b50b1031d087b68ecb94382a22191e9268e420d2f7b51c6ae630d2570c75fa382a99b28a4cea4d040df0a32f149899d5fc373a66f0c99824c3ab05b79c0c5b183919a437ab3540ccb47aa70fc26984f6701fc3375ac1ca318870b264a0713fee4ce2d7e412aa3c9724576e70427a583def0f3e8c1b3dbb00553c2ba283e3c87c013bf005", 0x1009}], 0x0, 0x0) 00:19:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x3d}]}, 0x10) 00:19:26 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 00:19:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:26 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file1\x00') 00:19:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x5450, 0x0) 00:19:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000001500)=[{0x0}], 0x0, &(0x7f00000015c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) syz_open_procfs(0x0, &(0x7f0000001800)='fd/4\x00') 00:19:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)='l', 0x1}], 0x1}}], 0x1, 0x0) 00:19:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x5, 0xff12, 0x200006, 0x5}, 0x48) 00:19:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1235.841138][T25599] loop4: detected capacity change from 0 to 8 00:19:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x5, 0xff12, 0x6, 0x5}, 0x48) 00:19:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) 00:19:26 executing program 1: r0 = socket(0xa, 0x3, 0x9) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 00:19:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:26 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x90}]}, 0x10) [ 1235.926865][ T3653] Dev loop4: unable to read RDB block 8 [ 1235.965114][ T3653] loop4: unable to read partition table 00:19:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000004d40)) [ 1235.993001][ T3653] loop4: partition table beyond EOD, truncated 00:19:26 executing program 1: prctl$PR_GET_IO_FLUSHER(0x3a) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xaaaaaaaaaaaabbc, &(0x7f00000003c0)=[{&(0x7f00000005c0)="912f4687fbd47df68a5e4388c5a42a11d5a0f2f316f8317a1a52148d28f7820700000000000000c7e71366a10e23113900fa6375f3df6789f43d84a2e5", 0x3d}], 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="696e69745f697461626c65376e6f6175746f5f64615f616c6c6f631a6a71666d743d7666736f6c642c6175746f5f64615f616c6c6f633d3078303030303030303030303030303030372c757365725f78617474722c7379737667726f7570732c71756f74612c736d61636b6673666c6f6f723d747275737465642e6f7665726c61792e6f726967696e002c7569643d", @ANYRESDEC, @ANYBLOB=',\x00']) pipe(&(0x7f0000000100)) 00:19:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) writev(r0, 0x0, 0x0) 00:19:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000a40)=""/4096, 0x28, 0x1000, 0x1}, 0x20) 00:19:27 executing program 4: socket$netlink(0x5, 0x3, 0x0) 00:19:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000007900)={0x0, 0x0, 0x0}, 0x60) 00:19:27 executing program 2: socketpair$unix(0x11, 0x2, 0x0, &(0x7f0000000140)) 00:19:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='auxv\x00') 00:19:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:27 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) 00:19:27 executing program 5: setxattr$security_capability(&(0x7f0000000740)='.\x00', &(0x7f0000000780), &(0x7f00000007c0)=@v2, 0x14, 0x3) 00:19:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x30}]}, 0x10) 00:19:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='2', 0x1, r0) keyctl$link(0x3, r1, 0x0) 00:19:27 executing program 4: setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 00:19:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @broadcast}}) 00:19:28 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x3, r0, 0x0) 00:19:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000001000000852000000200000018130000", @ANYBLOB="8d"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000002440)=[{0x0, 0x0, 0x9238}, {&(0x7f0000000200)="11d640d9a3fa9fa511db80892bc2c23c3994a0", 0x13, 0x3}, {0x0}], 0x0, &(0x7f0000002500)={[{@fat=@umask}, {@fat=@nfs_nostale_ro}, {@fat=@check_normal}]}) 00:19:28 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:19:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x26) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) 00:19:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_addrs=@xdp}) 00:19:28 executing program 5: r0 = socket$netlink(0x2, 0x3, 0xe) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 0: r0 = socket(0xa, 0x3, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 00:19:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@local}, {@multicast1}, {@remote}, {@private}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{}, {@dev}, {@loopback}, {@private}]}, @timestamp_addr={0x44, 0x54, 0x0, 0x1, 0x0, [{@remote}, {}, {}, {}, {@private}, {@empty}, {@empty}, {@empty}, {@remote}, {@multicast2}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @rr={0x7, 0x13, 0x0, [@remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) [ 1237.481094][T25665] loop4: detected capacity change from 0 to 146 [ 1237.511094][T25665] FAT-fs (loop4): invalid media value (0xa0) 00:19:28 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000640)={0x18, 0x2, {0x0, @empty}}, 0x1e) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x12, 0x9, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1237.578905][T25665] FAT-fs (loop4): Can't find a valid FAT filesystem 00:19:28 executing program 0: clock_nanosleep(0xf386cb7ffb1d3ac8, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) futex(&(0x7f00000000c0), 0x8, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='compact_retry\x00'}, 0x10) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) 00:19:28 executing program 4: socketpair$unix(0x10, 0x0, 0xe, &(0x7f0000000140)) 00:19:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xe, 0x2, [@volatile]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x74}]}, 0x10) 00:19:28 executing program 1: bpf$BPF_GET_PROG_INFO(0xb, 0x0, 0x0) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB=',rootcontext=s']) 00:19:28 executing program 5: socket$netlink(0x2, 0x3, 0x8) 00:19:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000003ac0)='net/llc/socket\x00') 00:19:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:28 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {}]}) [ 1237.798640][ T27] audit: type=1400 audit(1660522768.473:885): avc: denied { create } for pid=25694 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x0) 00:19:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x400c0) 00:19:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x5}]}, 0x10) 00:19:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000040)=@ax25={{0x3, @default}, [@default, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}, 0x0) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 5: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)) 00:19:28 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/mnt\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 00:19:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000010201f0ffffff00000000000a0000015c000180060003400001000006000340000100002c000180140003000063ff000000000000000000000000011400040000000000000000000040ffffe00000010600034000000000140001"], 0x70}}, 0x0) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 4: syz_mount_image$msdos(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x0, 0x0, &(0x7f0000003e80), 0x0, &(0x7f0000002c80)={[{@fat=@errors_remount}]}) 00:19:28 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x40305828, &(0x7f0000004d40)) 00:19:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x2d}]}, 0x10) [ 1238.131783][T25731] __nla_validate_parse: 7 callbacks suppressed [ 1238.131801][T25731] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1238.159262][T25730] FAT-fs (loop4): bogus number of reserved sectors 00:19:28 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b0001"], 0x0) 00:19:28 executing program 0: prctl$PR_GET_IO_FLUSHER(0x25) 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)) [ 1238.177226][T25730] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1238.191066][T25731] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:19:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x1}, 0x48) 00:19:28 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xfdc6) 00:19:28 executing program 0: socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000140)) 00:19:29 executing program 1: mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x1) 00:19:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_names='erspan0\x00'}) 00:19:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}, 0x10) 00:19:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1238.527219][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.533588][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.545641][T20681] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1238.785608][T20681] usb 3-1: Using ep0 maxpacket: 8 [ 1238.905752][T20681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.916071][T20681] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1239.085748][T20681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1239.094854][T20681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.106551][T20681] usb 3-1: Product: syz [ 1239.110717][T20681] usb 3-1: Manufacturer: syz [ 1239.115297][T20681] usb 3-1: SerialNumber: syz [ 1239.129969][T20681] usb 3-1: config 0 descriptor?? [ 1239.382597][T15295] usb 3-1: USB disconnect, device number 58 00:19:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:30 executing program 0: prctl$PR_GET_IO_FLUSHER(0x2) 00:19:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 00:19:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x81, 0x0, 0x0) 00:19:30 executing program 2: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {}, {@allow_other}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}]}}) pipe2$watch_queue(0x0, 0x80) 00:19:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:30 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10) 00:19:30 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x180000) 00:19:30 executing program 1: clock_gettime(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1072, 0xffffffffffffffff, 0x10000000) 00:19:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@empty, @remote, [], [], 'veth0_to_team\x00', 'pimreg\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 00:19:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x45}]}, 0x10) 00:19:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/252, 0x1a, 0xfc, 0x1}, 0x20) 00:19:30 executing program 0: get_robust_list(0x0, 0x0, &(0x7f0000000280)) [ 1240.028011][T25776] fuse: Bad value for 'fd' [ 1240.041479][T25777] x_tables: duplicate underflow at hook 2 00:19:30 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x402400, 0x0) 00:19:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:30 executing program 4: recvmsg(0xffffffffffffffff, 0x0, 0xc0000022) 00:19:30 executing program 5: timer_create(0x2, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000100)) 00:19:30 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x10, &(0x7f0000000000)=[{}, {}]}) 00:19:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35}]}, 0x10) 00:19:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) 00:19:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000004d40)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000004d40)) 00:19:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:30 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) lsetxattr(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x0, 0xb914c837175635a8) 00:19:30 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 00:19:30 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 00:19:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x64}]}, 0x10) 00:19:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f00000001c0)=@delchain={0xe84, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_rsvp={{0x9}, {0xe4c, 0x2, [@TCA_RSVP_ACT={0xe48, 0x6, [@m_ctinfo={0x108, 0x15, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1ff, 0x84000000, 0x4, 0x7ff, 0x8001}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x10001, 0x2, 0x8, 0x400}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x71, 0x6, "d495685d55c4db19dbab8a7a3049284dfed92606e5fe80d57dd3e76793bd784652014fb3db828e0dd9830299071c741d9e98230c118dfc2a2e8021ed4b35e688c6969fdc684cd96cb83fe68a929a657d311f0b0dec383eb9d630d57e88e2b5ba40241d95c3b858c7b0c35df076"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0xa, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7687, 0x7ff, 0x7, 0x800, 0x200}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x805}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa934}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6}]}, {0x52, 0x6, "025e6ebc44cbcc55928233f11761056d9f20171b6eee7f93007b7e490e9482da514550064cdd77ab0491fa8a2c19fdc18d3ec44556fe1f3fdfccf9c7110c608206aa56bf9e5ee62cda2f0b6ad494"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x19c, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}]}, {0x83, 0x6, "5a43da87e7004abd8f1a2dfb7cf901ae7e0742e3de71d3a7c07d5d0800fd9a0e33bcc69be353c2d0dde93a57f7a0d08f936159f5a49ddce8d12064eec5e0a31104c3daf60043bbb329c0fca612fe463c97ff44b4e2e4e0ca5d8902937b0eb0ac8ee489d335a12b3aa606d4b8c40cf6d0d547109b80aff4de1c54bcdc00dbc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xac4, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xa91, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x51}, 0x20008054) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={0x0, r0+60000000}) 00:19:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8914, &(0x7f0000004d40)) 00:19:31 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001800)='fd/4\x00') [ 1240.389561][T25814] fuse: Bad value for 'fd' 00:19:31 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x11) 00:19:31 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 4: syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0xc22) 00:19:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f00000001c0)={[{@fat=@fmask}]}) 00:19:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x4, 0x4, 0x0, @private, @private=0xa010101, {[@rr={0x7, 0x7, 0x0, [@dev]}, @ssrr={0x89, 0x1b, 0x0, [@loopback, @local, @local, @dev, @private, @loopback]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @loopback]}]}}}}}) 00:19:31 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000100)) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc000000310001"], 0xbc}}, 0x0) 00:19:31 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000004d40)) [ 1240.616333][T25834] FAT-fs (loop2): bogus number of reserved sectors [ 1240.638611][T25834] FAT-fs (loop2): Can't find a valid FAT filesystem 00:19:31 executing program 1: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 00:19:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='devices.list\x00', 0x0, 0x0) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000100000085200000020000001813"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x25}]}, 0x10) 00:19:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1240.764371][T25850] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0xe, r0, 0xfffffffffffffffc) 00:19:31 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0xfffffffffffffc44) 00:19:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000400), 0x4) 00:19:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB='<'], 0x0, 0x0, 0x0) 00:19:31 executing program 1: prctl$PR_GET_IO_FLUSHER(0x1e) 00:19:31 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000020000000000000001"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:31 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x4, r0, 0x0) 00:19:31 executing program 1: prctl$PR_GET_IO_FLUSHER(0x10) 00:19:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@fat=@dos1xfloppy}]}) 00:19:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]}, 0x10) 00:19:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0xe, &(0x7f0000000000)=[{0x45}]}, 0x10) 00:19:31 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='K', 0x1, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x6, r1, 0x0) 00:19:31 executing program 0: renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 00:19:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x80) 00:19:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000014c0), 0xffffffffffffffff) 00:19:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c00010008000300010000007000010010001a0009000100676163740000000010001c000b0001006d6972726564e5ff0f000b000b000100736b626d6f64000010000000090001006373756d0000000010001d000b0001006d6972726564000010000f000b000100706f6c69636500000c"], 0xbc}}, 0x0) 00:19:31 executing program 1: socketpair$unix(0xa, 0x2, 0x0, &(0x7f0000000140)) 00:19:31 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:31 executing program 2: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) 00:19:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x30}]}, 0x10) 00:19:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB=',rootcontext=system_u,dont_measu']) [ 1241.251008][T25903] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:32 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:19:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:32 executing program 2: umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x0) 00:19:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x2, r0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, 0xfffffffffffffffb) clock_gettime(0x0, 0x0) 00:19:32 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 00:19:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) 00:19:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x28}]}, 0x10) 00:19:34 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x10, r0, 0x0) 00:19:34 executing program 1: bpf$BPF_GET_PROG_INFO(0x9, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x9003, &(0x7f0000000140)={[], [{@hash}]}) 00:19:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x0, 0x0, 0x0, 0x5}, 0x48) 00:19:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140), 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:35 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x20, &(0x7f00000001c0)=@string={0x20, 0x3, "c1ceb7a452d2246b8838f88f7cdf4ced6349e292d9c8b5b1ef34ef16169f"}}, {0x4a, &(0x7f0000000240)=@string={0x4a, 0x3, "6158ec47e67f2aff4825198c2dd047c448fa635a8e91233f33d2a919257285fa3d7d7ff4783e3d674e64a03b37f90565e7e5af68d767728976fb2d0553d249c3379acd1c1cddbcdb"}}, {0x21, 0x0}]}) 00:19:35 executing program 5: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {}, {@allow_other}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}]}}) 00:19:35 executing program 1: io_uring_setup(0xf12, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x10000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:19:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140), 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 00:19:35 executing program 4: prctl$PR_GET_IO_FLUSHER(0x2b) [ 1244.439953][T25949] fuse: Bad value for 'fd' 00:19:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140), 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000100000000000009"], &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) 00:19:35 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000080)=0x1, 0x18b, 0x1, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000140), 0x0) 00:19:35 executing program 4: setgroups(0x4, &(0x7f0000000280)=[0x0, 0x0, 0xee00, 0xee00]) 00:19:35 executing program 1: futex(&(0x7f0000000080)=0x1, 0x18b, 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x2) [ 1244.695815][T20681] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1244.965557][T20681] usb 3-1: Using ep0 maxpacket: 32 [ 1245.085777][T20681] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1245.455746][T20681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1245.464878][T20681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.473064][T20681] usb 3-1: Manufacturer: 塡䟬翦Ｊ╈谙퀭쑇煮婣醎㼣툳ᦩ爥徭紽㹸朽摎㮠路攅梯柗襲ﭶԭ퉓썉騷᳍ [ 1245.486353][T20681] usb 3-1: SerialNumber: syz [ 1245.734567][T20681] usb 3-1: USB disconnect, device number 59 00:19:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x82c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000640)='./file0/file1\x00', &(0x7f0000000680), 0x0, &(0x7f0000000800)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}}) 00:19:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:36 executing program 1: bpf$BPF_GET_PROG_INFO(0xe, 0x0, 0x0) 00:19:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile, @struct]}}, &(0x7f0000000180)=""/252, 0x32, 0xfc, 0x1}, 0x20) 00:19:36 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x15, r0, 0xfffffffffffffffc) 00:19:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0) 00:19:37 executing program 1: socket(0x11, 0xa, 0x0) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)) 00:19:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xff12, 0x6, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x2, 0x0) 00:19:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/252, 0x2c, 0xfc, 0x1}, 0x20) [ 1246.286437][T25977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25977 comm=syz-executor.5 00:19:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 1246.352063][T25978] fuse: Bad value for 'user_id' 00:19:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000080)=""/261, 0x36, 0x105, 0x801}, 0x20) 00:19:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x28}]}) 00:19:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xaaaaaaaaaaaabbc, &(0x7f00000003c0)=[{&(0x7f00000005c0)="912f4687fbd47df68a5e4388c5a42a11d5a0f2f316f8317a1a52148d28f7820700000000000000c7e71366a10e23113900fa6375f3df6789f43d84a2e5", 0x3d}], 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="696e69745f697461626c65376e6f6175746f5f64615f616c6c6f631a6a71666d743d7666736f6c642c6175746f5f64615f616c6c6f633d3078303030303030303030303030303030372c757365725f78617474722c7379737667726f7570732c71756f74612c736d61636b6673666c6f6f723d747275737465642e6f7665726c61792e6f726967696e002c7569643d", @ANYRESDEC, @ANYBLOB=',\x00']) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) 00:19:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="2c726f6f74636f6e746578743d73797374656d5f752c646f6e745f6d6561737572652c61707072616973655f74794503a6dc9b45477d672c6673636f6e74657874"]) 00:19:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:19:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x2}]}) 00:19:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 00:19:37 executing program 1: syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0000003100010029bd7000fedbdf2500000000100001000c00010008000300010000007000010010001a0009000100676163740000000010001c000b0001006d6972726564e5ff0f000b000b000100736b626d6f64000010000000090001006373756d0000000010001d000b0001006d6972726564000010000f000b000100706f6c69636500000c0019000800010c00010008000300000010000c00160008000300001000000c000e000800030008000000"], 0xbc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 00:19:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000180)=""/252, 0x26, 0xfc, 0x1}, 0x20) 00:19:37 executing program 2: bpf$BPF_GET_PROG_INFO(0xd, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:19:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x7, 0x0, 0x0, 0x6}, 0x48) 00:19:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) [ 1246.634938][T26009] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 00:19:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4}, 0x48) 00:19:38 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') 00:19:38 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000040)) 00:19:38 executing program 2: socketpair(0x1e, 0x0, 0x1f, &(0x7f0000000000)) 00:19:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x3, r0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 5: socket$netlink(0x29, 0x3, 0x0) 00:19:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000300)) 00:19:38 executing program 2: prctl$PR_GET_IO_FLUSHER(0x16) 00:19:38 executing program 1: prctl$PR_GET_IO_FLUSHER(0x1c) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 4: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x1ff}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0x4]}, 0x8}) 00:19:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000001840)) 00:19:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x15}]}) 00:19:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f0000000180)=""/252, 0x32, 0xfc, 0x1}, 0x20) 00:19:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x9, 0x0, 0x200}, 0x48) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x2, 0x0, 0x0) 00:19:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x94}]}, 0x10) 00:19:38 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file1\x00') 00:19:38 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x12, 0x4}, 0x4c}}, 0x0) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x0, 0x0, 0x0, 0xa04}, 0x48) 00:19:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000025c0), 0x0, 0x288800) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 00:19:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 00:19:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\"', 0x1, r0) keyctl$unlink(0x9, r0, r1) 00:19:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='2', 0x1, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 5: prctl$PR_GET_IO_FLUSHER(0xe) 00:19:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74}, {}]}) 00:19:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 00:19:38 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6dc, 0x1, &(0x7f0000001500)=[{0x0}], 0x0, &(0x7f00000015c0)) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001800)='fd/4\x00') 00:19:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) 00:19:38 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x3, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0, 0xfffffff5, 0x10}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@empty, @remote, [], [], 'veth0_to_team\x00', 'pimreg\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 00:19:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x4, r0, 0xfffffffffffffffc) 00:19:38 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x200}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x944d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000008}, 0x20008080) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x81) socketpair(0x5, 0xa, 0x4, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) socketpair(0x5, 0xa, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) bind$tipc(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40) syz_open_dev$usbmon(&(0x7f00000010c0), 0x0, 0xc102) 00:19:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 00:19:38 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000680)='./file0/file1\x00', 0x82c0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 00:19:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) 00:19:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@setneightbl={0x14}, 0x14}}, 0x0) 00:19:38 executing program 0: keyctl$setperm(0x5, 0x0, 0x50202000) 00:19:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', 0x0}) 00:19:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:39 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 00:19:39 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 00:19:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 00:19:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:19:39 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:19:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) 00:19:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000008400), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 00:19:39 executing program 0: socketpair(0x10, 0x3, 0x1, 0x0) 00:19:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 00:19:39 executing program 4: request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)=',\x00', 0x0) 00:19:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:39 executing program 0: r0 = socket(0x2, 0x3, 0x7) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 00:19:39 executing program 5: r0 = socket(0x1e, 0x801, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 00:19:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 00:19:39 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0x8, 0x2]]}) 00:19:39 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:19:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080), 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:39 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) 00:19:39 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 00:19:39 executing program 0: r0 = socket(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}) 00:19:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) read$alg(r0, &(0x7f0000000140)=""/2, 0x2) 00:19:39 executing program 2: socketpair(0x29, 0x2, 0x0, 0x0) 00:19:39 executing program 0: r0 = socket(0x2b, 0x801, 0x0) bind$can_raw(r0, 0x0, 0x0) [ 1249.199423][ T27] audit: type=1400 audit(1660522779.873:886): avc: denied { setopt } for pid=26157 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:19:39 executing program 5: request_key(&(0x7f0000000040)='.dead\x00', 0x0, 0x0, 0xfffffffffffffff9) 00:19:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0xfc9a}}, 0x0) 00:19:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080), 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x711}, 0x14}}, 0x0) 00:19:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 00:19:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:40 executing program 5: r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x0) 00:19:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080), 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 00:19:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) 00:19:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) 00:19:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) read$snddsp(r0, &(0x7f0000000080)=""/145, 0x91) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 00:19:40 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:40 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 'update ', 0x20, 0x0, 0x20, [0x0, 0x0, 0x0]}, 0xfffffffffffffe5f, 0xfffffffffffffff9) 00:19:40 executing program 0: r0 = socket(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) read$snddsp(r0, &(0x7f0000000080)=""/145, 0x91) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 00:19:40 executing program 1: socketpair(0x1d, 0x3, 0x1, 0x0) 00:19:40 executing program 2: r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 00:19:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)) 00:19:40 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x240, 0x0) 00:19:40 executing program 1: socketpair(0x25, 0x5, 0x9, 0x0) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 00:19:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) read$snddsp(r0, &(0x7f0000000080)=""/145, 0x91) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 00:19:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x0) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) 00:19:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 00:19:40 executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 00:19:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:19:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x1, 0x0) read$snddsp(r0, &(0x7f0000000080)=""/145, 0x91) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 00:19:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port1\x00', 0x0, 0x1c0e}) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 1: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000080)='blacklist\x00', &(0x7f0000000100)='logon\x00') 00:19:40 executing program 5: r0 = socket(0x15, 0x5, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) 00:19:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:19:40 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)) 00:19:40 executing program 0: r0 = socket(0x25, 0x801, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1250.003742][ T27] audit: type=1400 audit(1660522780.673:887): avc: denied { setattr } for pid=26240 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r0) 00:19:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:19:40 executing program 5: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)) 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) [ 1250.111683][ T27] audit: type=1400 audit(1660522780.753:888): avc: denied { bind } for pid=26244 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:19:40 executing program 4: r0 = socket(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @empty}}}}) 00:19:40 executing program 0: r0 = socket(0x2b, 0x801, 0x0) bind$can_raw(r0, &(0x7f0000000140), 0x10) 00:19:40 executing program 5: request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='&^-$*\x00', 0xfffffffffffffffe) 00:19:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) [ 1250.195982][ T27] audit: type=1400 audit(1660522780.793:889): avc: denied { write } for pid=26249 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 00:19:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:40 executing program 4: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) 00:19:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)) 00:19:41 executing program 2: socketpair(0x22, 0x0, 0x201ff, 0x0) 00:19:41 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:41 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000)='y', 0x1) 00:19:41 executing program 4: r0 = socket(0x2b, 0x801, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback, 0x0, 0x9bcbb7d152242b3}}) 00:19:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 00:19:41 executing program 5: set_mempolicy(0x8001, &(0x7f0000000000)=0x10005, 0x5) 00:19:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000000c0)="8a", 0x1, r0) 00:19:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) 00:19:41 executing program 5: socketpair(0x2b, 0x1, 0x3fe, 0x0) 00:19:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="24aa", 0x2, r1) 00:19:41 executing program 1: r0 = socket(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x400) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2}) 00:19:41 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040), 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:19:41 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0xea60}) syz_clone(0x0, &(0x7f0000000440), 0x0, &(0x7f0000000280), 0x0, 0x0) 00:19:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:19:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000003c0)=""/62, &(0x7f0000000400)=0x3e) 00:19:41 executing program 2: socketpair(0x10, 0x2, 0xb1, 0x0) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:19:41 executing program 2: r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 00:19:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:41 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x141040, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)=[&(0x7f00000001c0)='\x00'], 0x0) 00:19:41 executing program 5: r0 = getpid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x29, 0x4, @tid=r0}, &(0x7f00000000c0)) 00:19:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:19:41 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 00:19:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r1, 0xfffffffc}}, 0x10) 00:19:41 executing program 0: r0 = socket(0x2b, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'syztnl1\x00', r2, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) clock_gettime(0x0, &(0x7f0000000000)) 00:19:41 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 00:19:41 executing program 2: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x20940) 00:19:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x7fff000, 0x4) 00:19:41 executing program 5: r0 = getpid() tkill(r0, 0x961) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) 00:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 00:19:41 executing program 0: set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x4) 00:19:41 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x5) 00:19:41 executing program 2: r0 = socket(0x1e, 0x801, 0x0) bind$can_raw(r0, 0x0, 0x0) 00:19:41 executing program 5: r0 = socket(0x25, 0x801, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8c1) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, 0x0, 0x0) 00:19:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:19:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040)) 00:19:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 00:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xfffffffffffffdca, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xfffffffffffffe65}, @NBD_ATTR_BACKEND_IDENTIFIER={0x48, 0xa, '/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT]}, 0x90}}, 0x0) 00:19:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, 0x0, 0x0) 00:19:41 executing program 4: socketpair(0x0, 0x8000d, 0x0, 0x0) 00:19:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 00:19:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 00:19:41 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 00:19:41 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000080)='0\x00', 0x2) 00:19:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @loopback}}}}) 00:19:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, 0x0, 0x0) 00:19:42 executing program 0: socketpair(0x2, 0x0, 0xfffff825, 0x0) 00:19:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 00:19:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x782f, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}) 00:19:42 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) 00:19:42 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x13, 0x0}) 00:19:42 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000140)={0x0, [[0x1], [0x2], [0x7]], '\x00', [{0x0, 0x0, 0x1}]}) 00:19:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 00:19:42 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@end]}}}}}) 00:19:42 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) 00:19:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x32, 0x0, &(0x7f0000000100)) 00:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000000)={'wlan1\x00'}) 00:19:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000580)) 00:19:42 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/ubi', 0x0, 0x0) 00:19:42 executing program 5: socketpair(0x3b, 0x0, 0x0, &(0x7f0000000180)) 00:19:42 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)={0x77359400}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x7fffffffffffffff]}, 0x8}) 00:19:42 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 00:19:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) 00:19:42 executing program 4: socketpair(0x15, 0x5, 0x2, &(0x7f0000000000)) 00:19:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:19:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) 00:19:42 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x600100, 0x0) 00:19:42 executing program 2: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:19:42 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, 0x0, 0x0, &(0x7f0000000140)={0x0}) 00:19:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x19, 0x0, &(0x7f0000000100)) 00:19:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x24}], 0x10}, 0x0) 00:19:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x0, 0x0, 't'}, {0x10}], 0x28}, 0x0) [ 1251.950469][T26438] overlayfs: missing 'lowerdir' 00:19:43 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x40500) 00:19:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x7, 0x0, [@broadcast]}, @ssrr={0x89, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@multicast1}, {@local}, {@dev}, {@multicast2}]}]}}}}}) 00:19:43 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x220200, 0x0) 00:19:43 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) 00:19:43 executing program 4: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0) 00:19:43 executing program 3: r0 = gettid() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000200)) 00:19:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0xfffffffffffffffd, 0x0) 00:19:43 executing program 4: add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='^)y.\x86(-$-$\'*:\x00', 0x0) 00:19:43 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:19:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:43 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x453, 0x0, 0x0, 0x25dfdbfb, '%'}, 0x14}}, 0x0) 00:19:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, 0x1}}) 00:19:43 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) 00:19:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) 00:19:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:43 executing program 3: clock_gettime(0x5, &(0x7f00000001c0)) 00:19:43 executing program 1: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 00:19:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x5452, &(0x7f0000000340)) [ 1252.832484][ T27] audit: type=1107 audit(1660522783.503:890): pid=26468 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='%' 00:19:43 executing program 2: setxattr(&(0x7f0000000240)='\x00', 0x0, 0x0, 0x0, 0x0) 00:19:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000540), &(0x7f0000000580)=0x4) 00:19:43 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/65}, 0x49, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x8, 0x0) 00:19:43 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/26) 00:19:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) eventfd2(0x0, 0x0) 00:19:43 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0), 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:19:43 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f0000000000)={'wlan1\x00'}) 00:19:43 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) 00:19:44 executing program 4: syz_clone(0x40004000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0) 00:19:44 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x19, &(0x7f00000002c0), 0x4) 00:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x30}, 0x44) 00:19:44 executing program 1: msgrcv(0x0, 0x0, 0xd9, 0x0, 0x1800) 00:19:44 executing program 3: add_key$fscrypt_v1(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x0, "4b754e5f1a88d4acd1db268b13e3416f7a64a268ec562c05b8707323dee88d87462ba47ec759bbf87ecbbc79cf9dc1e5b93d3195d91136aa44c32d4fee976053"}, 0x48, 0xfffffffffffffffd) 00:19:44 executing program 0: syz_mount_image$hfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) 00:19:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8}, 0x10) 00:19:44 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x7fffffffffffffff]}, 0x8}) 00:19:44 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:19:44 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:19:44 executing program 1: socketpair(0x1e, 0x0, 0x8, &(0x7f00000004c0)) 00:19:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x22, 0x0, &(0x7f0000000100)) 00:19:44 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x4, &(0x7f00000002c0), 0x4) 00:19:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) 00:19:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001a00)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 00:19:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 00:19:44 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:19:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:19:45 executing program 2: setxattr$security_ima(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:19:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:45 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000340), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0xffffffffffffffa5}}, 0x0) 00:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="876f8107fdcf39035d", 0x9) 00:19:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x40002043, 0x0, 0x0) 00:19:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 00:19:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 00:19:45 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f0000000000)={'wlan1\x00'}) [ 1254.677542][ T27] audit: type=1400 audit(1660522785.363:891): avc: denied { ioctl } for pid=26545 comm="syz-executor.1" path="socket:[197296]" dev="sockfs" ino=197296 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 00:19:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x8, 0x0, &(0x7f0000000100)) 00:19:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 00:19:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P']}) 00:19:45 executing program 2: syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1000, &(0x7f0000000180)={[{@dmask={'dmask', 0x3d, 0xfffffffffffffffb}}], [{@dont_measure}]}) 00:19:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="11195e23a8353cd94588f2b8c465aa5764a0f1e74371f8da951ae422ec012945bc0f514a41d2b9a950c13db1b0a4d8602b025bbcfce30fdf2707cb50621a323f4b351128ed061dcca6f32105d455b48b14d9d60ba0c71b1d4561a5d287ed4faa8f17e305f3c820198e9897c4f6fb1c3423", 0x71}}, 0x0) 00:19:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 00:19:45 executing program 4: syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=[{&(0x7f0000001280)="322a6c9cd8a6b0472af66368b5f0991c5a36e695ae170f69267cd2e5de284d9236b471663aa612427153789ca0893148e9b97cde2adf49f391b2c88345e95e960d48147cb0670edd02119db5efa6989fed730d1364cac6c4b113ccdb0792c3de2b2fd604627c84a44fcf3f3211f40488797ccc6d59714c914d200accb2c174f550f386dff0083ee1137b683621d0d69b7692298be76b18ab581cec884571c47ba084e2b11fa090c9dd5676b44f83f7a5a2ed36012ae44229cbed56af86e28e84acc8748f7a9d18be1b2a84e3fb6a54886774c1b3af47c2986446bb75eea56114d6191d26ad0a7f1a9158a0c6a9ad0c0413d795b907d98f74e37a582c84c4ac3342212bd1bb3f64e2685e0d4bd9c636dc4d69c8f3ca479eb8a5b6aba4eb06c1736c863979c4d5d193b20b12a353ad574ee73e8bda52c746ff6d8cb38a766ba1c5315d70c90625e43c56f48080ee5d79b3cb57c3ad472968d6aed6e8723197d6e8121dbc42e1044bf451fe4ad447aad1d8476752a0b51b018673bf03b02a434f2c3507f06faf26fac9f933df64817eeee9d65bcedc132d5f0db6561b80652cf19810e60e097e3f373c9c93ce83a39f6cd1af3da527b6279083526ec9d4efca00eae859ed439c0a7125fa521ba105cfe7e682b7f7012bb1e5979df0c18f6eac1f34582b602ec0cbcd1c8dc53f71b5875c738a7a3cb1145cd13c786f06ff1f34866565f679863543be7955e535066ab5e15932dc2f6d5b7664c85223bcebef42155b3267c17ce02fb7cdb5ab99a3b7746bc5e705929f7ef9663a834e771b5beefdc6a5b879bcd299ae75323955e0a06e7617c36083d4549da48c3a260adf5acc29abde37f49b53f77193cd113e9e63cab4311ef9b36a59f16e717124e428fc953c088cb8cd8c47c75e73daec5ba3395c8b38e5b1e51b4ef9198c7cc1b7244edf14fb31ead87e43220b611e530c0b26fecbdf0b1ef973d44403e850686fd615667e9801864207a43acbe05291a0dac8f4527967b4c746b4e99bbf45051fcd637ac438d90896e80a6993f9120627e260454796c682b74899d8762539794e84e27a02fdf86c2b5c51a426ae92ef24558317d928529bf8a36b776d8a66ac94bce8f83a8e21a66ba90a74357ff3d706b75543ca7dd0f31a71c4a2c71c1371218848198941de052c3faafe14f793231421c867f3109d3b728195620e91f08b65d9a54da1b838ef323f13b8800ceb4872e4a690a97614a62abfe2f2b0174979b62aa5243d21b7577377402b85207c83c737d553e3234618931f538ec7cb008d77d10eda21bd96557bec4133356f81fc41a581c893e053f5981fa7acf9ba3807c53da2fce6defdc760db781f3955e79a3db780e73fc5ff5327f723a5c03f9f5641cb1d172088805723766cafb394f2256aa04c51649b93a8e5aa15697649502d868d0f52dd587dd58c3588d01512b908fdf1244f4bb13b9d94e283e128781c5cc313208302c18140df94addc9c68dc824d9a8bd0dfbd4518a8965bef0bd270b4677463757723a93121da3c91bf55e153e2d60fa58d14bc1bb6419c7b3b8d67992334554ecd580617c2a7c553db63772592cf8f87a6d495685c8eb57881d32fa7346126bbecdbded6230bef9abf65c2e31c6e9f10ea252649f7f170a665086ef49f2326d31a89dcc0d565b90104fa05556e174084f2e51d1a2acf8ae5bf70968bdc9c72ab7371174890eb17193fc7cb77a62908562d04d7b032b9cde691aa7acbc3394cbcefcc7ecddf6ebf81189a2bfbf97b27a950063a66737270863c2f55aa49b980614d95866b2628cc21ca959d5c39ac8bdb32e976774960798bb9657b29de1358a2e84c377da5381c4fc17b0abd368b0772fc69754887947d499be26dfb50b0145008b9c6dc01b200efe81dd99797c7b9ab0c3ea56079bbb2b2b7f9ce30d8c45011a38580e87707e5c22acd7c8beea64b2f7720f4feba2d1e32de420f0be27ac7ca15c77b01116702eaf774aa365f89a5f139bccef847e7aeb7b7d3d6e36b65872852c92a5389a1f0859ef82b8315678b19e3b7c54f416ac8c793f4866a2e1365e23d2ad450593d870af2abb90970822c1b228818420873dec730884082a14b4d4578e55c4b2872e452070e2e4103998d30e035e511ec32fc874d1928a2cd08564967e75cb552b4a5a5f6bd2c974fcb811341a18b1e8bced4c6db039d6299dba972b92fb1d652c280b3e1a000b8e05efa9868e8a05e75c8dedd8e61d14b8954a328fb7dc099bff34330dd8e07d89c9c0278ec9c61ab87161b7739394b5f24a71a970389143296018cc7c47001cc22fc149cc2de2315cafbe90e3b462a3f9e0e294ef1f860d3936809bb9abbc45da66d4ba7875be023986d570dbd672911aac3ff1d15e2eeefd283796d0c9927b9ba7a0b153c0ee4e194251c2b1205924fb86bb65872eacf87f606bea32b0a1a1839bd9a0bb6d39231de0fb508dd2152ed6b973e19f6005e3c4df70e9e2df26c5df0405b386b9f2e533d99194a5a7603cd64296ca7babdf6ba77a6340082526e97ba0d8d482e85018684dc9965168d490833c177f48558e91b0aa3e7138da77a438ca132d77691e0e38f20a8125d5b6bc3f22d1be965e7b57fcd3449f778b95ccbc7b0fef42f35e3330b2f7a8060333850911cfd4f0e720887d45438e60cd695840cb0824c807a005e92108d452d409ae0df7b9ffce9fa5bc84de74aab89450460cba68126b76741e76710b2a59d08b7140dbbbe54604d38e1d6985c402a96ffc1d9646f0c5bbb4367aa85353067dbc9ff7e0b8cae9abdf65ce97ae847f98e9180f5049a2d7866e989b415399ce53b16fc930188b0d231d5a498e0faad7d8857b277108977d6c5f9a523fbaec57104d6d7c37869ad0196f2b8f52d1eb74286f91835ef43505f7f0c3825406dc7f508bc9daa1fefcb7302d55bc40ce78b10d096ba8a60dd997d9d9af28fe86a179ccd291b8edae7abbcd3dc08567473af218b9c6e5d7f5dfb1f4af8a1b2c9bc9610a15b29d31df965db8bea36e7b0d5703e8ccb881c12303ef199909356a81a14e9a9392f60b6233c7b3150532013c36ee52df97a3fd91308e48958d0902cc4d80c5b918db56fcf7ca3780000dbab418f33a5e053b01033aaf0c2f9bff8f10f957975f62468f3fb729570edd969374dfaa168a7ecfc92a74e8cbdd3c057d288238d23ce2f8f1f528b26d83a7cf2bed1d357aa98bc6adea80f0cb3556d12efedb715a7990275762e9e5ac4b5cb299c69bb5f98bd9052ce8ea6bce67787de125830bdd4d6b183eb48b53a2e06033ee3e399d20f20f55b452aa59e0633b36b7915c5ad63bd0151c87ad49adcd9e8e99e86980a082a1a5cea12524aeb2619a16fbece2524580198ca2618b915057047e6ca3ee87f381536606528eadd116f138116ecfd8794ff4a9307b596dbb59a363dbca7bb63ecc5d0938d99ce5c14e074c92520c951f1eba75ac279ef99082605d9233c926926583eb363feb287ac0b2f552ca1c36cf67270ae60421cf84acd1331d81c6b0efa02d4eb3f7bed96ce80eaf67c7a3a3b4986679c8e9049e88621a7a27d1269928499d6104509f267c0a28ca4636fdb0fbea6772932095d44952b066e2f184e14687267e48389599e2b60515ecdd09628983b9bde7d2864b2426002c65951bf4e55cbb51d19c01c24b8bb197880c9d4e80cb4f6e3f6fdd773aacc946627934e04153412da4050999382fde49864f89ce0e0ed93c59813e93ca31b47c02601551f3c8ef1db1a8697c54d2ab0b5aec047a41ce235262bd82ac039d67cfa0c27bc94411e60272d855331cd4582a1545975e57f7b9fb83e496daa656b55e77947ac66c04f6a0556e2c4e83bbaefc27033dded92f97538193f899dbd93bc04c66a2d8ff41284a0ec51dcad8ca0762e45c1c6a43d5bb9f727bbad3ee9ef93ad6462a833b6885f7ba4731aa2b8164d6c7b8a6dfa203909a58de981f2679b4ece349714bc626fb7abd423cc57038d1d1604a98e4438d065625718fa467895979e596f393d1594cd432d09e637739a338aeae7748d7ee4eb08a9409856a0ab7aeb4bd8736da476939ff302b12de1bcbb811e3c3ae8078bab40789a144f5fab9a4d54c3905a7133bc216c54fa60c4812d9ff0e4d62bd1c079399055b49ec98c0e944f80cf689a77285fcccade5e74a45092c0b98a799593e7dafcc8612d1ab7e3093a5f62a000db65b10b883493c406da13b59f6b05675819911d0ff7c95983a1ba0058b31603c95adb60041c9b0cd015d2f0c4f2c28e3ea68c55832c9147c2dd33d50025b3690eee4691f517c21e5eb8b9ce2eb49a1f5ee222f4930d22c8beef70a90df494525fed6ca43f702dfd97f17a6ff8030b2ed21d17edf11b162417bef53270b788470dbba5de45afc9c6628b131994ab82c37c305cd476f26c581b3cb09d5479f82755f531119ba759f82d50de5a27e731131c9fc6a951474659e72beb9a6c51a25a6e702ecad13840afb10a681deaec28950d12394ad0073cc1c64786f1b0322bf787de93f9ad796d5ae3048e5d2368db1c915b1f5da43e892a080a77250fbea0aea86d272a965ce32afe504701d640438e93a1fdc5f4c5d8af0bc701150bbea79359343417b5d545f409394f7a48fdcff838ef86b48bc4567189ca21f9ac5834e1ee65d311a9b5fad6ca64328c4be6a42e08c72d90ffa07c2d734531007a9474e989643904b87c48ddb8805fa487fa878dc89806ac2edc2dc1b99cb7e49c87f81eb3730a68ca9ea7b69b4503b7f814f5e40105e3608c8399b85a0ff076c1c8610b23f7d4cfee19ab83a588b83b0b4e9a3230fb831a938e0ff447fb84756fe34aa1cac773e975a84ad377fe309428b18973c0d1c847c518b0d5464f63d7572701bd63513f4331087ad7f451326e653db110e28f87d392031a18d4ce5066d1900d52af314e210ed11f46e68a28b35ff7c62c59e8e6c23fe5bc8fc54ba40a9230b1764ab40d52bf558a59ddabb7e5eb3690680d92c589cc539ed2029e88cf4ab097472198bc5093e939fac11b8bdb8426eec7c8c9629c73d6cfb1bad49e92eeebe67f93bad2b6c59365830787fbd06b80fbcd031b8248fc82d5cc7e7381b8579dfe50e8a3f90ac9c9e9fdd68c8d7bd75e1636c43fc98d955ce66a94ce1b04dcab7e03d24797d9774ea1f77113de1e2a5ce7c0ee45ec68dd11e169731631c52f9fa1fa1f9d9fc38ac18ba7e5c16a7d797b121cbee2b564058bcc62926d30a04cb1f9972f65b00df68ede12615968f882daea7eedbf25b6359e609613a5ee86e75e65060613a0227bebfc4768b229774e03a429f175daa068542b0772d12495040252349c88b3b8fb80946d992d698ef7bac6be8884ffde59fc1650a1649c6818172d1746a18c72033aad81d690fcab3726cd29a240f6608e1c14410539419a9924d49635f0f4f8f85601ce0201d575d2327a7a21917fc77b9d42704a099c068f131355023733371d4276df05ceeec9b5279637406f5784cf1f3b73c8f88639d40b3f059c985172429033b1cec75a67ea81da87cb00d79679f37b153ca21458b29f457124274aa5e425ee99e9d3bbb8c0b72d69922649cda0b88245439da607047199c590c84b7f03ad4268a8952429b44295fa9d13c63c918f47382251cf2ac0e3e50e76c28f13cfe021061ecbe0fad582919501892e34b08be04343ed28995b98a46ff0655f4f48b328a205a2664d468e76120665cf78d0ab55dabcfd04c1b6f878290fc8c730e6d4d30aa2d3d202a6c92810a6cd751f761e53", 0x1000}], 0x0, 0x0) [ 1254.870605][T26564] ucma_write: process 8215 (syz-executor.5) changed security contexts after opening file descriptor, this is not allowed. 00:19:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 00:19:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1254.909530][ T27] audit: type=1400 audit(1660522785.583:892): avc: denied { create } for pid=26570 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 00:19:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:19:45 executing program 5: syz_mount_image$hfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 1255.024929][T26577] loop4: detected capacity change from 0 to 8 [ 1255.028890][ T27] audit: type=1400 audit(1660522785.633:893): avc: denied { write } for pid=26570 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 00:19:45 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f0000000000)={'wlan1\x00'}) 00:19:45 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0xd9, 0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/43) 00:19:45 executing program 3: migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x3) [ 1255.082869][ T2972] Dev loop4: unable to read RDB block 8 [ 1255.109786][ T2972] loop4: unable to read partition table 00:19:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) 00:19:45 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0xfffffffffffffffe, 0x0) 00:19:45 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) [ 1255.156083][ T2972] loop4: partition table beyond EOD, truncated 00:19:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="876f8107fdcf3903", 0x8) 00:19:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$proc_mixer(r1, 0x0, 0x0) 00:19:45 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x1b, &(0x7f00000002c0), 0x4) 00:19:45 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) 00:19:45 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 00:19:46 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) 00:19:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "b8bc5aea3f5e8e7fa1b6020926523564e321d0c061b1261ed008b370c4e9568579393889cb3a61b82635f331f8dea079a0ea8b8f36b04a86d255611b5021182553157a4af21c57103e02881c4b9eb1fa"}, 0xd8) 00:19:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 1255.368101][ T27] audit: type=1400 audit(1660522786.033:894): avc: denied { write } for pid=26602 comm="syz-executor.5" name="task" dev="proc" ino=196502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 00:19:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000000100)) 00:19:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="9c", 0x1}, {&(0x7f0000000140)="d0", 0x1}], 0x2}}], 0x1, 0x0) [ 1255.454086][ T27] audit: type=1400 audit(1660522786.043:895): avc: denied { add_name } for pid=26602 comm="syz-executor.5" name="26604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 00:19:46 executing program 1: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) 00:19:46 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) 00:19:46 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)) [ 1255.555271][ T27] audit: type=1400 audit(1660522786.043:896): avc: denied { create } for pid=26602 comm="syz-executor.5" name="26604" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1255.646538][ T27] audit: type=1400 audit(1660522786.043:897): avc: denied { associate } for pid=26602 comm="syz-executor.5" name="26604" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1255.781935][ T27] audit: type=1400 audit(1660522786.123:898): avc: denied { ioctl } for pid=26609 comm="syz-executor.4" path="socket:[196514]" dev="sockfs" ino=196514 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 00:19:46 executing program 2: msgrcv(0x0, 0x0, 0xffffffffffffff86, 0x0, 0x0) 00:19:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) 00:19:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f0000000000)={'wlan1\x00'}) 00:19:46 executing program 1: socketpair(0x26, 0x5, 0x7, &(0x7f0000000180)) 00:19:46 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@default_permissions}], [{@euid_eq}]}) 00:19:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10}, {0x10}], 0x20}, 0x0) 00:19:46 executing program 3: socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000000)) 00:19:46 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 00:19:46 executing program 1: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 00:19:46 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5451, 0x0) [ 1256.096679][T26637] overlayfs: unrecognized mount option "euid=00000000000000000000" or missing value 00:19:46 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, &(0x7f0000000000)={'wlan1\x00'}) 00:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:19:46 executing program 3: socket(0x1d, 0x0, 0x1b9d0404) 00:19:46 executing program 4: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) 00:19:46 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0) 00:19:46 executing program 1: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$hfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:47 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x85) 00:19:47 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x24, &(0x7f00000002c0), 0x4) 00:19:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/ubi', 0x600100, 0x44) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000006c0)={[{0x9, 0x200, 0x0, 0x0, 0x6, 0x5, 0x6, 0x0, 0x0, 0x7f, 0x37, 0x5d}, {0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x4}, {0x5, 0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}]}) 00:19:47 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 00:19:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x2, 0x9, 0x20}) 00:19:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0xa0) 00:19:47 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, &(0x7f0000000000)={'wlan1\x00'}) 00:19:47 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='afs_file_error\x00'}, 0x10) 00:19:47 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 00:19:47 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_skb\x00'}, 0x10) 00:19:47 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x16, &(0x7f00000002c0), 0x4) 00:19:47 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 00:19:47 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x33, 0x36, 0x66, 0x62, 0x64, 0x30, 0x64, 0x31, 0x64, 0x61]}, &(0x7f0000000080)={0x0, "2090cfcceb5b7c7ee4841786bd65c062112558765327c7bf5ebf765e21541290ef346318b604300a07476855ffb9405b5330c292d0efde8b5fbd1eeb5271ed04", 0x14}, 0x48, 0xfffffffffffffffb) 00:19:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0585611, &(0x7f0000000340)) 00:19:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'syztnl2\x00', 0x0}) 00:19:47 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 00:19:47 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x8, &(0x7f00000002c0), 0x4) 00:19:47 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:19:47 executing program 2: fanotify_mark(0xffffffffffffffff, 0x1, 0x8, 0xffffffffffffffff, 0x0) 00:19:47 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) 00:19:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0285628, &(0x7f0000000340)) 00:19:47 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) 00:19:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, 0x0) 00:19:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @local}}}}) 00:19:47 executing program 2: socketpair(0x29, 0x80002, 0x0, &(0x7f0000000100)) 00:19:47 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) 00:19:47 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000180)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 00:19:47 executing program 1: socketpair(0xa, 0x1, 0x3f, &(0x7f0000000080)) 00:19:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$802154_dgram(r0, 0x0, 0x0) 00:19:47 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) 00:19:47 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, &(0x7f0000000000)={'wlan1\x00'}) 00:19:47 executing program 2: syz_mount_image$nfs(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) [ 1257.312766][ T27] audit: type=1400 audit(1660522787.983:899): avc: denied { connect } for pid=26725 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 00:19:48 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @empty}, @in], 0xfffffffffffffebc) 00:19:48 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r0, 0x0, 0x0, 0x2022, 0x0, 0x0) 00:19:48 executing program 3: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[{&(0x7f0000000080)="fd", 0x1}, {&(0x7f0000000280)='N', 0x1, 0x80000000}], 0x0, 0x0) 00:19:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0xe, 0x0, &(0x7f0000000100)) 00:19:48 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0) 00:19:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x98}}, 0x0) [ 1257.478942][ T27] audit: type=1400 audit(1660522788.153:900): avc: denied { read } for pid=26742 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 00:19:48 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x7fffffffffffffff]}, 0x8}) 00:19:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) 00:19:48 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 00:19:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) 00:19:48 executing program 3: syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x84a546fa268a11fc, &(0x7f0000000700)) 00:19:48 executing program 5: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)) 00:19:48 executing program 2: mq_unlink(&(0x7f0000000000)=',\x00') 00:19:48 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) 00:19:48 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f0000000d40)='T', 0x1, 0x0, &(0x7f0000000280), 0xf) 00:19:48 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000000)={'wlan1\x00'}) 00:19:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) 00:19:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000002280), 0x10) 00:19:49 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)=ANY=[], 0xd9, 0x0, 0x0) 00:19:49 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:19:49 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f0000000000)={'wlan1\x00'}) 00:19:49 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:19:49 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) 00:19:49 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, 0x0) 00:19:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8953, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:49 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x86483, 0x0) 00:19:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) eventfd2(0x8000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x600100, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) 00:19:49 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000340)) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:19:49 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) 00:19:49 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0), 0xffffffffffffff0a) 00:19:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 00:19:49 executing program 5: socket(0x25, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) geteuid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f00000012c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/bcm203x', 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) 00:19:49 executing program 2: socketpair(0x29, 0x0, 0x0, &(0x7f0000000100)) 00:19:49 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 00:19:49 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4842) 00:19:49 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 00:19:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0xd50}], 0x0, &(0x7f0000000300)={[{@suiddir}]}) 00:19:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="737948748104000000000000000000", @ANYRES16]}) 00:19:49 executing program 0: ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) 00:19:49 executing program 1: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@errors_withdraw}, {@quota}, {}, {@lockproto_dlm}, {@quota_off}], [{@subj_role={'subj_role', 0x3d, '^{:[}$#)\'%-'}}]}) 00:19:49 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:19:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x1}) socket(0x0, 0x0, 0x4) 00:19:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000004c0)=ANY=[]}) 00:19:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xe65, 0x3, "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"}]}, 0xec4}}, 0x0) 00:19:49 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x8}]}}, &(0x7f00000002c0)=""/244, 0x26, 0xf4, 0x1}, 0x20) 00:19:49 executing program 0: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 00:19:49 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x13, 0x0, &(0x7f0000000100)) 00:19:49 executing program 5: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x185001, &(0x7f0000000300)) 00:19:49 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x1000000, 0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 00:19:49 executing program 3: sigaltstack(&(0x7f0000000140)={0x0, 0x3}, 0x0) [ 1259.138459][T26835] gfs2: Unknown parameter 'subj_role' 00:19:49 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x5, &(0x7f00000002c0), 0x4) 00:19:49 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 00:19:49 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e1042cbd7000fddbdf25060000000c001600030000000000000014001f00fc020000000000000000000097e2d7580000000105001400fb743b060000000c0010"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 1259.363835][T26851] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 00:19:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 00:19:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:19:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:19:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) 00:19:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00'}) 00:19:50 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="a6", 0x1, 0x7fffffff}], 0xa400, &(0x7f0000000280)={[], [{@smackfsroot={'smackfsroot', 0x3d, '\\\xf8%}]\'/(,'}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [], 0x2d, [], 0x2d, [0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x31]}}}]}) 00:19:50 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x412002, 0x0) [ 1259.598604][T26862] loop5: detected capacity change from 0 to 264192 00:19:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 00:19:50 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "2090cfcceb5b7c7ee4841786bd65c062112558765327c7bf5ebf765e21541290ef346318b604300a07476855ffb9405b5330c292d0efde8b5fbd1eeb5271ed04"}, 0x48, 0xfffffffffffffffb) 00:19:50 executing program 2: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002280), 0x0, &(0x7f00000023c0)={[{@nosuiddir}, {@rgrplvb}]}) 00:19:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) 00:19:50 executing program 5: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002180)=[{&(0x7f0000000180)="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", 0x1000}], 0x0, 0x0) 00:19:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x0, 0x3436abe7, 0x48}, 0x48) 00:19:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8d}, 0x0) [ 1259.759409][T26876] loop5: detected capacity change from 0 to 8 [ 1259.764032][ T2972] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1259.789718][T26874] gfs2: not a GFS2 filesystem 00:19:50 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4100) [ 1259.812520][ T2972] Buffer I/O error on dev loop5, logical block 0, async page read [ 1259.836022][ T2972] Dev loop5: unable to read RDB block 8 [ 1259.844507][ T2972] loop5: unable to read partition table [ 1259.878199][ T2972] loop5: partition table beyond EOD, truncated [ 1259.937450][T20518] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:19:50 executing program 1: getgroups(0x1, &(0x7f00000001c0)=[0xee01]) 00:19:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}}], 0x1, 0x0) 00:19:50 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:19:50 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, 0x0, 0x600100, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:19:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short}, 0x14) 00:19:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x0, 0x0, @stepwise}) 00:19:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"19ad9ddd2722297e4bf36ce0dfc44657"}}}}, 0x90) 00:19:50 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f0000000000)={'wlan1\x00'}) 00:19:50 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x0) 00:19:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 00:19:50 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 00:19:50 executing program 4: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="a63e", 0x2, 0x7fffffff}], 0xa400, 0x0) 00:19:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="9c1eefc030716f14d21ca19cdc20a0", 0xf}, {&(0x7f0000000140)="d0", 0x1}], 0x2}}], 0x1, 0x0) 00:19:50 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f0000000000)={'wlan1\x00'}) [ 1260.250022][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1260.250039][ T27] audit: type=1400 audit(1660522790.923:902): avc: denied { read } for pid=26903 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 00:19:50 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x28060, 0x0) 00:19:51 executing program 1: msgsnd(0x0, &(0x7f0000000180)={0x1}, 0x8, 0x0) [ 1260.304633][T26909] loop4: detected capacity change from 0 to 264192 00:19:51 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 00:19:51 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0xfffffffffffffffc, 0x0) 00:19:51 executing program 1: pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x7}, 0x0, 0x0) 00:19:51 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="11", 0x1}}, 0x0) 00:19:51 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x3110c2, 0x0) 00:19:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth1\x00'}}}}}, 0x30}}, 0x0) 00:19:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}], 0x10}, 0x0) 00:19:51 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000040)) 00:19:51 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x2, &(0x7f0000000040)) 00:19:51 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x25040, 0x0) 00:19:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0xd, 0x0, &(0x7f0000000100)) 00:19:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}}) 00:19:51 executing program 4: r0 = getpgrp(0x0) migrate_pages(r0, 0x2, 0x0, &(0x7f0000000040)=0x3) 00:19:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x17, 0x0, &(0x7f0000000100)) 00:19:51 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 00:19:51 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00'}) 00:19:52 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:52 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x20, 0x1, 0x2000) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x8, 0x0) 00:19:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 00:19:52 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x1e, &(0x7f00000002c0), 0x4) 00:19:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 00:19:52 executing program 2: syz_clone(0x50102100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 00:19:52 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f0000000000)={'wlan1\x00'}) 00:19:52 executing program 1: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f00000001c0)={0x27, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, '%[\x83\'&*.-#'}}, 0x27) 00:19:52 executing program 4: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)) setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='user.incfs.metadata\x00', &(0x7f0000000340)='romfs\x00', 0x6, 0x0) 00:19:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) 00:19:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="74756e6c30000000000000000000000050efa8e4fb6a16"]}) 00:19:52 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:19:53 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@end, @noop, @ssrr={0x89, 0xb, 0x0, [@multicast1, @rand_addr]}, @generic={0x0, 0x9, "e0347bdd195735"}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}, @ssrr={0x89, 0xb, 0x0, [@remote, @loopback]}]}}}}}) 00:19:53 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:19:53 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 00:19:53 executing program 1: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0xdf3}, &(0x7f0000000200), 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x7fffffffffffffff]}, 0x8}) 00:19:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e1"], 0x58}}, 0x0) 00:19:53 executing program 1: socket(0x3, 0x0, 0xffff) 00:19:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf}, 0x48) 00:19:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) 00:19:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f0000000000)={'wlan1\x00'}) [ 1262.376116][T26987] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:53 executing program 5: socketpair(0x22, 0x0, 0x101, &(0x7f00000005c0)) 00:19:53 executing program 2: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x181800) 00:19:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="9c1eefc030716f14d21ca19cdc20", 0xe}, {&(0x7f0000000140)="d0", 0x1}, {&(0x7f0000000200)="18", 0x1}], 0x3}}], 0x1, 0x0) 00:19:53 executing program 1: socketpair(0xa, 0x0, 0xc1e7, &(0x7f0000000080)) 00:19:53 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x114}], 0x10}, 0x0) 00:19:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') write$tcp_mem(r0, 0x0, 0x0) 00:19:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x81) 00:19:53 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f00000004c0)) 00:19:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x31, 0x0, &(0x7f0000000100)) 00:19:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan1\x00'}) 00:19:54 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x16f}, 0x0, &(0x7f0000000100)={0x0, r0/1000+10000}) 00:19:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 00:19:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f00000002c0)=""/244, 0x26, 0xf4, 0x1}, 0x20) 00:19:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=""/244, 0x0, 0xf4}, 0x20) 00:19:54 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) 00:19:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 00:19:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}) 00:19:54 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x88041, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x1e) 00:19:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) 00:19:54 executing program 0: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000480)) 00:19:54 executing program 5: r0 = msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x0) msgrcv(r0, 0x0, 0xffffffffffffff86, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x0) msgrcv(r2, &(0x7f0000000200)={0x0, ""/162}, 0xaa, 0x0, 0x3000) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x0) msgrcv(r3, &(0x7f0000000180)={0x0, ""/105}, 0x71, 0x2, 0x800) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_RMID(r4, 0x0) 00:19:54 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) 00:19:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8902, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 00:19:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x0, 0x0, @stepwise}) 00:19:54 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 00:19:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x420, 0xb, 0x148, 0x6, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x215, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x0, 0x3f8, 0x420, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x0, 0x25, 0x0, 0x0, 0x0, 0xffff, 0xffffff81}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0xfe03}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5ea) 00:19:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x6}) 00:19:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8981, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 00:19:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 00:19:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0xa, &(0x7f00000002c0), 0x4) [ 1263.870058][T27057] xt_NFQUEUE: number of total queues is 0 00:19:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, 0x0, 0x0) 00:19:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x10}], 0x20}, 0x0) 00:19:55 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00'}) 00:19:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 00:19:55 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x33, 0x36, 0x66, 0x62]}, &(0x7f0000000080)={0x0, "2090cfcceb5b7c7ee4841786bd65c062112558765327c7bf5ebf765e21541290ef346318b604300a07476855ffb9405b5330c292d0efde8b5fbd1eeb5271ed04"}, 0x48, 0xfffffffffffffffb) 00:19:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 00:19:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="fd", 0x1}], 0x1}}], 0x1, 0x0) 00:19:55 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65]}, &(0x7f0000000080)={0x0, "2090cfcceb5b7c7ee4841786bd65c062112558765327c7bf5ebf765e21541290ef346318b604300a07476855ffb9405b5330c292d0efde8b5fbd1eeb5271ed04"}, 0x48, 0xfffffffffffffffb) 00:19:55 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "d7df34783cccee29338ebf8ebe515eda804ba3eaafda4e291cb928e3d3c56c1cfa97eb5683eee96dd82ebe46fe241ce29dc837521e80b0328833ee150d517ebc"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) 00:19:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8982, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:55 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x28081, 0x0) 00:19:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x1a52d17c30c9588) 00:19:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0xb0}, r1}}, 0x30) 00:19:55 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x453, 0x0, 0x0, 0x0, '%'}, 0x14}}, 0x0) 00:19:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f0000000000)={'wlan1\x00'}) 00:19:55 executing program 1: syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000c40)={[{@statfs_quantum}, {@norgrplvb}, {@noloccookie}, {@data_writeback}, {@noacl}, {@loccookie}]}) 00:19:55 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x9, &(0x7f00000002c0), 0x4) 00:19:55 executing program 5: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{}, {@lockproto_dlm}]}) 00:19:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc058560f, &(0x7f0000000340)) 00:19:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, @stepwise}) 00:19:55 executing program 4: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[{&(0x7f0000001a80)="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", 0xfc0, 0x41}, {&(0x7f0000000500)="9c", 0x1}], 0x0, 0x0) 00:19:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={0xfffffffffffffffd, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 1264.735808][ T27] audit: type=1107 audit(1660522795.413:903): pid=27093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='%' [ 1264.775813][T27101] gfs2: not a GFS2 filesystem 00:19:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) [ 1264.851035][T27106] gfs2: not a GFS2 filesystem 00:19:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) 00:19:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "065a50c58911207b", "df1d480834164814b307d21f5692fb5c48eda3f63bba0af6393ff5ddfcbf9916", "70eb04b4", "509fc3cc7dcba6bb"}, 0x38) 00:19:55 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{}, "75b7f70c6041fd01", "40fbeabbcef04a0140932804f415db34", "790779a0", "3201acdd19466c4a"}, 0x28) 00:19:55 executing program 5: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x16f}, 0x0, 0x0) [ 1264.881950][T27112] loop4: detected capacity change from 0 to 8 [ 1264.897923][ T2972] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:19:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) [ 1264.926013][ T2972] Buffer I/O error on dev loop4, logical block 0, async page read [ 1264.954831][ T2972] Dev loop4: unable to read RDB block 8 00:19:55 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="60a0cca9ae3583de1de52ff8e8b4b8ba9afb39793d64898d5f1f65aef1a655b65083a78b17f700a91282c9e4959add19ee2003a800debd0bfd1e71275b84fa2aa8bdc7cc0865fb49bee17b8f8c156868819184d4e453702071cadf7e21ceef7267b0a394909c60b5001a3a610317218ac5b26d107ee03978270357e0e86534c6cdfdf202232e76f5867af5f6e5bbaacac4c357c63c32fca397", &(0x7f0000000140)=@tcp6}, 0xfed5) 00:19:55 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, 0x0) 00:19:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f00000012c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 00:19:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x21, 0x0, 0x0) 00:19:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x88041, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7}, 0x7) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x1e) [ 1264.972229][ T2972] loop4: unable to read partition table [ 1264.985101][ T2972] loop4: partition table beyond EOD, truncated 00:19:55 executing program 5: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0xdf3}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) 00:19:55 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0), 0x4) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 00:19:55 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_hci(r0, 0x11, 0x0, 0x0, 0x0) 00:19:55 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x10003, 0x0, 0x0) 00:19:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:19:55 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x30b100, 0x0) 00:19:55 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, 0x0) 00:19:55 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x44800, 0x0) 00:19:55 executing program 3: socketpair(0xa, 0x6, 0x6, &(0x7f00000000c0)) 00:19:55 executing program 0: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)) 00:19:55 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8981, &(0x7f0000000000)) 00:19:55 executing program 5: socketpair(0x10, 0x0, 0x0, &(0x7f0000000180)) 00:19:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 00:19:56 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a1, &(0x7f0000000000)) 00:19:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) 00:19:56 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 00:19:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f9cb0775"}, 0x0, 0x1, {0x0}}) 00:19:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) eventfd2(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x44) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000006c0)={[{0x0, 0x200, 0x9, 0x0, 0x6, 0x5, 0x0, 0x5, 0x5, 0x7f}, {0x0, 0xcf, 0x0, 0x9, 0x0, 0x0, 0x3f, 0x3, 0x0, 0x7f, 0x1f, 0x0, 0x4}, {0x5, 0x0, 0x18, 0x1f, 0x4, 0x0, 0xa1, 0x1f, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb}], 0x3}) 00:19:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x4) 00:19:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8980, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:56 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x16d820, 0x0) 00:19:56 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 00:19:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="800000080000008b0000020048"]}) 00:19:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4011) 00:19:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x0) 00:19:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000006c0)={[{0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x6, 0x5, 0x5, 0x0, 0x0, 0x5d, 0xffffffffffffffff}], 0x3}) 00:19:56 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 00:19:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x0, 0x0, 't'}, {0x10, 0x1}], 0x28}, 0x0) 00:19:56 executing program 4: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$qnx6(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) 00:19:56 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) syz_mount_image$qnx6(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) 00:19:56 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f00000001c0)) 00:19:56 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 00:19:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) 00:19:56 executing program 5: sendto$isdn(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 00:19:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}}], 0x1, 0x0) 00:19:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000009c0)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0}}], 0x1, 0x20000000) 00:19:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8940, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:56 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 00:19:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000100)={0x7ff, 0x0, 0xc35}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x20, 0x9}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"a639e37a0030f29e03c20cea35a26b76", 0x0, 0x0, {0x0, 0xfff}, {0x7fff}, 0x2, [0x0, 0x9, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x58cd, 0x3ff, 0x7, 0x5, 0x0, 0xffffffff, 0x1f]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) eventfd2(0x8000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/ubi', 0x0, 0x44) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000500)=""/157) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) 00:19:56 executing program 4: pselect6(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)={0x77359400}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x7fffffffffffffff]}, 0x8}) 00:19:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 00:19:56 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) 00:19:56 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:19:56 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) 00:19:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x7, 0x0, "b8bc5aea3f5e8e7fa1b6020926523564e321d0c061b1261ed008b370c4e9568579393889cb3a61b82635f331f8dea079a0ea8b8f36b04a86d255611b5021182553157a4af21c57103e02881c4b9eb1fa"}, 0xd8) 00:19:56 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 00:19:56 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) 00:19:56 executing program 2: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x12004, &(0x7f00000011c0)) 00:19:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x2, 0x9}) 00:19:56 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x12, &(0x7f00000002c0), 0x4) 00:19:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x0, 0x0, 0x0, 0x40}, 0x48) 00:19:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 00:19:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x6, &(0x7f0000000000)=0x2, 0x4) 00:19:57 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x1422, 0x0) 00:19:57 executing program 3: socket(0x25, 0x1, 0x5) 00:19:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x80, 0x0, {0x1, @sliced}}) 00:19:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) 00:19:57 executing program 5: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) 00:19:57 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/147, &(0x7f0000000100)=0x93) 00:19:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 00:19:57 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 00:19:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr]}, {0x0, [0x0, 0x0]}}, &(0x7f00000012c0)=""/4096, 0x10, 0x1000, 0x1}, 0x20) 00:19:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:19:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg0\x00'}) 00:19:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) write$binfmt_script(r0, 0x0, 0x0) 00:19:57 executing program 0: socketpair(0x18, 0x0, 0x9, &(0x7f0000000040)) 00:19:57 executing program 5: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@errors_withdraw}, {}]}) [ 1267.090677][T27266] sit0: mtu greater than device maximum 00:19:57 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@suiddir}]}) 00:19:57 executing program 1: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)={[{@nobarrier}]}) 00:19:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) 00:19:57 executing program 4: socket$inet_smc(0x2b, 0x300, 0x0) 00:19:57 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0) 00:19:57 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f0000000000)={'wlan1\x00'}) [ 1267.238985][T27283] gfs2: not a GFS2 filesystem [ 1267.250506][T27284] gfs2: not a GFS2 filesystem 00:19:57 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1, 0x7}, 0x80, 0x0}, 0x0) 00:19:57 executing program 5: mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 00:19:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0x10) 00:19:58 executing program 1: add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "4b754e5f1a88d4acd1db268b13e3416f7a64a268ec562c05b8707323dee88d87462ba47ec759bbf87ecbbc79cf9dc1e5b93d3195d91136aa44c32d4fee976053"}, 0x48, 0xfffffffffffffffd) 00:19:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 00:19:58 executing program 0: socketpair(0x1, 0x0, 0x20000, &(0x7f0000000300)) 00:19:58 executing program 5: msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/9) 00:19:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x0, 0x0, 0x9e, 0x0, 0x1}, 0x48) 00:19:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)) 00:19:58 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, &(0x7f0000000200)) 00:19:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) 00:19:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @raw_data="48c2482ab91211b7a841475bea97ff0d8e427e1593eaa2eab199fefdf885dc2eef0ed77faccb2adfb0c9a1505b84bccf6fe503b7e06a3d7f42158f680940e6e2df8d6e028841e1bab6de4f61aebbe3f0a610c2d2ff0c5df1b8edd4d8e3aa4e27460cd6a8e4d6a8ac69ceb89699d14286b6206a633d7661f08f9bd3a1ccc61c273f741c624f39808fe3d88369b2c162ad495c5f0d3cef446eecde4bdc6d733606037e78cb47204ed50b59e3f988113441bb70e1421d8774bfe4b4493fb7b95a2605fdce62942d9ddb"}}) 00:19:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:19:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:19:58 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 00:19:58 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x1, 0x418) msgctl$IPC_RMID(r1, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/223) 00:19:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f0000000000)={'wlan1\x00'}) 00:19:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01"], 0xec}}, 0x0) 00:19:58 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) 00:19:58 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) 00:19:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@xdp, 0x80, 0x0}, 0x0) 00:19:58 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, 0x0) 00:19:58 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) 00:19:58 executing program 0: syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)={[{@nobarrier}, {@acl}]}) 00:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) 00:19:58 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, 0x0) 00:19:58 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x40c0, &(0x7f0000000280), 0x10) 00:19:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:19:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}, r1}}, 0x30) 00:19:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0xc, &(0x7f00000002c0), 0x4) 00:19:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9752a51c"}}) 00:19:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f0000000000)={'wlan1\x00'}) 00:19:58 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x101, 0x4100) 00:19:58 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x54800, &(0x7f0000000340)) 00:19:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 00:19:58 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x18, &(0x7f00000002c0), 0x4) 00:19:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000100)={0x7ff, 0x1000, 0xc35, 0x0, 0x5}) write$tcp_mem(r2, &(0x7f0000000140)={0xffffffffffffffff, 0x20, 0x9, 0x20, 0x6}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000001c0)={"a639e37a0030f29e03c20cea35a26b76", 0x0, 0x0, {0x7ff, 0xfff}, {0x7fff, 0x40}, 0x2, [0x1, 0x9, 0x0, 0xfff, 0x7, 0x7, 0x0, 0x5, 0x58cd, 0x3ff, 0x7, 0x5, 0x8000000000000000, 0xffffffff, 0x1f, 0x206f]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) eventfd2(0x8000, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/ubi', 0x600100, 0x44) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000500)=""/157) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000005c0)={0xc1, 0x0, 0x1}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000640)={[{0x7, 0x0, 0x8, 0x3f, 0x9, 0x5, 0x4b, 0x1, 0x40, 0x9, 0x7f, 0x9, 0xc82c}, {0x4, 0x1, 0x4, 0x3, 0x1, 0x50, 0x8, 0x3f, 0x1, 0x3, 0x80, 0x0, 0x8}, {0xfffffffb, 0x6, 0xa7, 0x1, 0x4, 0x81, 0x20, 0xef, 0xfb, 0x2, 0xda, 0x34, 0x100000000}], 0x8}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000006c0)={[{0x9, 0x200, 0x9, 0x40, 0x6, 0x5, 0x6, 0x5, 0x5, 0x7f, 0x37, 0x5d, 0xffffffffffffffff}, {0x845f, 0xcf, 0x1f, 0x9, 0x1f, 0x7, 0x3f, 0x3, 0x0, 0x7f, 0x1f, 0x3, 0x4}, {0x5, 0x9, 0x18, 0x1f, 0x4, 0x0, 0xa1, 0x1f, 0x0, 0x81, 0x7, 0xff, 0xfffffffffffffffb}], 0x3}) 00:19:58 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0x24201, 0x0) 00:19:59 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) write$P9_RFSYNC(r0, 0x0, 0x0) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 00:19:59 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, "dc2b41b631a416682cc7303448a35ed5946fabc79da08d5865dadf5aaea7f854779134a38f7c019533487657c4a94267a4a400f0dc94a30786724e588396a671a7f9f2b0f72090e88e08830e27db2be9"}, 0xd8) 00:19:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cec8562a"}, 0x0, 0x3, {0x0}}) 00:19:59 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 00:19:59 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) socketpair(0xf, 0x0, 0x0, &(0x7f00000012c0)) 00:19:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x5421, &(0x7f0000000340)) 00:19:59 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) 00:19:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10}], 0x10}, 0x0) 00:19:59 executing program 0: socketpair(0x22, 0x0, 0x0, &(0x7f00000005c0)) 00:19:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f0000000000)={'wlan1\x00'}) 00:19:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 00:19:59 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) 00:19:59 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) 00:19:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) 00:19:59 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 00:19:59 executing program 3: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 00:19:59 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x33, 0x36, 0x66, 0x62, 0x64, 0x30]}, &(0x7f0000000080)={0x0, "2090cfcceb5b7c7ee4841786bd65c062112558765327c7bf5ebf765e21541290ef346318b604300a07476855ffb9405b5330c292d0efde8b5fbd1eeb5271ed04"}, 0x48, 0xfffffffffffffffb) 00:19:59 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 00:19:59 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "4b754e5f1a88d4acd1db268b13e3416f7a64a268ec562c05b8707323dee88d87462ba47ec759bbf87ecbbc79cf9dc1e5b93d3195d91136aa44c32d4fee976053"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='^)y.\x86(-$-$\'*:\x00', r0) 00:19:59 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 00:19:59 executing program 3: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000001c0)=""/243) 00:19:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f0000000000)={'wlan1\x00'}) 00:19:59 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x20, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x8, 0x0) 00:19:59 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 00:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 00:20:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:20:00 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) 00:20:00 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0xd, 0x0, 0x0) 00:20:00 executing program 1: socketpair(0x14, 0x0, 0x0, &(0x7f0000000940)) 00:20:00 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f0000000000)={'wlan1\x00'}) 00:20:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 00:20:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x18}, 0x0) 00:20:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 00:20:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@errors_withdraw}, {@quota}, {}, {@lockproto_dlm}, {@quota_off}, {@localflocks}], [{@subj_role={'subj_role', 0x3d, '^{:[}$#)\'%-'}}]}) [ 1269.527162][ T27] audit: type=1400 audit(1660522800.203:904): avc: denied { create } for pid=27424 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 00:20:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0xab, &(0x7f0000000200)=[{&(0x7f0000000080)="0d8975c1e3f021d0b9398769aaf7080d11f4e6f6b4da1d771203e9adfcaa1f4bed590a47fe7ad63c2a05c8e0d483190a949103b77e6c7692c29bdf1dd9b01d81e193b245bc7847eeb7c4e22c68c6d1", 0x4f}, {&(0x7f0000000400)="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", 0x11a}], 0x2}, 0x20008001) 00:20:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x18}, 0x0) 00:20:00 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000000)={'wlan1\x00'}) 00:20:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) 00:20:00 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) 00:20:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:20:00 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:20:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x18}, 0x0) [ 1269.742101][T27435] can: request_module (can-proto-0) failed. [ 1269.767306][T27451] wlan1: mtu less than device minimum 00:20:00 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 00:20:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 00:20:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1269.818849][ T27] audit: type=1400 audit(1660522800.493:905): avc: denied { accept } for pid=27453 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 00:20:00 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000c09a00001c95"]) 00:20:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}], 0x18}, 0x0) 00:20:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8915, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:20:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 00:20:00 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) 00:20:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x100}}, 0x10) 00:20:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) 00:20:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'veth1\x00'}}}}}, 0x30}}, 0x0) 00:20:00 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x14, 0x0, &(0x7f0000000100)) 00:20:00 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e1, &(0x7f0000000000)) 00:20:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:20:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd}, 0x48) 00:20:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) 00:20:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)) 00:20:00 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 00:20:00 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) 00:20:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f0000000000)={'wlan1\x00'}) 00:20:00 executing program 4: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3184000, &(0x7f0000001680)) 00:20:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x26, 0x0, 0x0, @stepwise}) 00:20:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) 00:20:00 executing program 1: dup(0xffffffffffffffff) socket(0x25, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) geteuid() socketpair(0x0, 0x0, 0x0, &(0x7f00000012c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/bcm203x', 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) 00:20:01 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 00:20:01 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0189436, &(0x7f0000000000)) 00:20:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x10, 0x1}], 0x20}, 0x0) 00:20:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:20:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10}, {0x10, 0x84}], 0x20}, 0x0) 00:20:01 executing program 3: modify_ldt$write(0x1, &(0x7f0000000000)={0xeb34}, 0x10) 00:20:01 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xc701, 0x0) 00:20:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@ra={0x94, 0x4}]}}}}}) 00:20:01 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x801) 00:20:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$proc_mixer(r1, 0x0, 0x0) socketpair(0x1d, 0x2, 0x1, &(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_hci(r2, 0x88, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='wg0\x00') 00:20:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:20:01 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "a9446ead911795fd16a7e9d859be14ebfce2e35b9a48b303d1c699e364feaf9e1eadf9d264648214daaaa4ca39bca6048cd6ccc216b798c3f10273a25442aff9"}, 0x48, 0xfffffffffffffffc) 00:20:01 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 00:20:01 executing program 0: syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@dmask={'dmask', 0x3d, 0xfffffffffffffffb}}, {@case_sensitive_yes}]}) 00:20:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000c09a00001c"]) 00:20:01 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r0, &(0x7f0000001840)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x0) 00:20:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}) 00:20:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1}) 00:20:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x20303159, 0x0, @stepwise}) 00:20:01 executing program 3: syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000180)) 00:20:01 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'tunl0\x00', 0x0}) 00:20:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:20:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private}}}}) 00:20:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:20:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000112, r0, 0x0) 00:20:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {}, 0x40}) 00:20:01 executing program 0: socketpair(0x25, 0x1, 0x8, &(0x7f0000000140)) 00:20:01 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0) 00:20:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x11, 0x0, 0x0, 0x0) 00:20:02 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000013c0)=[{}], 0x1}, 0x0) 00:20:02 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000040)) 00:20:02 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x6, &(0x7f00000002c0), 0x4) 00:20:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}], 0x20000150}, 0x0) 00:20:02 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)=ANY=[], 0xd9, 0x1, 0x0) 00:20:02 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/user\x00') read$FUSE(r0, 0x0, 0x0) 00:20:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000c40)={[{@statfs_quantum}, {@norgrplvb}, {@noloccookie}, {@data_writeback}, {@loccookie}]}) 00:20:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) 00:20:02 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x90742, 0x0) 00:20:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) 00:20:02 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x1, 0x0) 00:20:02 executing program 3: syz_open_dev$video4linux(&(0x7f0000000200), 0x7f, 0x0) 00:20:02 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00'}) 00:20:02 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 00:20:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}) 00:20:02 executing program 4: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa400, &(0x7f0000000280)) 00:20:02 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8068, &(0x7f00000010c0)) 00:20:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045667, 0x0) 00:20:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 00:20:02 executing program 2: sigaltstack(&(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)={0x0}) 00:20:02 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000100)={0x0}}, 0x0) 00:20:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, &(0x7f0000000000)={'wlan1\x00'}) 00:20:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0xffe0}}}, 0x24}}, 0x0) 00:20:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @dev}}}}) 00:20:02 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'wlan1\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) 00:20:02 executing program 2: syz_mount_image$ntfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='errors=recover,show_sys_files=yes,dmask=00000000000000000073744,mft_zone_multiplier=0']) 00:20:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) [ 1271.717099][T27621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:02 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0xd9, 0x0, 0x0) 00:20:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) [ 1271.810015][T27629] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 00:20:02 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000a80)={&(0x7f0000000a40), 0x8}) [ 1271.882287][T27629] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1271.895264][T27621] device bond1 entered promiscuous mode 00:20:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000200)={'sit0\x00', 0x0}) 00:20:02 executing program 4: syz_open_dev$media(&(0x7f0000000440), 0x3, 0x0) [ 1271.937470][T27621] 8021q: adding VLAN 0 to HW filter on device bond1 00:20:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[], 0x308}, 0x0) 00:20:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 00:20:02 executing program 3: fanotify_mark(0xffffffffffffffff, 0x41, 0x40000020, 0xffffffffffffffff, 0x0) 00:20:02 executing program 5: syz_mount_image$gfs2(&(0x7f0000000640), &(0x7f0000000680)='./file1\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@errors_withdraw}, {@quota}, {}, {@lockproto_dlm}, {@quota_off}, {@localflocks}, {@meta}], [{@subj_role={'subj_role', 0x3d, '^{:[}$#)\'%-'}}]}) 00:20:02 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x7, &(0x7f00000002c0), 0x4) 00:20:02 executing program 2: mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 00:20:02 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 00:20:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000340)) 00:20:02 executing program 3: geteuid() syz_mount_image$sysv(&(0x7f0000000380), &(0x7f00000003c0)='./file2\x00', 0x0, 0x0, 0x0, 0x843006, &(0x7f0000000900)) [ 1272.120434][T27650] gfs2: Unknown parameter 'subj_role' 00:20:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000006c0)) 00:20:03 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:20:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8}, 0x10) 00:20:03 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000012c0)) 00:20:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 00:20:03 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001700)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={0x0}}, 0x0) 00:20:03 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5421, &(0x7f0000000000)) 00:20:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x0, 0x0, 0x3436abe7}, 0x48) 00:20:03 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010100)}, {&(0x7f0000010e00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010f00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011000)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011400)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011500)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011c00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000011d00)="d73cd47aae8bfed7", 0x8, 0x5ff000}, {&(0x7f0000011e00)="0000000000000000fe", 0x9, 0x5ff040}, {0x0, 0x0, 0xc00000}], 0x0, &(0x7f0000014b00)) 00:20:03 executing program 2: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:20:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @dev}}}, 0x88) 00:20:03 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000020000004d24d30d9d7f4ff8a820", 0x76, 0x400}, {&(0x7f0000010100)}, {&(0x7f0000010e00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010f00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000011000)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011400)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011500)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011c00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000011d00)="d73cd47aae8bfed7", 0x8, 0x5ff000}, {&(0x7f0000011e00)="0000000000000000fe", 0x9, 0x5ff040}, {&(0x7f0000013000)="00000000000000000000010000000100", 0x10, 0xc00000}], 0x0, &(0x7f0000014b00)) 00:20:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0xf, r0) 00:20:03 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:20:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f000000d440)={0x2020}, 0x2020) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x200002e6) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 00:20:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f000000d440)={0x2020}, 0x2020) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[], 0x200002e6) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) gettid() [ 1273.072562][T27688] loop4: detected capacity change from 0 to 49152 [ 1273.083086][T27688] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1273.091098][T27688] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1273.106560][T27688] F2FS-fs (loop4): invalid crc_offset: 0 00:20:03 executing program 3: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb}, @ss_cap={0xa}]}}) 00:20:03 executing program 0: syz_open_dev$sndmidi(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600540100e030a86df875f2e3ff5f163ee340b7679500800000000000000101878918f5b84dd7175027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendfile(r4, r3, 0x0, 0x4000000000000081) [ 1273.248220][T27688] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1273.276092][ T3700] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1273.314921][T27688] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1273.383721][T27688] F2FS-fs (loop4): Failed to read root inode [ 1275.078469][T27705] sched: RT throttling activated 00:20:06 executing program 1: syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, 'K'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x0, 0x1, 0x5, "", "c022"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xc7, 0x8}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x1, 0x4, 0x1, 0xff}, 0x25, &(0x7f0000000180)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7e, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x4}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x0, 0x0}]}) 00:20:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600540100e030a86df875f2e3ff5f163ee340b7679500800000000000000101878918f5b84dd7175027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendfile(r3, r2, 0x0, 0x4000000000000081) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:20:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1275.355893][ T3700] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1275.370352][ T3700] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1275.440929][ T3700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1275.615645][ T3700] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1275.633548][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.651852][ T3700] usb 3-1: Product: syz [ 1275.659667][ T3700] usb 3-1: Manufacturer: syz [ 1275.672580][ T3700] usb 3-1: SerialNumber: syz [ 1275.728535][ T144] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1276.005806][ T3700] usb 3-1: 0:2 : does not exist [ 1276.049889][ T3700] usb 3-1: USB disconnect, device number 60 [ 1276.095610][ T144] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.120961][ T144] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 00:20:07 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 00:20:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x11, &(0x7f0000000180)={@mcast1}, 0x14) 00:20:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xf99d3de2226af23e}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x840) [ 1276.375705][ T144] usb 2-1: string descriptor 0 read error: -22 [ 1276.385336][ T144] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.406030][ T144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:20:07 executing program 0: syz_mount_image$nfs4(&(0x7f0000001700), 0x0, 0x0, 0x1, &(0x7f0000001b80)=[{&(0x7f0000001780)='&', 0x1}], 0x0, &(0x7f0000001c40)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 00:20:07 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) [ 1276.477805][ T144] usb 2-1: 0:2 : does not exist 00:20:07 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x101}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) 00:20:07 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x8, &(0x7f00000004c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 00:20:07 executing program 2: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x0, 0x79}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x80, 0x101}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x2, &(0x7f0000000180)=@string={0x2}}]}) [ 1276.673298][ T144] usb 2-1: USB disconnect, device number 77 [ 1276.845590][T23997] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1276.965610][ T3700] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1277.115642][T23997] usb 6-1: Using ep0 maxpacket: 32 00:20:07 executing program 1: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f00000015c0)={[{@umask}, {@errors_continue}]}) 00:20:07 executing program 4: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:20:07 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) [ 1277.205609][ T3700] usb 3-1: Using ep0 maxpacket: 8 [ 1277.233185][T27739] exFAT-fs (loop1): invalid boot record signature [ 1277.240101][T27739] exFAT-fs (loop1): failed to read boot sector [ 1277.247420][T27739] exFAT-fs (loop1): failed to recognize exfat type 00:20:08 executing program 1: mknod$loop(&(0x7f0000000180)='./file1\x00', 0x6000, 0x0) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0xffffffffffffffff) [ 1277.335865][ T3700] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1277.336132][T23997] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1277.351331][ T3700] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 00:20:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1277.373183][ T27] audit: type=1400 audit(1660522808.053:906): avc: denied { setattr } for pid=27740 comm="syz-executor.1" name="file1" dev="sda1" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 1277.379728][ T3700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 00:20:08 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) [ 1277.515774][T20681] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1277.565904][ T3700] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.574980][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.583631][ T3700] usb 3-1: Product: syz [ 1277.588093][ T3700] usb 3-1: SerialNumber: syz [ 1277.641689][T23997] usb 6-1: string descriptor 0 read error: -22 [ 1277.649041][T23997] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.658873][T23997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:20:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0xf}, 0x14}}, 0x0) 00:20:08 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x8, &(0x7f00000004c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xa}]}, 0x1, [{0x0, 0x0}]}) [ 1277.706709][T23997] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1277.745587][T23996] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1277.775985][T20681] usb 5-1: Using ep0 maxpacket: 8 [ 1277.910543][T20681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.915866][ T3700] usb 3-1: 0:2 : does not exist [ 1277.921331][T20681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1277.934965][T20681] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1277.947537][T23997] usb 6-1: USB disconnect, device number 85 [ 1277.985326][ T3700] usb 3-1: USB disconnect, device number 61 [ 1278.025863][T23996] usb 2-1: Using ep0 maxpacket: 8 [ 1278.125841][T20681] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.135081][T20681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.143445][T20681] usb 5-1: Product: syz [ 1278.147964][T23996] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1278.156805][T20681] usb 5-1: Manufacturer: syz [ 1278.161488][T23996] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1278.172539][T20681] usb 5-1: SerialNumber: syz [ 1278.180903][T23996] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1278.355629][T23996] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.372008][T23996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.383026][T23996] usb 2-1: Product: syz [ 1278.387455][T23996] usb 2-1: SerialNumber: syz 00:20:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x3, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000200)=""/219}, 0x20) 00:20:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x3, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)="8c3edba6f36fce1412", &(0x7f0000001440), 0x6, r0}, 0x38) [ 1278.485849][T20681] usb 5-1: 0:2 : does not exist [ 1278.504332][T20681] usb 5-1: USB disconnect, device number 18 [ 1278.725755][T23996] usb 2-1: 0:2 : does not exist [ 1278.752270][T23996] usb 2-1: USB disconnect, device number 78 00:20:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000000c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:10 executing program 2: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 00:20:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000080)=r5, 0x4) 00:20:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0xa4}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001840)={&(0x7f00000005c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000600)="97", 0x1}], 0x1, &(0x7f0000001780)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}], 0x1c}, 0x0) 00:20:10 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:20:10 executing program 1: r0 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r0, 0x0, 0x10, 0x0) 00:20:10 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x12}}}}}]}}]}}, 0x0) 00:20:10 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x438, 0x39}}, [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}}]}}]}}, 0x0) 00:20:10 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x39]}, &(0x7f0000000080)={0x0, "042bf637f48e2320ec752a8f6e6cffcf19f0f1f5925bf2258ccd0501327f80efb4cecae37d89f08cd805082bf6adf33d16cb58401490d2861567a2fbcf6059bd"}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 00:20:10 executing program 0: socket$inet(0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) 00:20:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000020c0)={0x1c, ""/28}) 00:20:10 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, 0x0) 00:20:10 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x1, 0x0, 0x7}, 0x20) [ 1279.863664][T27782] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. 00:20:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000000c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:10 executing program 0: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="cefaad1b01100000ff7f", 0xa}, {&(0x7f0000010100)="0200000007000000080000001f1e000002", 0x11, 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 00:20:10 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) fcntl$lock(r1, 0x8, 0x0) [ 1279.910868][T27782] CIFS mount error: No usable UNC path provided in device string! [ 1279.910868][T27782] [ 1279.934277][T27782] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1280.046609][T20681] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1280.054480][T23996] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1280.295560][T20681] usb 2-1: Using ep0 maxpacket: 32 [ 1280.355626][T23996] usb 3-1: Using ep0 maxpacket: 32 [ 1280.425811][T20681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1280.435654][T20681] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 00:20:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0xa4}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) 00:20:11 executing program 3: socketpair(0x27, 0x0, 0x0, &(0x7f00000000c0)) [ 1280.505904][T23996] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1280.625693][T20681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1280.636142][T20681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.644233][T20681] usb 2-1: Product: syz [ 1280.648811][T20681] usb 2-1: Manufacturer: syz [ 1280.653502][T20681] usb 2-1: SerialNumber: syz [ 1280.695722][T23996] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1280.704776][T23996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.713876][T23996] usb 3-1: Product: syz [ 1280.718201][T23996] usb 3-1: Manufacturer: syz [ 1280.722805][T23996] usb 3-1: SerialNumber: syz [ 1280.745877][T27771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1280.753131][T27771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1280.898291][T27772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.906938][T27772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.928097][T20681] usblp 2-1:1.0: usblp2: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1280.941652][T20681] usb 2-1: USB disconnect, device number 79 [ 1280.950384][T20681] usblp2: removed [ 1280.972363][ T144] usb 3-1: USB disconnect, device number 62 00:20:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180), 0x10}, 0x80) 00:20:12 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) 00:20:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x5}) 00:20:12 executing program 5: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="cefaad1b01100000ff7f", 0xa}, {&(0x7f0000010100), 0x0, 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) 00:20:12 executing program 3: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="cefaad1b01100000ff7f", 0xa}], 0x0, &(0x7f0000000140)=ANY=[]) 00:20:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x1f}]}) 00:20:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x3, 0x4}, 0x10}, 0x80) 00:20:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) 00:20:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002140)={0xfffffff7}, 0x4) 00:20:12 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040), 0x4) [ 1281.522245][T27807] loop5: detected capacity change from 0 to 2 [ 1281.568633][T27807] Dev loop5: unable to read RDB block 2 [ 1281.574333][T27807] loop5: unable to read partition table 00:20:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client1\x00', 0x0, "cea019559ec2ca70", "093148ccc1888a7384d679ea56eb38a7cf0d57055281d6287d5e85b15d708afd"}) [ 1281.609060][T27807] loop5: partition table beyond EOD, truncated 00:20:12 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x15, r0) 00:20:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0x8, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000002140)={0xfffffff7}, 0x4) 00:20:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1281.659993][T27807] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1281.704382][T27807] BFS-fs: bfs_fill_super(): Last block not available on loop5: 63 00:20:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, &(0x7f0000001200)=""/136, 0x26, 0x88, 0x1}, 0x20) 00:20:12 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) 00:20:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:12 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) 00:20:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_OFF(r0, 0x7002) 00:20:12 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000006c0)) 00:20:12 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 00:20:12 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x11}, 0x10) 00:20:12 executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "c883eb2b40ce8f172001096477752ade2104f493ba00bd161e7e5624253e10569393022e6172bc26749a5ab1da19de6d800d1f3f2d4e87f03cdb03f41a712290"}}}}, 0x0) 00:20:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:20:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:20:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)=ANY=[]}) 00:20:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 00:20:12 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{}, 'port0\x00'}) 00:20:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0xb1b, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 00:20:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) 00:20:12 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x7, 0x1, 0x1, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x0, 0x66}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x2c, &(0x7f0000000080)={0x5, 0xf, 0x2c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x20, 0x4, 0x4, 0x0, 0xffe0, [0xcf, 0xff30, 0x3f, 0x18]}]}, 0x3, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x88, &(0x7f00000003c0)=@string={0x88, 0x3, "685f0c866ebb5a46ff74dd704c673acd9d8546632ed23fe868ed184f3809ba0a41f303b02a3ca57c05dd4bc5721dbbf58ab2ae355278806cf562372255b11e819dffe39de1bdd555e92762a32bf9ee3ed1293b608da03ddec242d02fbc6fb84e5660b08258b405b154eebf70b05157f80bcf31c44b018a46003d5bd28839e3a02313c4704945"}}, {0x90, &(0x7f0000000240)=@string={0x90, 0x3, "28736dce0c8a5630566f80d422d7755a393cd51c62eca9ae94c27a542426e1cbd4fd7271da3189f98bff6994e35f2b61ac0177b249c5cf2dfe140323f38732fdcef6d010d562eb3aa4046476c686f8cb922718e9d072936b35fecb49da3f150fa7fea622736b75807d048d6d96e63735c08f3bf1ea45a36bdf3124205fd8b753b11d77e29b4789701c0c3ff18683"}}]}) 00:20:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 1282.125736][T12807] usb 1-1: Failed to early initialize device [ 1282.149201][T12807] usb 1-1: USB disconnect, device number 13 00:20:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 00:20:12 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000001700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}, {@default_permissions}], [{@dont_measure}]}}) 00:20:12 executing program 4: r0 = semget(0x3, 0x0, 0x2) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/5) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000180)=""/118) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000200)=""/98) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000340)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:20:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x200400, &(0x7f0000001480)={[{@hide}, {}]}) 00:20:12 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, r1+10000000}}, 0x0) 00:20:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}}, &(0x7f0000000200)=""/176, 0x36, 0xb0, 0x1}, 0x20) [ 1282.285924][T27872] fuseblk: Bad value for 'fd' 00:20:13 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:20:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x3740, 0x0, 0x1}, 0x48) 00:20:13 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x105002, 0x0) 00:20:13 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x599603, 0x0) [ 1282.439176][ T27] audit: type=1400 audit(1660522813.117:907): avc: denied { write } for pid=27885 comm="syz-executor.5" name="nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1282.495745][ T144] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1282.735614][ T144] usb 2-1: Using ep0 maxpacket: 32 [ 1282.856203][ T144] usb 2-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1282.869248][ T144] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1282.915844][ T144] usb 2-1: language id specifier not provided by device, defaulting to English [ 1283.035799][ T144] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1283.044892][ T144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.053444][ T144] usb 2-1: Product: 猨칭訌ざ潖풀휢婵㰹᳕꺩슔呺☤쯡﷔煲㇚黎ﾋ鑩忣愫Ƭ뉷앉⷏ᓾ⌃蟳ﴲა拕㫫Ҥ癤蛆쯸➒狐殓︵䧋㿚༕ﺧ⊦歳聵ѽ涍㔷迀䗪殣㇟․厷ᶱ䞛炉జ莆 [ 1283.075860][ T144] usb 2-1: Manufacturer: 彨蘌뭮䙚瓿烝杌촺薝捆툮优स઺뀃㰪粥앋ᵲ늊㖮硒沀拵∷녕脞ﾝ鷣뷡嗕⟩ꍢ狼㻮⧑总ꂍ䋂⿐澼亸恖芰둘넅炿冰켋쐱ŋ䚊㴀퉛㦈ꃣጣ烄䕉 [ 1283.097831][ T144] usb 2-1: SerialNumber: syz [ 1283.125852][T27866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1283.133076][T27866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1283.428888][ T144] usb 2-1: USB disconnect, device number 80 00:20:14 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000940), 0x90040, 0x0) 00:20:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/176, 0x26, 0xb0, 0x1}, 0x20) 00:20:14 executing program 0: socket(0x1, 0x0, 0xb3d9) 00:20:14 executing program 4: mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)) 00:20:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000200)=""/176, 0x26, 0xb0, 0x1}, 0x20) 00:20:14 executing program 3: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, r1+60000000}}, 0x0) 00:20:14 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 00:20:14 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040), 0x0) 00:20:14 executing program 2: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000004140), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 00:20:14 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 00:20:14 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 00:20:14 executing program 1: rt_sigaction(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) 00:20:14 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0x9, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/7, 0x7}, {&(0x7f0000002500)=""/189, 0xbd}], 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 00:20:14 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x700) 00:20:14 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000009c0)="aa") 00:20:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:20:14 executing program 2: rt_sigaction(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) 00:20:14 executing program 0: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:20:14 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), 0xffffffffffffffff) 00:20:14 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 00:20:14 executing program 3: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0xffffff5f) 00:20:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, &(0x7f0000000200)=""/176, 0x36, 0xb0, 0x1}, 0x20) 00:20:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x120, 0x358, 0xffffffff, 0x220, 0x220, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private1, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'pimreg1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'batadv_slave_1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@private0, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@ipv4, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 00:20:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x0, 0x1}, 0x48) 00:20:18 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 00:20:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/176, 0x1a, 0xb0, 0x1}, 0x20) 00:20:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0xc}, {}, {0xb, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000200)=""/176, 0x4b, 0xb0, 0x1}, 0x20) 00:20:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)) 00:20:18 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 00:20:18 executing program 3: semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x3, 0x0, 0x2) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/5) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000080)=""/236) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000180)=""/118) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000200)=""/98) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000280)=""/153) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000340)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000380)={0x3, 0x0, [{0x5, 0x0, 0x0, 0x0, @msi={0x1, 0x6, 0x9, 0x315}}, {0x5, 0x0, 0x0, 0x0, @irqchip={0x36, 0x5}}, {0x1, 0x1, 0x0, 0x0, @adapter={0x3f, 0x80000000, 0x7fffffffffffffff, 0x7e1, 0x5}}]}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000440)=[{0x2, 0x2}, {0x3, 0xff}], 0x2, &(0x7f00000004c0)={r2, r3+10000000}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000500)) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r4, &(0x7f0000000580)) r5 = semget$private(0x0, 0x3, 0x200) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f00000005c0)=""/45) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/101) 00:20:18 executing program 4: openat$nvram(0xffffffffffffff9c, 0x0, 0x450400, 0x0) 00:20:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) 00:20:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1}, 0x24}}, 0x0) 00:20:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x7fff, 0x1}, 0x48) 00:20:18 executing program 3: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:20:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="b1e728d4bbbb20b7088f4d142c8b694c", 0x10) 00:20:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x12c, [{0x0, 0x3, 0x9}, {0x0, 0x4}]}]}}, &(0x7f0000000200)=""/176, 0x3e, 0xb0, 0x1}, 0x20) 00:20:21 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) 00:20:21 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 00:20:21 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x884) 00:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x40, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}]}, 0x40}}, 0x0) 00:20:21 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0) 00:20:21 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) 00:20:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef0b25b32bd77d1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="620af8ff0c738d21bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c8577da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09eaf2ad0000000000000000700000068972089b302d7bf6023cdcedb5e0125ebbc08dee500cb2364149215108333719acd97cfa107d40224edc5b75a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955391c4ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a07009da17a0faf60fd6ad9b97aa5fa28480366c9c6fd6fa5043aa39295c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b03f3d000090b3433b809bdb9f873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c71cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffff1edffae72c80cda2589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959ef060000004d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0ba7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3336b57acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf2df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c9ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e33409e2a3bce109b60000000000000000d6d5210dddb2eb92d6a97a27602b97f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb490000e30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3b932c6c8649209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12b43c3431cb97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751a17d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8c71d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea2e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0da8b075225fde44c4e0973171ad47d6b70ebc670309e1e245b0fdf9030000000000000047613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86969cdbbb6d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a2f463db88d377442e134cacaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2010066411bef0ebb5000000000006065d6735eb7a00e127cee29d6cdff8dce1f06770c8714cc9c25859648776fe574b4e7fef6d7a8f11888b46e0adb62bfeacb4092e0ffb8c9df04476ddd4f5fce6e89258bbbabf8d03a2101a86d05848f0267f232aa40b77efa4d1ccc1bf7f44923f652cd8d9e350264b9e9940000c496d52d2570c5ceb0d71627dc703d869fe464a8f6b8b264f2ef344ccd68d6720e5df2613517f8ee016558c0d321012e6cb59e5e92b22a8602b2b221ca256aeba64724c86c915f82f219819977818af4f26fbcac62d952baf4ea23945852ffcafed175381e98452e9f49b29fb9bf701bade61d0000000000000000000000000000000000000000000000000000000022da58c7f86f0559885e66952129653b9a84b64b67b02a2c55119d3a4d7f8c1e504bc39591b3130aeb2300000000000000000000000000000000000085ccab87bfdc51868b2b1cae3fd081aa1fc95686150f340af1fc6bca7a924fe4866a636be14f2e000ceda5304062c1d906c04ca1c822fa1a2ec4c3ec900de9ed13d0167862cfac9f93dd481217299a9b868b2f1976780d31110a0abbf56e1b8fed4ca90898d234c2453a594e7bf630e4bb4055c3949888e129c2cc426f7b783e7230e7c4c5672021f3b1854875b63dcf322b82cd72f442129b9cfedd00000000000000000000000000000000000000000000000000000056d79e4076f13a4b40beb32f579d9cc81a7e57ea5231a21986c4a0f0a62fbd3e1063"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffecb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 00:20:21 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) 00:20:22 executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000005c0)=""/45) 00:20:22 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x7) 00:20:22 executing program 1: mq_open(&(0x7f0000000200)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 00:20:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x3008008, &(0x7f0000000300)={[{@sbsector}]}) 00:20:22 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 00:20:22 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000001700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x11, 0x0) 00:20:22 executing program 1: clock_gettime(0x0, &(0x7f0000000480)) 00:20:22 executing program 5: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000180)=""/118) clock_gettime(0x0, &(0x7f0000000480)) 00:20:22 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000004140), 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 00:20:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) 00:20:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x3, &(0x7f0000000000)=@raw=[@jmp, @cb_func], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1291.533751][T28003] /dev/loop0: Can't open blockdev 00:20:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000200)=""/176, 0x3a, 0xb0, 0x1}, 0x20) 00:20:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000200)=""/176, 0x2e, 0xb0, 0x1}, 0x20) 00:20:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000180)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0xcc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{&)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x287e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeae}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8583}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb7d, 0x5, "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"}]}]}, 0xd04}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840d0) 00:20:22 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x70000041) 00:20:22 executing program 0: rt_sigaction(0x28, &(0x7f0000000200)={&(0x7f0000000140)="46c700f0b38decf2450fe6a127480d43460f0e0f8701000000360f455621c422f925a439381dfffff30fc7fcc4a2452d715cc4017ff0ae000810ffc4415df58be270154b", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) 00:20:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xaf, 0x7, &(0x7f0000001380)=[{&(0x7f0000000080)="35824d32eeeef974f1227be13fe17263b57fd92d3f4dcd3297c36d3daed5263bb76ce64a80ebf1543655d39013c71ca003857c73c9f3b973f788b88b9158759ce123e4f85d45e843856ed39e0cea8ae4e1c67e47930dcba17335208f1c9b0a7a29c4dae819b389795c226a5f4d09a6257057532f76ef0679f9b4ca0a917c3c9b12eb2b3dd296016928ca2a6a813ee9c964460f4baec7f2a937f3", 0x9a, 0x5}, {&(0x7f0000000140)="4bbe367464805db66f56556823ce171e4cd83171d0db05a1cc20b2762b8f04a04a51176befdf8b7fec22a426358d3ae97892560a832b5f97e59e99285ef33e79d7d0662a40e96793277a8fdcd97b76737d1b2306fd680ce0c869a34ba2a4af3d522c9367b18e81924e0f4a833fdae4089581b2c2951e5a11dd0207d22ea923924efc28b199ebd8e5c49fbe3e7b", 0x8d, 0x1}, {&(0x7f0000000200)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000001200)="f4b3ec29d7af7611c7e3c8bc9b1a42674ae880dcdbf37f8313bd9eed074a7d43d20b593bc663b5ab0975c8f81a7f2ccfbb4ad6c7b3bf4cb78d02583afa817af34d5b1bf08befe104165e", 0x4a, 0x1}, {&(0x7f0000001280)="4922601ce01c457cf72136285fa3c230d05b55052fb4965bc3fee2f0d22489b5381bbbfe22d584cd727bbf38feccbcd45d62966115dcbb8fff", 0x39, 0x80}, {&(0x7f00000012c0)="585fc15074ba4fc8821b6272331d3c743a8a2545f3684c24255afde54b0457f747b5928df62b1e59a32a99251f594c", 0x2f, 0x100000001}, {&(0x7f0000001300)="045b97932ebd72e99fd4d0931b7235ac037c09e577d5c275dd986f321cb32992ef6bd352ff87594f838c5bfa3e7f3e9ec9f507bfb47e84428f3386028a17cae097c6ba13e63092d1b5", 0x49, 0x2}], 0x40000, &(0x7f0000001440)={[{@fat=@flush}, {@dots}, {@fat=@quiet}, {@dots}, {@dots}], [{@obj_type}, {@subj_user={'subj_user', 0x3d, '*,+/}&&.\x00'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '^\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x30, 0x30, 0x0, 0x32, 0x37, 0x34], 0x2d, [0x0, 0x30, 0x37, 0x30], 0x2d, [0x66, 0x62, 0x66, 0x35], 0x2d, [0x31, 0x63, 0x31, 0x38], 0x2d, [0x30, 0x38, 0x33, 0x36, 0x30, 0x37, 0x36, 0x31]}}}]}) setxattr$trusted_overlay_opaque(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), &(0x7f0000001540), 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000001580)=@can={0x1d, 0x0}, &(0x7f0000001600)=0x80) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001640)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) chmod(&(0x7f0000001680)='./file0\x00', 0xa0) r1 = getuid() syz_mount_image$msdos(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x3f, 0x9, &(0x7f0000002c40)=[{&(0x7f0000001740)="b2edf09c49611897ced2de0a8750e389ead1574ff9c3662fdbdec07a8d70403cff5270bc1896dc5fcfe79cebb5246fd8ac4e6f441031a81db103dbf8e9251ef95ffab33cecf03123a8ee4b4bfa7b53b59b9a1d2d223b08627f4bc9", 0x5b, 0xfff8000000000000}, {&(0x7f00000017c0)="4112d4f93f9d2b3a054802bb8096f4ea9e6e97ae27537b047e0ae059b3e6b192a91d4a83738c1b152ba276c126a5171ac43f0536c085a17d958f7f06777b4ae4047c474bd3e69ec2e01e11ca0538c1466c64cff228b299f89eb6fc594742877d1b55eaba15f955d88cc17a9cf5a5b749da8ea816f2", 0x75, 0x5}, {&(0x7f0000001840)="393e64be760cd0028e82bf82cdb97dd207747164db8cab169c8b2ee55b7e4e557d7e6794f77e7fb7f1cbc9def4c1317562cd34b894344af864cd755aa3e3104420dbdc54bea5af197d896f942ff4bb8495fff09f9967769ac833b16f3855083e2025d1e95be653c33eb2c3df46d3d90a1356616fe3e8b258155d569f7772cbe1f28ac808fe3830c9e2bba1375e3508e84bbf71ccb61b4eaadb0f46b9f1a0cc1cf403c701d4be81d3fb322f0d18903d406ab0975127dacaa977a3628dddba65681dfef9cf8f9a3fe93fb5dc394e366c86862d", 0xd2, 0x88}, {&(0x7f0000001940)="f4773f84b73301f62bc7bbbee7872dc36c9fae4882eef8ce5e4ba8a740adca82351e7c8dcaaee0b55ff24c504cc79d25ac1a28bdf81ffb6d5b384f63f768529621bf3a5c1f3138031aa4cd3aaaac47daefe0ac96387d394949c462ccf5f167e5573b54429ca18662cff95d03d943b8438b", 0x71}, {&(0x7f00000019c0)="f1f9a1da8eae673208b8b5bfbeffdd5ecdf387bafc6d16fb01ff1be9e7d2e38935f6dd2a1a1113c10d3bf8c1caa65cb87907b2ba90629dae3a2862442331eb4e2f38d916f143702be1735d8878a564554e2b8503ea959033b5919eee3c610435701e85c25dcbe5584d07788af07d56a0c974d0c915f4721fb643795583963f3a01310fe508c7632a60a1da202053baa3b1b700f3a248a8c6773d79fb054d28eb959a5e69e53b023141767f07fb689f8b787b952c1accc9dfadd7943db370c6fb7a9ff782", 0xc4, 0x4}, {&(0x7f0000001ac0)="2e347469e072d77f9b37dd0614763fd0056158f27f6f7e74c0625c463f79a6dc06dd7a05b6649eae1de1ef463f7219b5f1384158cf3c5ea274f58de9099eedc6f25e46580a3bfec9a369116dea00c13587c733704239599e9d56879cfc577f4e7167653a7780b475951ce6dbf1b6ce6c6d2497db154cae51aa1f5ed8f8521e39a664ff0d3f0cd4e8f3937bb2055ad62ee21e789503efb5a120cb", 0x9a, 0x80}, {&(0x7f0000001b80)="33ee91567249000f8fc49e21e1829e47dec684b12628de734b1196290e5a470e5e48383a62d8c8c3689a8896a9c26cdfc5875acc05abcfb18e61b8170996ef081529c0531c3165186a104ad2b3c072ac00f0b353463ea3be2f56bd683dfd5bb26995", 0x62, 0x3}, {&(0x7f0000001c00)="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", 0x1000, 0x225fba94}, {&(0x7f0000002c00)="5cd7098e02e8fd9a8ccc94f2348bec9b", 0x10, 0x3ff}], 0x8020, &(0x7f0000002d40)={[{@fat=@fmask={'fmask', 0x3d, 0x8000000000000000}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x800}}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0x576}}, {@fat=@sys_immutable}, {@fat=@showexec}, {@dots}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x1, 0x66, 0x38, 0x30, 0x61, 0x64], 0x2d, [0x39, 0x4, 0x65, 0x35], 0x2d, [0x0, 0x64, 0x62, 0x36], 0x2d, [0x30, 0x33, 0x36, 0x33], 0x2d, [0x61, 0x30, 0x63, 0x64, 0x7a, 0x62, 0x66, 0x32]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt}, {@fowner_gt={'fowner>', r1}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, 'subj_user'}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000003dc0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d80)={&(0x7f0000003400)=@deltclass={0x94c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xffe0, 0x10}, {0xffff, 0xa}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xdd, 0x2b}}, @tclass_kind_options=@c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x3, 0x8, 0x3, 0xfffffffa, 0xe40b}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0xfffffffd, 0x8, 0x8b, 0x981, 0x4, 0xb65, 0x5, 0x1, 0x9, 0x0, 0x3, 0x5, 0x1, 0x3, 0x1, 0x6, 0x2, 0x1f, 0x101, 0x4, 0x4, 0xf8000000, 0x7, 0x6434, 0x1, 0xb79, 0x6, 0xffff, 0xff, 0x3ff, 0x7ff, 0x80000000, 0x0, 0x7f, 0x4, 0x3, 0x1, 0x8, 0x33, 0xf56, 0xffff7fff, 0x4, 0x1, 0x2, 0xffffffff, 0xfffffc00, 0x1, 0x8f8, 0x5, 0x3, 0x8001, 0x3f, 0x6, 0x6, 0x20, 0x1ff, 0x1, 0x7fffffff, 0x0, 0x6, 0x7, 0x8001, 0x8, 0x5, 0x20, 0x80000001, 0x1, 0x8, 0x0, 0x9, 0x3, 0xed, 0x1, 0x2, 0x4b9, 0x3ff, 0x800, 0x2, 0x1, 0xfffffff7, 0x3, 0x9, 0x2, 0x6, 0x9, 0xffffff81, 0x6ae9, 0xe27d, 0x200, 0x9, 0x8, 0x9, 0x10000, 0x3ff, 0x1f, 0x7, 0x7, 0x5, 0xec4, 0x54a, 0x100, 0x5, 0xfc05, 0x7f, 0x7, 0x3ff, 0x80000000, 0x3, 0x10001, 0x1, 0xffffffff, 0xe5b, 0x8, 0xfffff8f6, 0x20a9, 0x8001, 0x4, 0x1, 0x6, 0x20, 0x101, 0x2, 0x200, 0x7ff, 0x5, 0x0, 0x39f6, 0xb7, 0x0, 0xffff, 0x4, 0x401, 0x2f, 0x0, 0x74, 0x7e14, 0x3f, 0x20, 0x5, 0x7ed, 0x14, 0x5, 0x800, 0x10000, 0x0, 0x8000, 0x2, 0x80, 0x29, 0x80000000, 0x9, 0x0, 0x3, 0x1, 0x8, 0x7fff, 0x4, 0x0, 0x400, 0x9, 0x4, 0x101, 0x7, 0x8, 0x7, 0x2, 0x5, 0x9, 0x7fffffff, 0x8, 0x8, 0xe2d2, 0x5d82, 0x33, 0x7ff, 0x1, 0x4, 0x5, 0x8, 0x8, 0x36fc, 0x5, 0x2, 0x7, 0x7, 0x9, 0x1, 0x9, 0x1, 0xcfc1, 0x4, 0x6, 0x6, 0x20, 0x3ff, 0xff, 0x1, 0x3176, 0x1ff, 0x3, 0x80000000, 0x0, 0x0, 0x6, 0x8, 0x8, 0x800, 0x2, 0x80e0, 0x1ff, 0x4, 0x0, 0x1, 0x1, 0x14000, 0x4, 0x7fffffff, 0x37400, 0x5, 0x4, 0x8, 0x261, 0x2, 0x2, 0x12c, 0x5, 0x8dda, 0xcd, 0x6, 0x5, 0x7e4, 0x4, 0xfffffffc, 0x7, 0x1, 0x7, 0x7fff, 0xa24, 0xffff, 0xfffffffa, 0x400, 0x8001, 0x30b, 0x20, 0x8, 0xed, 0x7ce8c4ce, 0x200, 0x9, 0x9, 0xfffffffa, 0x8, 0xadfa, 0xffffffff, 0x6]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0x6}, 0x9, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x3, 0x1, 0x40, 0x7fff, 0x3, 0x9, 0x1}}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x6, 0xc40d, 0x3}}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0x2a, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf2}}, @tclass_kind_options=@c_cbq={{0x8}, {0x480, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x7, 0x1, 0x9, 0xfffffff8, 0x0, 0x7, 0x0, 0x3f, 0x400, 0x1000, 0x1, 0x8, 0x0, 0x0, 0x140000, 0x10000, 0xa1, 0xd589, 0xffff6f1a, 0x8, 0x5, 0x6, 0x8, 0x2, 0xffffff46, 0x0, 0xfff, 0x20, 0x9, 0x498, 0x5, 0x6, 0x80000000, 0x5, 0x7, 0xb6, 0x0, 0x1, 0x5, 0x1ce, 0x9, 0xffff6dcf, 0x5, 0x36, 0x4, 0x7f, 0x1000, 0x800, 0x0, 0x55b2, 0x0, 0x3ff, 0x30e81605, 0x3, 0x55, 0x7, 0x81, 0x5, 0x1, 0x81, 0x400, 0x5, 0x3f, 0x5, 0x1, 0x7, 0xfffffffe, 0x5, 0x4, 0x100, 0x100, 0x63, 0x6, 0x0, 0x8, 0x4800000, 0x490, 0x7f, 0x10001, 0x7, 0xe4b5, 0x1c0, 0x7, 0x10000, 0x8000, 0x9, 0xe8, 0x8, 0x2, 0x5, 0x7, 0x800, 0x8, 0xffff, 0x7, 0x3, 0x8, 0x8, 0x2, 0xfffffffb, 0x4, 0xa, 0x5, 0x3, 0x5, 0x9, 0x9, 0x2, 0x5, 0x2, 0x8, 0x4, 0x3e, 0x9, 0x800, 0x20, 0x1, 0x6b4, 0x5cf, 0x80000001, 0x3b8, 0x6, 0x1, 0x2, 0x200, 0x3, 0xfffffff9, 0x7b2fc638, 0x8, 0x5e, 0x15dc, 0x3, 0x7f, 0xff000000, 0x0, 0x8, 0x6, 0x2, 0x20, 0x0, 0x4, 0x7, 0xffff0001, 0x3, 0x8, 0xa4, 0x8, 0x0, 0x200, 0x9, 0x0, 0x3f, 0x51, 0x9b, 0x101, 0x5, 0xe0, 0x3, 0x88a, 0xffffff82, 0x200, 0x100, 0x1, 0x10001, 0x5, 0x0, 0x83, 0x1000, 0xb7, 0x3, 0x0, 0x1000, 0x800, 0x81, 0xa06, 0x400, 0x5, 0x5, 0x80, 0x8, 0xffffff7f, 0x12000000, 0x200, 0x8, 0x7f, 0x9, 0x698b, 0x0, 0x1, 0x1, 0x8, 0x25b, 0x8, 0x3, 0x7fff, 0x5, 0x9ab, 0x2, 0x0, 0x80000, 0x5118, 0x3, 0x4, 0xfffffc01, 0x1000, 0x80000001, 0x20, 0x0, 0x1000, 0x4, 0x55, 0x10001, 0x1, 0x70, 0x0, 0xffff, 0x8000, 0x9, 0x1, 0x1000, 0x2cbfbafc, 0x0, 0x9, 0x1, 0x1cc500e3, 0x4, 0x6, 0xffffffe1, 0x0, 0x81, 0x74, 0x5, 0xb9e, 0x8001, 0x8001, 0xfff, 0x1ff, 0x2, 0x31, 0x7fffffff, 0x9, 0x2, 0x7, 0x2, 0x0, 0x6, 0x1, 0x5, 0x401, 0x5, 0x2, 0x1, 0x8, 0x3, 0xff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x4, 0xff, 0x81, 0x0, 0xffffffff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x31, 0x3, 0x20, 0x3f, 0xfffffff7, 0x80, 0x3, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x9, 0x1, 0x11, 0x1f, 0x4, 0x7, 0x0, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0xe, 0x81, 0x80000000, 0x5, 0x400, 0x101}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x1, 0x400, 0x6, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x40, 0x0, 0xa9, 0x4d15, 0x8, 0x1f}}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x94c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4080) 00:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001080), 0x4) 00:20:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:22 executing program 4: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x1040, &(0x7f0000000300)) 00:20:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @struct]}}, &(0x7f0000000200)=""/176, 0x32, 0xb0, 0x1}, 0x20) 00:20:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000180)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0xcdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xacf6}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{&)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x287e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeae}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8583}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb8a, 0x5, "60ac09933cc040a09753b87632e3310078cf2f422fb41d362a908fda51fb2be62edc09e8f654340a45ea706a308b58bc64ce5e3fd8a7504b118ffcd98097b94edffd40409685742a33616e0e2c3b54d24d5c1219fd8097a1c7a9f98781bb138f2b59a6f126805ea0e528f2deb02f6992ab42d47b7a8431e0bfe703ecad0aa7801a4522d806517b73fe67cdbb301493db695d125dcc3b53f44b95ab5552dbb43a1184eb27e5fb99d8a4724f5b4bea9b279cb458b04a3f1854159ee6a91b74a924523ad48553b468676aa592c20bab249fde9dfbb7e3f235f0462090800162fca826192be351b460081d3c08dd32a5892f92795762f8129abe7324ab6d86e4a22e35aeddc13fd8140483056ffca19516629c721cb717c3b3bb81b9317624aa367e77e3824ab82e3026e54959ad438b28d009eae5b65ed12958e31d522e2b0aaf69db94250f79490194119930e6b142b58948cc63c3f59022abff0ef774064063b77ebf75d0412b1cf130d235ddec9a764c0eb0ff1297caaacd8157a7f584e4088116da4f6436ed82cd231086933749120f805bdad82fc6af43948b55b117d64c31a7a5f6e7f75f97ab8755a6d01904d7eee71523cc8ceb7e52a828844d01c5d157daa582d236405f278929c1386acc8e76b8c39b7e0ba2882687ba8261a4fa355f5ffd493c8496a540ceb8dceff90ca2122a7e0ec95b37bf3cdc43d9f6ca4225754d5c3b4979bbad81b29bf0deae1c7fd489db05fa7c77b121f65c899365ee31ef70f3f411deede135569b22cf2406aa3d6ee42a384d0224a2965c3a06397daf907183e9183cec572e363fa7468001c589f65bfdcd050932f81827f010ae7b8d1636525f9f843531b9ffb88529583840db86ad01a5845f614681c0ac86d81780a5291798f566cbd5f0b8f1c2d780dca16d4f741a270b8639935d20ea062af198f10cc19c715da4f1e3a4029a82ec6ba9998ebabff4688e015e5481dd278b2c9403478d06494cea8b647b9b07357c6b577c99ae20fd5668211f0e8d166f42114ca8bcdb9ca1cf8616868e5475b37637d59ebc715b1578d88af1d67a0e2fcbad47b49716a6f4c4f40f64ae2c9f24e0666ac129a50d85889210c31f99440c525740d10f5d6059aee5de1cc7891e943e898e108d6cabd80313de2855e71c233120afd1569ac77cecae0b42df9e3a6dabc2ad410ac9e5e22ad7aaca52e2ac2e2a2330fb38d31c3da51a0db6fd872491a5c5dd2a885209776337f1b272302faad48eb6b7bf08f8bad3b5854690da6eef1200e8898f0fcdf7c69024b80d0b20ede12f467c01758394710d1b4a2c8d069b48df7ae0be70849101804ff1f29b77a0c24f232759048b001f848032318a5ec9c20278a3b347a09d13f6b80cbc22908b1a85ec6d57e91256ead935452f95204eb85521cd0396b3cb687fc9aa11e3068d89c2697d44b35952750f8312467c4a2734a39c2ecabae232df4347b78d3379a1e9b1bd4567ab7743c6e7b99aede0d1afd8e0cef995abdb6cfc360b66d649eac28e73e9ed0ed6a8306ea954ade032d61530d433d950656322b3aceae786b99404b0d037fa9e45125f9ed8585d6543c05a4aaaf7b9d63ece99b4573b0312871b8980d6b54d1e7d63e764456d484e94ff53b17ecb259bea4145bdf7581ba2cbe0a76dc191590c79270ae31ebe5af7b551a0efa6b93dd8fe42899ea40534721d9db417d6f6b1321e1008c733394ea978c5cfd8032baad45ba9105f80cb01f2dd1136e042a7a1ba4c3c0769e8e770fe7efa1068bbf23ce272111edd246c9265199b4a3f51472e8e9f07116f59626eadac66f2f9325cf73704a7c1e1766ed89323a4d653c9a6e4bcd0042f1d6aa8c2539469f60c412e56f388a8ceabe706c827035014c125888ad4314dabf212bd99bb4cfd60fa6312a55f69eb2008f99a2a27ee62a2c27788cbf0f6592817c210991325dd756a1a9260a0abca9af1af9c77f6aa4f12b28b7c071737977d7e9373038c301b59130ee742bac95667fb426dc3306ab83174605022bf62662df3c83937badd388b6a1b039b22f25c52e18ee8103ca4e37cc31fa1f110f53ce7a3ac5b02bc96ae437af5017f033c957340b8e5ac7fd822995e8fbaebb3cc157cc6e5c65bdb60cd2337c8cc37b1884303978da1f47b1e6cdb40ae38f3b16507822bf86f99206bb5e42aba31059e13310992be4a5409254d28421c5ab6fbc305c64661a99f62f1ec66d9cc6c5a2b5c6e1726d57764e5e31f837bf8af864005df93a8e12c365d4851086ae2f28c2088fdb52abcbdcf7dc1da862363e15759b9bc61308b0be0a7711597455ea55285d228386c5e7a9dcd8dc7c727275ffa0c18ef9082ab498958c85927f2808412b3f2a394b48af94a4c77f3aacdfcfcf51862fac4104fef4ef50780e805a83aa08723851adaddb0bff14fe1e85ca115a1e03551fa2a3aeb4e54fdff2d27bbd8782fdf8ff03edfaf6d89d71f2f1a2f431ffc6724f9b9ad0133417e2bd4182ab456d5f412d2741e016926bc083be4c922d9b1d893272156e899a9cdbf5b82f9eb10f2f4efa527312de1b6be20cdba216b6423af1cf83ccb0df3cdcef4262b6ec62e11a4d3654712629c7d7328cda9816e27a66764d8000d4675e3dff3873e6e3491f85124bcb815749150f9939159b110812c289a6c0e8c2a6b7be3b4d3b9805a185b007b9dd89e639e044c486960eb426123890245a21421cd323683d309567e5382b5e79b788973718da8dc1a4d7a0b5944019e96a67124b49749d8ee0ee0a25b5f048302beaa7a163c58a9425f8e732a97e14c9cddeb77c4e5cfc44c03ee02b64dabcf42a9c7b1e2f9a30fb1b8a3c3f0b0c75c0d84b2e23c9ea530333d0171fde952cf1f3b2670319efab0a034684d74b93c21059bad56bb465e477256e76445cb0d2a74b50a67253d8c49837b24ebfc062fdb92518234e97865019ac2bba06fa1b9235cb021788dcbef6853b5e65a7afb27209a4a0e6d3efc4b96609675b81fafea6bfb66a202c29450bb34367761e6f7ffd450b527ae95fc05ddbd4b8bb7af955d312c2b59e13490c90cf7f0133656db60c7c1fe813dc690f1b22135cc456ebe92a1291b1a7906b051b9feccb8dcbe5961498f7ca4bfd1b9dfb146fd40062be141b6c8536440a17671d0fb52ef37fb141b65b38ec98b228852efeea105e0f9fdbf19b9fa57894451ac96ec7363e90fce3d3c52eef3510aaa52cb01323db677e2535b10987dfc2fb49250fe2f3af68a60e317e06f2a7466381ee3b5486e08d4983e56fce34b6d470a2846a4136c89447a1c0755aea159bb223dba703f539d1bdb95201a7201f0bec098941bc906db9dd7c5b2dc0ab255b90bf7c3807d6a3d306e0df995b84b7794fa04867b29b94e6af742118c514e3bab8f54ab3e2d228854dae6a5fb81e20965531dd397dfb7f0db5eb1556df8384cae0385ef3766b74248faafc50ed4611dbb39b8be5ba2a3f3ecd5226aa23661905de6a4d9f86c0149d4107d1e01a4f13610ca4d700bf80ec133547badc5557ecfbc852a458a7cad0892fb8fb83e52f267906ed0bb4fdae46604830005bccd1b25bb7ad580a042f2b66bc4b5d8b4db6264deb3876d187c3d96fa7881ea0281bc3294798c805eded195558fe3e6d58be941b1bee1614343bc999fb5e4db34e75a0f5216cf744a931622d7ef4a5fb11c6083525e32ef731402444de238a3a4cd553e8e64f1cbd21d3b03c4efa6e5ee027be3f3b4bc97f8e8cadef66c901395420f06bef34276dd628efe197722b7c797b9747938d8d72663191f8e84b679f77eb5cc81ca55b795537f269194810e068f70c5189e6bd8a51ec0313e6f1b49101c419f1a06d01955d15bc3a3d7401dd144382324ada2d90f6fcee840d4e4cdd32853863315a70bbc97afbd579085a8d81e37b360859122369db303e4f3c351b7bf90b8f88120f1f11c20522497242921d64722d60c34d44d581eb10fcc0d4555599b331ebe64ce6b588369773c2f493d66c25ea8054a88d24e15cdaa71f597749e170cc904aed0034824b5965fcf9ed68b709f61ffadbbe8ad7c25f1142b9c4da46d6b2ea5293321b0ca7a27a13e483b22ca84f221b4effb0c14c563a80787541877e11b129771e067f19f7735c38cf6e0af5711e63ae78a49ecd279367f776668f0"}]}]}, 0xd04}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840d0) 00:20:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000180)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0xcc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xacf6}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{&)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x287e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeae}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8583}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb80, 0x5, "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"}]}]}, 0xd04}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840d0) 00:20:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:22 executing program 1: mq_open(&(0x7f0000000100)='\\+}^)@\x00', 0x0, 0x0, 0x0) 00:20:22 executing program 2: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000180)=""/118) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) 00:20:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x24004001) 00:20:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:22 executing program 3: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000300)=""/4096, 0x1000) 00:20:22 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x80) 00:20:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000200)=""/176, 0x32, 0xb0, 0x1}, 0x20) 00:20:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) 00:20:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x8, 0x80000000, 0x62, 0xfffff800], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:20:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c0001007665"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:20:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000431000/0x4000)=nil) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYBLOB="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"]) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x1000, 0x1a, &(0x7f00000000c0)=""/26}, {0xd000, 0x0, &(0x7f0000000100)}, {0xf000, 0x1000, &(0x7f0000001a40)=""/4096}, {0x0, 0xdf, &(0x7f0000000140)=""/223}, {0xd000, 0x1000, &(0x7f0000002a40)=""/4096}]}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240), 0x10) 00:20:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f000030d000/0x3000)=nil, 0x3000, 0x17) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x241400, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) mlock(&(0x7f00007f1000/0x12000)=nil, 0x12000) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="140020001a0034a70b307006fba0df2500000000"], 0x14}}, 0x40) 00:20:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) poll(0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='btrfs\x00', 0x2100001, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) 00:20:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) io_uring_enter(r0, 0x2939, 0xf67e, 0x1, &(0x7f00000000c0)={[0x3]}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900996617e10000000000001d01020008002b45480900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) [ 1292.067316][T28059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x23, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:20:22 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f0000000040)='pvfs2\x00', 0x80, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0xc040) 00:20:22 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0xf0ffffffffffff) 00:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0xb316) [ 1292.263279][T28075] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x23, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 00:20:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1292.607651][T28088] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x23, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) 00:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 1292.889460][T28097] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x6558}, 0x0) 00:20:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x140000}}, './file0\x00'}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000001c0)={0x1, r0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000001d01000008000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="e49fad5ba2f44505a5481c1ac10e9ae71ca1d68dc6c68b4022532540281999904eadbc453f5897642f87f30e3482159c4215eb6041e40445cc8b99e36460143b5ffbf3311f6672c3412cd9b549e4a0bf6206"], 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x1000000000000000}, 0x0) 00:20:23 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0xe00000000000000}, 0x0) 00:20:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0xffffa888}, 0x0) 00:20:23 executing program 0: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2d) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace(0x4208, r2) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001d01000008000900", @ANYRES32=r5, @ANYBLOB="08000a00e148a1771cb554c31b9464803fe1e6cd0392113add9f4ad512653f964820d928056d37fb9f30036544b8e7eb93195bd52bd346b866d7e882ef24cd6245f7bdc65aab4f9752407a49c76d6a681f2629d24b381aebb5e76ddf7a992d0f97c8c64505c9b5da2b81e4e2a5a07108919bc65845ccacda1d77ef12412bce9e5ec86f76f87768b557519c428837722ee7f3", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) 00:20:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x16b3}, 0x0) 00:20:24 executing program 3: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpgrp(r1) r3 = geteuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4405, &(0x7f0000000140)={&(0x7f00000003c0)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "2fbb2a2c4d02a027"}, 0x5}}, @CGW_MOD_UID={0x8}]}, 0x44}, 0x1, 0x4}, 0x0) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x2}, {}, {0x2, 0x7, r3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1, r4}], {0x4, 0x3}, [{0x8, 0x5, 0xee01}, {0x8, 0x3, 0xee01}, {0x8, 0x1, 0xee00}], {0x10, 0x5}, {0x20, 0x1}}, 0x74, 0x5) getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) fremovexattr(r6, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@RTM_NEWMDB={0xb8, 0x54, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x0, {@in6_addr=@private0, 0xc5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x4, 0x206d, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@private2, 0x800}}}]}, 0xb8}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x600}, 0x0) 00:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000642000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) lseek(r2, 0x3, 0x2) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="2400000019d441b834e00000000000001d01000108000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) mprotect(&(0x7f00008b7000/0x2000)=nil, 0x2000, 0x100000d) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) lseek(r2, 0x3, 0x2) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="2400000019d441b834e00000000000001d01000108000900", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) mprotect(&(0x7f00008b7000/0x2000)=nil, 0x2000, 0x100000d) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0xe}, 0x0) [ 1293.541806][ T27] audit: type=1800 audit(1660522824.217:908): pid=28139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 00:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000642000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 3: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x109) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x101040, 0x41, 0x5}, 0xfffffeef) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='totmaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r2, 0x4c3d9000) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000371000/0x2000)=nil) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x4000) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) shmat(0x0, &(0x7f0000255000/0x2000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f0000b17000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0xb3160000, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1293.692515][ T27] audit: type=1800 audit(1660522824.367:909): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 1293.722391][T28144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54297 sclass=netlink_route_socket pid=28144 comm=syz-executor.2 00:20:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000642000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) [ 1293.748517][T28145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54297 sclass=netlink_route_socket pid=28145 comm=syz-executor.1 00:20:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f, 0x101000) dup3(r9, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x400300, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x34000, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000900", @ANYRES32=r5, @ANYBLOB="08e80a00", @ANYRES32=r5], 0x24}}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) [ 1293.930155][ T27] audit: type=1800 audit(1660522824.607:910): pid=28166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 00:20:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000018b000/0x1000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ba91432bde3f96a961afdf3714456868f299ab1b1dbd060470619a85ee9abcf265b2790f20cacddc354fd8a8c324eee350ef1c9110138d6b645c14c5a4073d8526cfb466ae5ad71046873085d7f774be1c3ae7d07cd7ef3a10bfa71d755f7dd4544189de2adcd509ab12323398f62237f79fc9114524963d5aefbe72b9e908dc4b2dd3c3fc98be8dc9ead999b53d9174de306fb000"/160], 0x13c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x500, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) [ 1294.032585][ T27] audit: type=1800 audit(1660522824.647:911): pid=28155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 00:20:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0xc000, 0x54001800, &(0x7f0000493000/0xc000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r2, &(0x7f00006b2000/0x1000)=nil, 0x6000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 4: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x703502, 0x45) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f70000006a00000327bd7000ffdbdf250900000000000000"], 0x18}}, 0x0) [ 1294.145153][ T27] audit: type=1800 audit(1660522824.737:912): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=63 res=0 errno=0 00:20:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000472000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/229) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:24 executing program 5: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=ANY=[@ANYBLOB="241d01000008000900000000000000000001000000000000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) 00:20:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) [ 1294.266892][ T27] audit: type=1800 audit(1660522824.907:913): pid=28183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=65 res=0 errno=0 00:20:25 executing program 1: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x14, 0x19, 0x1}, 0x14}}, 0x20048805) 00:20:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0x8100000000000000) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) [ 1294.363348][ T27] audit: type=1800 audit(1660522824.927:914): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1294.401741][ T27] audit: type=1800 audit(1660522824.937:915): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 00:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x284481, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x8c, 0x49, 0x400, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x2404004a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000900", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="60e9275f7ed3766d05cf13dbdf1aa491bc8389c75a40f27f318714f47e530340283817ae616462401b4f6690ed5b47d05d5d9bf4638e10d84165b5f090f1cc931c29dc5779f4429735393c6be0fc70470547833f3534f6cc9742d3124e623d267975dc8d52d6269de8b5b8", @ANYBLOB="1500040000000000000000002fbb2a2c4d02a0270500000008000e00", @ANYRES32], 0x44}, 0x1, 0x4}, 0x0) [ 1294.442987][ T27] audit: type=1800 audit(1660522825.107:916): pid=28195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 00:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0xa00000000000000) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}}, 0xffffff7f) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x7, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0xd000, 0x80, &(0x7f0000534000/0xd000)=nil) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) [ 1294.570267][T28211] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:25 executing program 1: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}}, 0x9effffff00000000) 00:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x284481, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x8c, 0x49, 0x400, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x2404004a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000900", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="60e9275f7ed3766d05cf13dbdf1aa491bc8389c75a40f27f318714f47e530340283817ae616462401b4f6690ed5b47d05d5d9bf4638e10d84165b5f090f1cc931c29dc5779f4429735393c6be0fc70470547833f3534f6cc9742d3124e623d267975dc8d52d6269de8b5b8", @ANYBLOB="1500040000000000000000002fbb2a2c4d02a0270500000008000e00", @ANYRES32], 0x44}, 0x1, 0x4}, 0x0) 00:20:25 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0xb3160000, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0xd000, 0x80, &(0x7f0000534000/0xd000)=nil) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000008a1100000000000078ca06092165ba00a5d6e80ba00"/37, @ANYRES32=r1, @ANYBLOB="01000000", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x20004080) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000280)="d2d4cdab1c06fd15d7bcff80aaea2e1c6d242fb5ef27f38133652c214a243c8f4bd95dbb72fefddf94f2943154769c13f4b1c49417d05401adc75e10d40e5b84e4a6eb1bbfa290fc568c8481fdce9530faab6e00fc8ab6dc6d41c9c02e064697e4d9cca24639b8d3e20bef8ba51ca3e13511cbaa54ec9e4b3f33cf798c3ff6504f798e716e6357878deccf10f11ace46bf7db49cd596f66f3a906cc1cb8089dde118858594aa623510d6295bee82063626c5e741fcb20f217cb4e7baedfff37306dfb17d4d9be1612d5f1973e9cd10b17809d621a044e3141fa3fac46f69144ce6", 0xe1}, {&(0x7f0000000480)="eec64085634415cd7baec7e278a9155f65939a1d3f958c3b024bc766ebc424f219bbb308604c1d55338b59c520cc5a6f64be81c28d406005a41702b550cf102233ee09b49359e3137ea222fcda744864ed10daf4f09a168a812ea8930ae78eebc67de7992985578771606d1acd9d8ed6346fbc860cec45549faf9ef4cb57bbb0953c13086239667d7d3fed2b38e3576a24062b1819b87aa5f343986dec0f89a8ad1393202280c842af770a717f4eca3b45a921df618ce74a93023c048c85208a610a04ed65799d0e7e4b0cf5713c390e2e9774180d3d5f33a8a7ad9677e67bdaf3", 0xe1}, {&(0x7f0000000080)="97559986bc8c80b26a2019d589373753e86ee80098f2f364713975296d42113237762fb1d4c0e7e653373c0836d73f6d53d354761dd1609b01b5b0aee53ccd182399ebc7fcb0a6628858e16ede8d7e34a18e7c588245a6e809981ea778", 0x5d}, {&(0x7f00000001c0)="2ff613d83651e4cf06a3ede9072d0fa8c5c7ee88ee6cc9500578b5dd9928a2ec6d80bd6e79d17517238a46732b54b62de986b363da49413fef9a48aadd318593420b6def3ececb0c19fb0daad789bd476d8e5bb0a2b9ce3905969fc96822e5bf0aade9cf1b90578c1eb0a4a079021441e881919c510b", 0x76}, {&(0x7f0000000140)="6a6a89ded5a6776ce60ee418283337b0fb861d1517e7722f", 0x18}, {&(0x7f0000000580)="14c4e3f1cf3ede8048e76a5723fcc804504b88e2a74390d0c79221489067ce25c5b3dcd02bf9928738e0bec440b77ed91a6638b3e125d64ac063b14cc3a337fb325d9ec9fed8bcd1b3980d4f437d2f42f824088661e9f6ac61f45e49cd0b53d9c7ef24ad4139d62e0abfeeab94ba01662592f61ff1dfb9bfec5c0fcd1a29bb82424b9eca653285dbaf47b272edda956a36b64e42fa1ad71b713345e282f9bcbfba413761db487c5f2fde5c177907dbe6ee330f620c490aac695ef413d4a311110641831cdc2a1e4099e13e", 0xcb}, {&(0x7f0000000380)="a1da52c4b6a9ad4efa8dda4216d55a21386afdc4236274ac9c6b1e609b3ec63f0802fcbe25c98ba6419ef99b5bb264b13aae94b71dfe8f6cab1b5a292049ab95acb70a02ef1bd526a803867300840f9ea2", 0x51}, {&(0x7f0000000680)="b975f231eb3ee35ab344c959a97e9dcf245b1ef635d7315abf1f51270211dc576bc53802b03755c45116c660b2b6473f52100538e7eb6828b11a8da2b1d7eaa6bb7f6ddcc4ea826a52f69f6691106547a28fcd5b0f5f664112d7197dba995819f6685966092701fe8f474449db8f422931f102a23abbb2efb506454251b23b975150f7aac9bd583f4c697b6ec1b87060a3c0b9bdb65bedad13fda5f65f5e2c951b18fa2af183a817d52309e77b4763ea108abfc913256da88a03198fd990461c15bb21632b93b57d2f8356178fb23b73dc47edba20c7bfd58d85c47aa3e34c3efe1464d3511ed07e", 0xe8}, {&(0x7f0000000780)="d1a0797c5fc437fa9c1783a518708dd806454f71d93bf5b275f010256c330a31f96dbd4da075d82597d26540f79c9bc55af5fb899abe3dc5897f13add7d12c065f0c1a3a0f8e1bc0be1fc54f3d368046012bc77b2b30224ee4b82fd3d37fd41656a70123728962c3fdac8b7ca3b3e35d6d8c56c34117cd885fe2473f2405538f9757d50091ccd88e2fb1c98bb24b52eb7c450eece1f32fc9bf73ee54bf3ef983748549d7431eb339ed562bb1b6881974ce4788a8950ee5f990ebc11adb59", 0xbe}], 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r2, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) [ 1294.727546][T28223] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x400, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000c0d000/0x3000)=nil, 0x3000}, 0x1}) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x3000000, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:25 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0xf0ffff, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x0) 00:20:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x284481, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x8c, 0x49, 0x400, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x2404004a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000900", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="60e9275f7ed3766d05cf13dbdf1aa491bc8389c75a40f27f318714f47e530340283817ae616462401b4f6690ed5b47d05d5d9bf4638e10d84165b5f090f1cc931c29dc5779f4429735393c6be0fc70470547833f3534f6cc9742d3124e623d267975dc8d52d6269de8b5b8", @ANYBLOB="1500040000000000000000002fbb2a2c4d02a0270500000008000e00", @ANYRES32], 0x44}, 0x1, 0x4}, 0x0) [ 1294.859461][ T27] audit: type=1800 audit(1660522825.537:917): pid=28231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=286 res=0 errno=0 00:20:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000453000/0x800000)=nil, 0x800000, 0x2000008, 0x10010, r0, 0x4c3d9000) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000454000/0x1000)=nil, 0x1000}) shmat(r1, &(0x7f00008b7000/0x2000)=nil, 0x1000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000857000/0x1000)=nil, 0x1000, 0x1) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0xd000, 0x80, &(0x7f0000534000/0xd000)=nil) shmat(r2, &(0x7f0000593000/0x4000)=nil, 0x6000) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1) mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000946000/0x1000)=nil) 00:20:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) [ 1294.976124][T28240] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:25 executing program 1: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}}, 0xf0ffff) 00:20:25 executing program 3: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}}, 0x34000) 00:20:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:25 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000091b000/0x2000)=nil, 0x2000) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) pipe2$watch_queue(&(0x7f00000014c0), 0x80) getpgrp(r1) geteuid() getegid() openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001d00), 0x4202, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}}, 0xc00) 00:20:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) (fail_nth: 1) 00:20:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) 00:20:25 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x2) (fail_nth: 1) [ 1295.262618][T28261] FAULT_INJECTION: forcing a failure. [ 1295.262618][T28261] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:20:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7bfba7cb46433073d628000000160028ebec01002cbd706cabfc00fcdbdf250220c4fe", @ANYRES32=0x0, @ANYBLOB="080008000001000008000400ac1414436866bcf851131ff81a5cb24f1c682e503fe78dbc13ab1d2a3f91428ce8ac7aa02d19e621dae56873177a74e2b7c659df3040ba8d8f23cafc3d04dab2eff308b953269537d38b9c58b142b260e0eaa8342997717958aa6ace28aab669db63c0410d74ae3c746b880be643df4d4131db6f624317aa06ac7c6c0e65f31a0549b592a096d53e5d8095f510f10b554dee42e112b1bbacf69e4878ec74f686d02b73cfad2ecadd02529b6c9098c5e0ed65c863d7d76ff69f14190d2bec8811b66a18dea45805896f0d53c72fbf76a932a915b907ddc410ca8651e0186af4f7f7f81bebf8456ce23471e30c"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x8, &(0x7f0000001f80)=[{0x0, 0x0, 0x400}, {&(0x7f0000010200)}, {&(0x7f0000010400)="160000005e887e7b23", 0x9}, {0x0, 0x0, 0xbff}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x80000000000000}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00da9bccad002100000000001f2b6fe2f96a3f6d2f93ca9700b41d32f92fce90e61dc18e8c44810000e4259e66934175a7e35b9cc4c0e894a793926020f83dc4da84d3c69b0200000067c4eb317d9510c86b996c4c95074763bcb45a1b27d72d69e41d5490584127f1be46d68441f24cc08bc114b8640a1c284a042bad52ed8715cb1335cc80259162dda27f90d1944ee4d82b1aa0b548e7393f3e00bc4cc5b3e3c8219821d391264cefcf708eaeebb789e308a53a50e9c16d7ad1c27b4952e4dc878a3cf617e0558e6a4835afa1ac000000", @ANYBLOB="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"]) recvfrom(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2140, &(0x7f0000000c40)=@l2={0x1f, 0x6, @none, 0xec, 0x1}, 0x80) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="c737f7d57175eaf5a2eeb5b8ef9712c64fa1c9d38b2db803d3ca5767c1ff80eb1075beb53a4cac5506ac02bdea17bff3f18fe1b4789a01e6a72cbcc4a52b66e13b0920f0398dbaffe1ff375d8a57e6d950d3621ebf37b4c20188c29e8896696f8c9a8c96c462f566dcebf18d5e0b8a15ab9363757ff4a2f19bef391fba0dc2e7d521bbf1d78bbc319706871e16d1179853d9d3706ed0c060ae22691b61287db19cf12a5d0b", 0xa5}, {&(0x7f0000000780)="837aad8f0bf51c1cab5144539c0e9d8c8dcdfd5ae6bb259ff1f33884f5060ecfb92e27b27a13edb1272055e15683e05a760cb048b4212840721cf646b79cbdb6028b56cdf47a4a45ac1dd83bf0fce94c930a4670773c452baa1f03426e0a1328d7daa30f70ac6d03d1e639ff3329a2b23c881ba54b1b374623328b1b3ef9d7b84d340aa01bca54a84957b226a5bc181063a0a71cf8fe0e5bfeec0ddfad1b58378d8ac9e095a51d6541b27bd19f423f1989826fbdc319c4e121662cb8b04a8252b9fb015d4525e36283a8a994", 0xcc}, {&(0x7f00000003c0)="fe48214aafe2339f603eb4addd027f5bbe3759c93cfd24177d88fb911aaeebf67245adf67632123c70ff80dc73d77afb7a9192ab64fa0ad741d94904e2271d", 0x3f}, {&(0x7f0000000880)="a87d8bbcf29923e068475370edb234814e293b539bbada56de705c13123878abe12cdba69608a51b1b57d24d19d0b7a7c76e32c713ec73081e9a42cb66e0c2ab6b1c399c451d6edeb82e8504fef8d65ce0756084d273a7e1c32404b35560800c387e6ccfa77539eb84663428b968cb3d1125c64589735c44f6e5ae721addda9a0430d36a7c28b56775a2d07a890b3d26598cf3b11fe305ce16002d4be59c3888ec478a38e1083e3b5f54d6e01483ea3ab8e5684e551d1062c25dc611f3d8425ee4e1fdc150ab4bde34c7a22691ef20682677046603eaf31e6e6864065287a8eccba709c3144941535de9a38bfebe599104e5aa3933", 0xf5}], 0x4, &(0x7f0000000980)=[{0x58, 0x18b, 0x131a, "f96caf87f567eb0be819b1ec3b55b972c07c43d584ea0bfb14b391c0ff4b8d9a031414b65e77b72415487ab9c62a131bc8c5745425f5f1305a52e6842f3e019a5a"}, {0xd0, 0x0, 0x3, "5fc646b326829fa68f749ad55e12f4ade37d4715c92938712ff41e38b6168b001a1ffe876e26dfb1e8fb25a80f8094649f1c89fa86153fc26e311cccd538bc16e93d746a23e4867a8b1c03460e0579b1bd219b8a27b17e8db26e5a4a8b6904a0f90d25f05267d633d5fd257efd001642d03cf38db4d4b41386c9470502798b0de7224d97b9ff1677ae84ad65ea11414f68fdf22e9c5d54aef9a9660dbe1c62c23e9f13f84178b16af4ef36875ea028faf9deb4b1aa1040bf8d87c341"}, {0x30, 0x111, 0x0, "5d72ebd931b9df90e4fe78c5b8f29df01b4f7f649c8dc0178bcbd78c66e3"}], 0x158}, 0x0) 00:20:26 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/91, 0x5b, 0x80, 0x8}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023b0001010000000005240000000d2407010000000000000200000905820200000000080905030200008100"/64], 0x0) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x3) [ 1295.370538][T28266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1295.388554][T28261] CPU: 0 PID: 28261 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 1295.398924][T28261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1295.409005][T28261] Call Trace: [ 1295.412303][T28261] [ 1295.415257][T28261] dump_stack_lvl+0xcd/0x134 [ 1295.419896][T28261] should_fail.cold+0x5/0xa [ 1295.424436][T28261] _copy_from_user+0x2a/0x170 [ 1295.429147][T28261] move_addr_to_kernel.part.0+0x31/0x110 [ 1295.434903][T28261] __sys_bind+0xda/0x250 [ 1295.439188][T28261] ? __ia32_sys_socketpair+0xf0/0xf0 [ 1295.444512][T28261] ? lock_downgrade+0x6e0/0x6e0 [ 1295.449399][T28261] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1295.455406][T28261] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1295.461505][T28261] __x64_sys_bind+0x6f/0xb0 [ 1295.466045][T28261] do_syscall_64+0x35/0xb0 [ 1295.470491][T28261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1295.476448][T28261] RIP: 0033:0x7faafce89279 [ 1295.480887][T28261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1295.500529][T28261] RSP: 002b:00007faafe039168 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1295.508972][T28261] RAX: ffffffffffffffda RBX: 00007faafcf9bf80 RCX: 00007faafce89279 00:20:26 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000000)="ed41000000100000dbf4655fdcbe37a3fae85445eb0000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c03e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001700)=0x0) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) lstat(&(0x7f0000001a80)='./bus\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000003c0)="78d2431440da3e0792070dbf", 0xc}, {&(0x7f0000000480)="d7f680e21373bff1532d5273670fd380d3fd3d97ebd46e382016cfa0364f093d57de665392fe5c1f6c53bd796b45fe3e7d3a5582c61434c7db10b5e6d2947d376d965eceaaf512b8bf439ae102f0bbc4a9664c5631b2497ca568ff1cae8e77a88c63e3826955db9a03e584cb971f58373469c32bb7ffc4efea08e136db0c8d98faafb9406f20c1bbd95c7b71b6b3b6d59cab1e51675ca81747d29fd26dff8c0946a0c8340c", 0xa5}, {0x0}, {&(0x7f0000001640)}], 0x4, &(0x7f0000001880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x40001}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001980)="2de4ccb04a02c1eb266f847bcc417a51", 0x10}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}], 0xc8}}], 0x2, 0x8800) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000340)="1f4bbd0553ad086c3385eeb1ba79f4946ccbdc1b37b9a2059694e60327d7246046cd81c6fbc4cafd26750c44acb76315df40e6e7ac164d5cbc1701dbd1998ab17930624000387cc5aeb61d5fa84925312931b5b793eabd898aac6783c05bc0c61cc8c3a47bd337f4b732bf7e6354665ad16774baaef1", 0x76}, {&(0x7f00000003c0)="6cfeda1eea2e35d770ac8dac339cec9a0b5e2729fe9b78c5cc506c64b694a68cde506d70c2a395574365bbd8c519f23568e2abc385bb669d50c5bf1f5345b11480ee219c71939bdfb7de07d425ed8195642ba3dc695fa27c698870cfa6c8bdd22f601429fc51a7017717dc56fe7879562e36ce3bc13e0983969b47c00dcf8860c2311994b77255b3c76b4d71e2b418edb7d2f1f59d5877607fd7253db7c66e141f0ae38a4b36a871057bf51855bc6b5e03adc0cb6fcb4d9c", 0xb8}, {&(0x7f0000000180)="e59694ea66a23bfed4eb7bdb12a20047be4f9db06ea9f010f2c2d20cd3b1a246ced21cfefa1908", 0x27}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0xfd}, {&(0x7f0000001580)="1cc55f380e7c6c33967c59f03b9e9f682c7d3103db9c7041360e9d9272966f6282eef230505e0669ca9ed116c2daeddc69212405b3734a20aabb667ed69a18c9b26c766aacd0", 0x46}], 0x6, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x60, 0x20048810}}], 0x1, 0xc041) 00:20:26 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x2) (fail_nth: 2) 00:20:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r6, 0x2, 0x8e, &(0x7f0000000000)="af247ed6da61e517e8967bd9fdf7deef43cefa24354f1cd54d32bbb67c38c9edb357b166986840db894492902767a51db8cdba499b3263e196af7a0b5fe6c4def01ca74f2843717bfddef57277bfe218b46c77081b5d7fa303206b62c5c5af590e892215c2276a5f69134567beecc1dfb02a8c6481e019b9296991c17b0b2cb0f71cdf10a516b7e9d4f290b6375b", 0x8, 0x98, 0x1, 0x800, 0x8, 0xaf2cbec5de21ca0, 0xf46c, 'syz0\x00'}) [ 1295.516964][T28261] RDX: 0000000000000010 RSI: 0000000020000240 RDI: 0000000000000005 [ 1295.524957][T28261] RBP: 00007faafe0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.524969][T28271] loop2: detected capacity change from 0 to 512 [ 1295.533101][T28261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.533120][T28261] R13: 00007ffd91ff1bcf R14: 00007faafe039300 R15: 0000000000022000 [ 1295.533141][T28261] 00:20:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) (fail_nth: 2) 00:20:27 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x2) (fail_nth: 3) [ 1296.449504][T28271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1296.473497][T28286] FAULT_INJECTION: forcing a failure. [ 1296.473497][T28286] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:20:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1296.489829][T28286] CPU: 1 PID: 28286 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 1296.500052][T28286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1296.510130][T28286] Call Trace: [ 1296.513431][T28286] [ 1296.516387][T28286] dump_stack_lvl+0xcd/0x134 [ 1296.521012][T28286] should_fail.cold+0x5/0xa [ 1296.525550][T28286] _copy_to_user+0x2a/0x140 [ 1296.530083][T28286] simple_read_from_buffer+0xcc/0x160 [ 1296.535497][T28286] proc_fail_nth_read+0x187/0x220 [ 1296.540558][T28286] ? proc_fault_inject_read+0x220/0x220 [ 1296.546145][T28286] ? security_file_permission+0xab/0xd0 [ 1296.551727][T28286] vfs_read+0x257/0x930 [ 1296.555920][T28286] ? proc_fault_inject_read+0x220/0x220 [ 1296.561506][T28286] ? kernel_read+0x1c0/0x1c0 [ 1296.566135][T28286] ? __fget_files+0x26a/0x440 [ 1296.570840][T28286] ksys_read+0x127/0x250 [ 1296.575127][T28286] ? vfs_write+0xdd0/0xdd0 [ 1296.575613][ T144] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1296.579552][T28286] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1296.592994][T28286] do_syscall_64+0x35/0xb0 [ 1296.597420][T28286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1296.603322][T28286] RIP: 0033:0x7faafce3be2c [ 1296.607747][T28286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1296.627383][T28286] RSP: 002b:00007faafe039160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1296.635806][T28286] RAX: ffffffffffffffda RBX: 00007faafcf9bf80 RCX: 00007faafce3be2c 00:20:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7bfba7cb46433073d628000000160028ebec01002cbd706cabfc00fcdbdf250220c4fe", @ANYRES32=0x0, @ANYBLOB="080008000001000008000400ac1414436866bcf851131ff81a5cb24f1c682e503fe78dbc13ab1d2a3f91428ce8ac7aa02d19e621dae56873177a74e2b7c659df3040ba8d8f23cafc3d04dab2eff308b953269537d38b9c58b142b260e0eaa8342997717958aa6ace28aab669db63c0410d74ae3c746b880be643df4d4131db6f624317aa06ac7c6c0e65f31a0549b592a096d53e5d8095f510f10b554dee42e112b1bbacf69e4878ec74f686d02b73cfad2ecadd02529b6c9098c5e0ed65c863d7d76ff69f14190d2bec8811b66a18dea45805896f0d53c72fbf76a932a915b907ddc410ca8651e0186af4f7f7f81bebf8456ce23471e30c"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (rerun: 64) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x8, &(0x7f0000001f80)=[{0x0, 0x0, 0x400}, {&(0x7f0000010200)}, {&(0x7f0000010400)="160000005e887e7b23", 0x9}, {0x0, 0x0, 0xbff}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x80000000000000}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00da9bccad002100000000001f2b6fe2f96a3f6d2f93ca9700b41d32f92fce90e61dc18e8c44810000e4259e66934175a7e35b9cc4c0e894a793926020f83dc4da84d3c69b0200000067c4eb317d9510c86b996c4c95074763bcb45a1b27d72d69e41d5490584127f1be46d68441f24cc08bc114b8640a1c284a042bad52ed8715cb1335cc80259162dda27f90d1944ee4d82b1aa0b548e7393f3e00bc4cc5b3e3c8219821d391264cefcf708eaeebb789e308a53a50e9c16d7ad1c27b4952e4dc878a3cf617e0558e6a4835afa1ac000000", @ANYBLOB="2c3c6b38358fdab0e79f4957df4c09df02d27e00e3cab70e060baf0ec49d79ac1a80b29ea3a09f80a661828cbb748b0c6ef69e6b456d1ae595bf9672e398ed6d65f31c2104e7ed052eb0e1804a7c30763f02acfb789d7f8cf36147e8bdf62a0a8138cd597564c39cbb66ebab9c73f21f538ba74456c42960bd50d38ad9d7dac4b1e58cb7b7c4dcb5c0eb035c1355b4bdd061a6100f9e44bef54b6a65bf9f38495a3105f2e637feb931322c2deed2e1385deb2d4bd7583835ce59f1e8391fec2fee683f56a0746e413c07ab8c1bfbb0f6c61be7f801dcd51d8db5531e7f68bbb9d4a11e0bf4baff07fbff1024a5781436cafb00739de6d44e0f93c98670ee6e6ac8590800c0a8007c669f2323e8fc024cd51940d0742b9faed4bf4b7e1ebe6624f0c8e3c7fa5cb5919bbf193099f5df71b7e045d520529ee1c1ff64857d2d3cd4362df3c413f9266a829917d0500400c53043de546bd23a303d1c1a6239535db5a57e7210183e4d5199e3387da8927c578463437cb1f68bff3712d3ffb48f0997ec1402347d3da02160682dfe87a323cff9384d01"]) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2140, &(0x7f0000000c40)=@l2={0x1f, 0x6, @none, 0xec, 0x1}, 0x80) (async, rerun: 32) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="c737f7d57175eaf5a2eeb5b8ef9712c64fa1c9d38b2db803d3ca5767c1ff80eb1075beb53a4cac5506ac02bdea17bff3f18fe1b4789a01e6a72cbcc4a52b66e13b0920f0398dbaffe1ff375d8a57e6d950d3621ebf37b4c20188c29e8896696f8c9a8c96c462f566dcebf18d5e0b8a15ab9363757ff4a2f19bef391fba0dc2e7d521bbf1d78bbc319706871e16d1179853d9d3706ed0c060ae22691b61287db19cf12a5d0b", 0xa5}, {&(0x7f0000000780)="837aad8f0bf51c1cab5144539c0e9d8c8dcdfd5ae6bb259ff1f33884f5060ecfb92e27b27a13edb1272055e15683e05a760cb048b4212840721cf646b79cbdb6028b56cdf47a4a45ac1dd83bf0fce94c930a4670773c452baa1f03426e0a1328d7daa30f70ac6d03d1e639ff3329a2b23c881ba54b1b374623328b1b3ef9d7b84d340aa01bca54a84957b226a5bc181063a0a71cf8fe0e5bfeec0ddfad1b58378d8ac9e095a51d6541b27bd19f423f1989826fbdc319c4e121662cb8b04a8252b9fb015d4525e36283a8a994", 0xcc}, {&(0x7f00000003c0)="fe48214aafe2339f603eb4addd027f5bbe3759c93cfd24177d88fb911aaeebf67245adf67632123c70ff80dc73d77afb7a9192ab64fa0ad741d94904e2271d", 0x3f}, {&(0x7f0000000880)="a87d8bbcf29923e068475370edb234814e293b539bbada56de705c13123878abe12cdba69608a51b1b57d24d19d0b7a7c76e32c713ec73081e9a42cb66e0c2ab6b1c399c451d6edeb82e8504fef8d65ce0756084d273a7e1c32404b35560800c387e6ccfa77539eb84663428b968cb3d1125c64589735c44f6e5ae721addda9a0430d36a7c28b56775a2d07a890b3d26598cf3b11fe305ce16002d4be59c3888ec478a38e1083e3b5f54d6e01483ea3ab8e5684e551d1062c25dc611f3d8425ee4e1fdc150ab4bde34c7a22691ef20682677046603eaf31e6e6864065287a8eccba709c3144941535de9a38bfebe599104e5aa3933", 0xf5}], 0x4, &(0x7f0000000980)=[{0x58, 0x18b, 0x131a, "f96caf87f567eb0be819b1ec3b55b972c07c43d584ea0bfb14b391c0ff4b8d9a031414b65e77b72415487ab9c62a131bc8c5745425f5f1305a52e6842f3e019a5a"}, {0xd0, 0x0, 0x3, "5fc646b326829fa68f749ad55e12f4ade37d4715c92938712ff41e38b6168b001a1ffe876e26dfb1e8fb25a80f8094649f1c89fa86153fc26e311cccd538bc16e93d746a23e4867a8b1c03460e0579b1bd219b8a27b17e8db26e5a4a8b6904a0f90d25f05267d633d5fd257efd001642d03cf38db4d4b41386c9470502798b0de7224d97b9ff1677ae84ad65ea11414f68fdf22e9c5d54aef9a9660dbe1c62c23e9f13f84178b16af4ef36875ea028faf9deb4b1aa1040bf8d87c341"}, {0x30, 0x111, 0x0, "5d72ebd931b9df90e4fe78c5b8f29df01b4f7f649c8dc0178bcbd78c66e3"}], 0x158}, 0x0) (rerun: 32) [ 1296.643796][T28286] RDX: 000000000000000f RSI: 00007faafe0391e0 RDI: 0000000000000006 [ 1296.651782][T28286] RBP: 00007faafe0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.659766][T28286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.667744][T28286] R13: 00007ffd91ff1bcf R14: 00007faafe039300 R15: 0000000000022000 [ 1296.675721][T28286] [ 1296.692375][T28288] ERROR: Out of memory at tomoyo_realpath_from_path. 00:20:27 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x2) (fail_nth: 4) 00:20:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0x10) 00:20:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7bfba7cb46433073d628000000160028ebec01002cbd706cabfc00fcdbdf250220c4fe", @ANYRES32=0x0, @ANYBLOB="080008000001000008000400ac1414436866bcf851131ff81a5cb24f1c682e503fe78dbc13ab1d2a3f91428ce8ac7aa02d19e621dae56873177a74e2b7c659df3040ba8d8f23cafc3d04dab2eff308b953269537d38b9c58b142b260e0eaa8342997717958aa6ace28aab669db63c0410d74ae3c746b880be643df4d4131db6f624317aa06ac7c6c0e65f31a0549b592a096d53e5d8095f510f10b554dee42e112b1bbacf69e4878ec74f686d02b73cfad2ecadd02529b6c9098c5e0ed65c863d7d76ff69f14190d2bec8811b66a18dea45805896f0d53c72fbf76a932a915b907ddc410ca8651e0186af4f7f7f81bebf8456ce23471e30c"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x8, &(0x7f0000001f80)=[{0x0, 0x0, 0x400}, {&(0x7f0000010200)}, {&(0x7f0000010400)="160000005e887e7b23", 0x9}, {0x0, 0x0, 0xbff}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x80000000000000}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00da9bccad002100000000001f2b6fe2f96a3f6d2f93ca9700b41d32f92fce90e61dc18e8c44810000e4259e66934175a7e35b9cc4c0e894a793926020f83dc4da84d3c69b0200000067c4eb317d9510c86b996c4c95074763bcb45a1b27d72d69e41d5490584127f1be46d68441f24cc08bc114b8640a1c284a042bad52ed8715cb1335cc80259162dda27f90d1944ee4d82b1aa0b548e7393f3e00bc4cc5b3e3c8219821d391264cefcf708eaeebb789e308a53a50e9c16d7ad1c27b4952e4dc878a3cf617e0558e6a4835afa1ac000000", @ANYBLOB="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"]) recvfrom(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2140, &(0x7f0000000c40)=@l2={0x1f, 0x6, @none, 0xec, 0x1}, 0x80) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="c737f7d57175eaf5a2eeb5b8ef9712c64fa1c9d38b2db803d3ca5767c1ff80eb1075beb53a4cac5506ac02bdea17bff3f18fe1b4789a01e6a72cbcc4a52b66e13b0920f0398dbaffe1ff375d8a57e6d950d3621ebf37b4c20188c29e8896696f8c9a8c96c462f566dcebf18d5e0b8a15ab9363757ff4a2f19bef391fba0dc2e7d521bbf1d78bbc319706871e16d1179853d9d3706ed0c060ae22691b61287db19cf12a5d0b", 0xa5}, {&(0x7f0000000780)="837aad8f0bf51c1cab5144539c0e9d8c8dcdfd5ae6bb259ff1f33884f5060ecfb92e27b27a13edb1272055e15683e05a760cb048b4212840721cf646b79cbdb6028b56cdf47a4a45ac1dd83bf0fce94c930a4670773c452baa1f03426e0a1328d7daa30f70ac6d03d1e639ff3329a2b23c881ba54b1b374623328b1b3ef9d7b84d340aa01bca54a84957b226a5bc181063a0a71cf8fe0e5bfeec0ddfad1b58378d8ac9e095a51d6541b27bd19f423f1989826fbdc319c4e121662cb8b04a8252b9fb015d4525e36283a8a994", 0xcc}, {&(0x7f00000003c0)="fe48214aafe2339f603eb4addd027f5bbe3759c93cfd24177d88fb911aaeebf67245adf67632123c70ff80dc73d77afb7a9192ab64fa0ad741d94904e2271d", 0x3f}, {&(0x7f0000000880)="a87d8bbcf29923e068475370edb234814e293b539bbada56de705c13123878abe12cdba69608a51b1b57d24d19d0b7a7c76e32c713ec73081e9a42cb66e0c2ab6b1c399c451d6edeb82e8504fef8d65ce0756084d273a7e1c32404b35560800c387e6ccfa77539eb84663428b968cb3d1125c64589735c44f6e5ae721addda9a0430d36a7c28b56775a2d07a890b3d26598cf3b11fe305ce16002d4be59c3888ec478a38e1083e3b5f54d6e01483ea3ab8e5684e551d1062c25dc611f3d8425ee4e1fdc150ab4bde34c7a22691ef20682677046603eaf31e6e6864065287a8eccba709c3144941535de9a38bfebe599104e5aa3933", 0xf5}], 0x4, &(0x7f0000000980)=[{0x58, 0x18b, 0x131a, "f96caf87f567eb0be819b1ec3b55b972c07c43d584ea0bfb14b391c0ff4b8d9a031414b65e77b72415487ab9c62a131bc8c5745425f5f1305a52e6842f3e019a5a"}, {0xd0, 0x0, 0x3, "5fc646b326829fa68f749ad55e12f4ade37d4715c92938712ff41e38b6168b001a1ffe876e26dfb1e8fb25a80f8094649f1c89fa86153fc26e311cccd538bc16e93d746a23e4867a8b1c03460e0579b1bd219b8a27b17e8db26e5a4a8b6904a0f90d25f05267d633d5fd257efd001642d03cf38db4d4b41386c9470502798b0de7224d97b9ff1677ae84ad65ea11414f68fdf22e9c5d54aef9a9660dbe1c62c23e9f13f84178b16af4ef36875ea028faf9deb4b1aa1040bf8d87c341"}, {0x30, 0x111, 0x0, "5d72ebd931b9df90e4fe78c5b8f29df01b4f7f649c8dc0178bcbd78c66e3"}], 0x158}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7bfba7cb46433073d628000000160028ebec01002cbd706cabfc00fcdbdf250220c4fe", @ANYRES32=0x0, @ANYBLOB="080008000001000008000400ac1414436866bcf851131ff81a5cb24f1c682e503fe78dbc13ab1d2a3f91428ce8ac7aa02d19e621dae56873177a74e2b7c659df3040ba8d8f23cafc3d04dab2eff308b953269537d38b9c58b142b260e0eaa8342997717958aa6ace28aab669db63c0410d74ae3c746b880be643df4d4131db6f624317aa06ac7c6c0e65f31a0549b592a096d53e5d8095f510f10b554dee42e112b1bbacf69e4878ec74f686d02b73cfad2ecadd02529b6c9098c5e0ed65c863d7d76ff69f14190d2bec8811b66a18dea45805896f0d53c72fbf76a932a915b907ddc410ca8651e0186af4f7f7f81bebf8456ce23471e30c"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x0, &(0x7f0000000200)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x8, &(0x7f0000001f80)=[{0x0, 0x0, 0x400}, {&(0x7f0000010200)}, {&(0x7f0000010400)="160000005e887e7b23", 0x9}, {0x0, 0x0, 0xbff}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x80000000000000}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00da9bccad002100000000001f2b6fe2f96a3f6d2f93ca9700b41d32f92fce90e61dc18e8c44810000e4259e66934175a7e35b9cc4c0e894a793926020f83dc4da84d3c69b0200000067c4eb317d9510c86b996c4c95074763bcb45a1b27d72d69e41d5490584127f1be46d68441f24cc08bc114b8640a1c284a042bad52ed8715cb1335cc80259162dda27f90d1944ee4d82b1aa0b548e7393f3e00bc4cc5b3e3c8219821d391264cefcf708eaeebb789e308a53a50e9c16d7ad1c27b4952e4dc878a3cf617e0558e6a4835afa1ac000000", @ANYBLOB="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"]) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2140, &(0x7f0000000c40)=@l2={0x1f, 0x6, @none, 0xec, 0x1}, 0x80) (async) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="c737f7d57175eaf5a2eeb5b8ef9712c64fa1c9d38b2db803d3ca5767c1ff80eb1075beb53a4cac5506ac02bdea17bff3f18fe1b4789a01e6a72cbcc4a52b66e13b0920f0398dbaffe1ff375d8a57e6d950d3621ebf37b4c20188c29e8896696f8c9a8c96c462f566dcebf18d5e0b8a15ab9363757ff4a2f19bef391fba0dc2e7d521bbf1d78bbc319706871e16d1179853d9d3706ed0c060ae22691b61287db19cf12a5d0b", 0xa5}, {&(0x7f0000000780)="837aad8f0bf51c1cab5144539c0e9d8c8dcdfd5ae6bb259ff1f33884f5060ecfb92e27b27a13edb1272055e15683e05a760cb048b4212840721cf646b79cbdb6028b56cdf47a4a45ac1dd83bf0fce94c930a4670773c452baa1f03426e0a1328d7daa30f70ac6d03d1e639ff3329a2b23c881ba54b1b374623328b1b3ef9d7b84d340aa01bca54a84957b226a5bc181063a0a71cf8fe0e5bfeec0ddfad1b58378d8ac9e095a51d6541b27bd19f423f1989826fbdc319c4e121662cb8b04a8252b9fb015d4525e36283a8a994", 0xcc}, {&(0x7f00000003c0)="fe48214aafe2339f603eb4addd027f5bbe3759c93cfd24177d88fb911aaeebf67245adf67632123c70ff80dc73d77afb7a9192ab64fa0ad741d94904e2271d", 0x3f}, {&(0x7f0000000880)="a87d8bbcf29923e068475370edb234814e293b539bbada56de705c13123878abe12cdba69608a51b1b57d24d19d0b7a7c76e32c713ec73081e9a42cb66e0c2ab6b1c399c451d6edeb82e8504fef8d65ce0756084d273a7e1c32404b35560800c387e6ccfa77539eb84663428b968cb3d1125c64589735c44f6e5ae721addda9a0430d36a7c28b56775a2d07a890b3d26598cf3b11fe305ce16002d4be59c3888ec478a38e1083e3b5f54d6e01483ea3ab8e5684e551d1062c25dc611f3d8425ee4e1fdc150ab4bde34c7a22691ef20682677046603eaf31e6e6864065287a8eccba709c3144941535de9a38bfebe599104e5aa3933", 0xf5}], 0x4, &(0x7f0000000980)=[{0x58, 0x18b, 0x131a, "f96caf87f567eb0be819b1ec3b55b972c07c43d584ea0bfb14b391c0ff4b8d9a031414b65e77b72415487ab9c62a131bc8c5745425f5f1305a52e6842f3e019a5a"}, {0xd0, 0x0, 0x3, "5fc646b326829fa68f749ad55e12f4ade37d4715c92938712ff41e38b6168b001a1ffe876e26dfb1e8fb25a80f8094649f1c89fa86153fc26e311cccd538bc16e93d746a23e4867a8b1c03460e0579b1bd219b8a27b17e8db26e5a4a8b6904a0f90d25f05267d633d5fd257efd001642d03cf38db4d4b41386c9470502798b0de7224d97b9ff1677ae84ad65ea11414f68fdf22e9c5d54aef9a9660dbe1c62c23e9f13f84178b16af4ef36875ea028faf9deb4b1aa1040bf8d87c341"}, {0x30, 0x111, 0x0, "5d72ebd931b9df90e4fe78c5b8f29df01b4f7f649c8dc0178bcbd78c66e3"}], 0x158}, 0x0) (async) [ 1296.779130][T28298] FAULT_INJECTION: forcing a failure. [ 1296.779130][T28298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.792972][T28298] CPU: 0 PID: 28298 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 1296.803192][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1296.813276][T28298] Call Trace: [ 1296.816576][T28298] [ 1296.819535][T28298] dump_stack_lvl+0xcd/0x134 [ 1296.824161][T28298] should_fail.cold+0x5/0xa [ 1296.828704][T28298] _copy_from_user+0x2a/0x170 [ 1296.833413][T28298] dma_buf_ioctl+0x5f3/0x840 [ 1296.838100][T28298] ? dma_buf_poll_add_cb+0x280/0x280 [ 1296.843421][T28298] ? selinux_file_ioctl+0xb1/0x270 [ 1296.848588][T28298] ? dma_buf_poll_add_cb+0x280/0x280 [ 1296.853922][T28298] __x64_sys_ioctl+0x193/0x200 [ 1296.858720][T28298] do_syscall_64+0x35/0xb0 [ 1296.863173][T28298] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1296.869105][T28298] RIP: 0033:0x7f08d6489279 [ 1296.873543][T28298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1296.893351][T28298] RSP: 002b:00007f08d7547168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.901795][T28298] RAX: ffffffffffffffda RBX: 00007f08d659bf80 RCX: 00007f08d6489279 [ 1296.909791][T28298] RDX: 0000000020000280 RSI: 0000000040086200 RDI: 0000000000000006 [ 1296.917781][T28298] RBP: 00007f08d75471d0 R08: 0000000000000000 R09: 0000000000000000 00:20:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1296.925789][T28298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.933763][T28298] R13: 00007ffcbb3ea2ff R14: 00007f08d7547300 R15: 0000000000022000 [ 1296.941756][T28298] [ 1296.981902][ T3652] EXT4-fs (loop2): unmounting filesystem. [ 1297.062030][ T144] usb 2-1: device descriptor read/64, error 18 [ 1297.585562][ T144] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1297.775647][ T144] usb 2-1: device descriptor read/64, error 18 [ 1297.896731][ T144] usb usb2-port1: attempt power cycle [ 1298.305602][ T144] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1298.405745][ T144] usb 2-1: Invalid ep0 maxpacket: 1 00:20:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/91, 0x5b, 0x80, 0x8}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023b0001010000000005240000000d2407010000000000000200000905820200000000080905030200008100"/64], 0x0) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/91, 0x5b, 0x80, 0x8}) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023b0001010000000005240000000d2407010000000000000200000905820200000000080905030200008100"/64], 0x0) (async) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x3) (async) 00:20:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2}, 0x10) 00:20:29 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000000)="ed41000000100000dbf4655fdcbe37a3fae85445eb0000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[]) (async) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c03e, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r1, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (rerun: 64) sendfile(r2, r2, 0x0, 0x8080ffffff80) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) (async, rerun: 32) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001700)=0x0) (async) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) (async) lstat(&(0x7f0000001a80)='./bus\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000003c0)="78d2431440da3e0792070dbf", 0xc}, {&(0x7f0000000480)="d7f680e21373bff1532d5273670fd380d3fd3d97ebd46e382016cfa0364f093d57de665392fe5c1f6c53bd796b45fe3e7d3a5582c61434c7db10b5e6d2947d376d965eceaaf512b8bf439ae102f0bbc4a9664c5631b2497ca568ff1cae8e77a88c63e3826955db9a03e584cb971f58373469c32bb7ffc4efea08e136db0c8d98faafb9406f20c1bbd95c7b71b6b3b6d59cab1e51675ca81747d29fd26dff8c0946a0c8340c", 0xa5}, {0x0}, {&(0x7f0000001640)}], 0x4, &(0x7f0000001880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x40001}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001980)="2de4ccb04a02c1eb266f847bcc417a51", 0x10}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}], 0xc8}}], 0x2, 0x8800) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000340)="1f4bbd0553ad086c3385eeb1ba79f4946ccbdc1b37b9a2059694e60327d7246046cd81c6fbc4cafd26750c44acb76315df40e6e7ac164d5cbc1701dbd1998ab17930624000387cc5aeb61d5fa84925312931b5b793eabd898aac6783c05bc0c61cc8c3a47bd337f4b732bf7e6354665ad16774baaef1", 0x76}, {&(0x7f00000003c0)="6cfeda1eea2e35d770ac8dac339cec9a0b5e2729fe9b78c5cc506c64b694a68cde506d70c2a395574365bbd8c519f23568e2abc385bb669d50c5bf1f5345b11480ee219c71939bdfb7de07d425ed8195642ba3dc695fa27c698870cfa6c8bdd22f601429fc51a7017717dc56fe7879562e36ce3bc13e0983969b47c00dcf8860c2311994b77255b3c76b4d71e2b418edb7d2f1f59d5877607fd7253db7c66e141f0ae38a4b36a871057bf51855bc6b5e03adc0cb6fcb4d9c", 0xb8}, {&(0x7f0000000180)="e59694ea66a23bfed4eb7bdb12a20047be4f9db06ea9f010f2c2d20cd3b1a246ced21cfefa1908", 0x27}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0xfd}, {&(0x7f0000001580)="1cc55f380e7c6c33967c59f03b9e9f682c7d3103db9c7041360e9d9272966f6282eef230505e0669ca9ed116c2daeddc69212405b3734a20aabb667ed69a18c9b26c766aacd0", 0x46}], 0x6, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x60, 0x20048810}}], 0x1, 0xc041) (rerun: 32) 00:20:29 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x2) (fail_nth: 5) 00:20:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 00:20:29 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1298.520896][T28326] loop2: detected capacity change from 0 to 512 [ 1298.524604][T28322] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1298.538901][T28322] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1298.545809][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1298.545823][ T27] audit: type=1800 audit(1660522829.227:920): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1298.547315][T28322] CPU: 1 PID: 28322 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 1298.564047][ T27] audit: type=1800 audit(1660522829.227:921): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1298.575043][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1298.575057][T28322] RIP: 0010:release_udmabuf+0xcb/0x4f0 [ 1298.622515][T28322] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 04 00 00 48 8d 7d 0c 4c 8b 63 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e2 [ 1298.642207][T28322] RSP: 0018:ffffc90004657d58 EFLAGS: 00010246 [ 1298.648270][T28322] RAX: dffffc0000000000 RBX: ffffffff8cb5f040 RCX: 0000000000000000 [ 1298.656256][T28322] RDX: 0000000000000000 RSI: ffffffff84acdb30 RDI: 0000000000000000 [ 1298.664222][T28322] RBP: fffffffffffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 1298.672188][T28322] R10: 0000000000000000 R11: 000000000008c07c R12: ffff88801f1ea000 [ 1298.680165][T28322] R13: ffff8880896f49a0 R14: ffff8880794276c0 R15: 0000000000000000 [ 1298.688134][T28322] FS: 0000555556e60400(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 1298.697074][T28322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.703666][T28322] CR2: 00007f08d7546ff8 CR3: 0000000025b2c000 CR4: 00000000003506e0 [ 1298.711657][T28322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1298.719626][T28322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1298.727591][T28322] Call Trace: [ 1298.730956][T28322] [ 1298.733880][T28322] dma_buf_release+0x157/0x2d0 [ 1298.738648][T28322] ? dmabuffs_dname+0x240/0x240 [ 1298.743495][T28322] __dentry_kill+0x42b/0x640 [ 1298.748093][T28322] ? dput+0x35/0xdb0 [ 1298.751985][T28322] ? dput+0x35/0xdb0 [ 1298.755876][T28322] dput+0x806/0xdb0 [ 1298.759679][T28322] __fput+0x39c/0x9d0 [ 1298.763659][T28322] task_work_run+0xdd/0x1a0 [ 1298.768163][T28322] exit_to_user_mode_prepare+0x23c/0x250 [ 1298.773880][T28322] syscall_exit_to_user_mode+0x19/0x50 [ 1298.779349][T28322] do_syscall_64+0x42/0xb0 [ 1298.783761][T28322] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1298.789652][T28322] RIP: 0033:0x7f08d643bebb [ 1298.794061][T28322] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 1298.813672][T28322] RSP: 002b:00007ffcbb3ea360 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1298.822167][T28322] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f08d643bebb [ 1298.830133][T28322] RDX: 00007f08d65a0428 RSI: ffffffffffffffff RDI: 0000000000000006 [ 1298.838099][T28322] RBP: 00007f08d659d980 R08: 0000000000000000 R09: 00007f08d65a0430 [ 1298.846065][T28322] R10: 00007ffcbb3ea460 R11: 0000000000000293 R12: 000000000013d022 [ 1298.854031][T28322] R13: 00007ffcbb3ea460 R14: 00007f08d659bf80 R15: 0000000000000032 [ 1298.862003][T28322] [ 1298.865019][T28322] Modules linked in: 00:20:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0xa}, 0x10) 00:20:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0043eeffffffff00280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r4}, 0x10) bind$xdp(r3, &(0x7f0000000240), 0xf) 00:20:29 executing program 3: ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000300)={0x4, 0x0, [{0x6, 0x3, 0x0, 0x0, @msi={0x7ff, 0x0, 0x8, 0x10000}}, {0x7, 0x2, 0x0, 0x0, @adapter={0x3, 0x7fffffffffffffff, 0x2, 0x1, 0x5}}, {0x9, 0x2, 0x0, 0x0, @irqchip={0x2, 0x1}}, {0x1000, 0x4, 0x0, 0x0, @sint={0x6, 0x366}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000001280)={0x0, 0xfb, 0x139, 0x0, 0x0, "6c09ecfa2d815613e88c55159d7bde32", "8b9314c8d1dc44832863a17d12ec2253589e73b5c026fe20b4f2bc4d6745fad01b0041044fe001ec106e50dfacc64cf2bcc833d311dba624b3230f03e9314c67d4fab8a9c195da879993bc0576be338045c6f7ebec34525327dee2513fcfc161aba086c36bcc7ff841837a13db49d1a6a292803b5f2607697305c8efff328aa4add29c3d5a9b355d529e9c19acc03ecbd5ac4f5c2bac6e7c8fb53753c2d19810bb6a83b3dabce4dd49e235644183b782a10eec2776574195989a709fa4e083f8f3b87c5f6ddbef3dc977cbe84d2fbca58a518b051f76eab38a082aab990b8ac4d07549d1ec109f732478290e3cb60b154a1edd1a85544391bca7da8dcfcc205cf3038f42c0e8722eca37128b07d107d985f7250de5d54682f6244e739ec8f4ed8bf77a5a"}, 0x139, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 00:20:29 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000000)="ed41000000100000dbf4655fdcbe37a3fae85445eb0000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) (async) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c03e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600204, 0x7ffffe, 0x4002011, r1, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (rerun: 64) sendfile(r2, r2, 0x0, 0x8080ffffff80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001700)=0x0) (async) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) (async) lstat(&(0x7f0000001a80)='./bus\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000003c0)="78d2431440da3e0792070dbf", 0xc}, {&(0x7f0000000480)="d7f680e21373bff1532d5273670fd380d3fd3d97ebd46e382016cfa0364f093d57de665392fe5c1f6c53bd796b45fe3e7d3a5582c61434c7db10b5e6d2947d376d965eceaaf512b8bf439ae102f0bbc4a9664c5631b2497ca568ff1cae8e77a88c63e3826955db9a03e584cb971f58373469c32bb7ffc4efea08e136db0c8d98faafb9406f20c1bbd95c7b71b6b3b6d59cab1e51675ca81747d29fd26dff8c0946a0c8340c", 0xa5}, {0x0}, {&(0x7f0000001640)}], 0x4, &(0x7f0000001880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x40001}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001980)="2de4ccb04a02c1eb266f847bcc417a51", 0x10}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}], 0xc8}}], 0x2, 0x8800) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000340)="1f4bbd0553ad086c3385eeb1ba79f4946ccbdc1b37b9a2059694e60327d7246046cd81c6fbc4cafd26750c44acb76315df40e6e7ac164d5cbc1701dbd1998ab17930624000387cc5aeb61d5fa84925312931b5b793eabd898aac6783c05bc0c61cc8c3a47bd337f4b732bf7e6354665ad16774baaef1", 0x76}, {&(0x7f00000003c0)="6cfeda1eea2e35d770ac8dac339cec9a0b5e2729fe9b78c5cc506c64b694a68cde506d70c2a395574365bbd8c519f23568e2abc385bb669d50c5bf1f5345b11480ee219c71939bdfb7de07d425ed8195642ba3dc695fa27c698870cfa6c8bdd22f601429fc51a7017717dc56fe7879562e36ce3bc13e0983969b47c00dcf8860c2311994b77255b3c76b4d71e2b418edb7d2f1f59d5877607fd7253db7c66e141f0ae38a4b36a871057bf51855bc6b5e03adc0cb6fcb4d9c", 0xb8}, {&(0x7f0000000180)="e59694ea66a23bfed4eb7bdb12a20047be4f9db06ea9f010f2c2d20cd3b1a246ced21cfefa1908", 0x27}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0xfd}, {&(0x7f0000001580)="1cc55f380e7c6c33967c59f03b9e9f682c7d3103db9c7041360e9d9272966f6282eef230505e0669ca9ed116c2daeddc69212405b3734a20aabb667ed69a18c9b26c766aacd0", 0x46}], 0x6, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x60, 0x20048810}}], 0x1, 0xc041) 00:20:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000044c0)=@can_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 1298.872967][T28322] ---[ end trace 0000000000000000 ]--- [ 1298.888955][T28326] EXT4-fs: failed to create workqueue [ 1298.889167][T28322] RIP: 0010:release_udmabuf+0xcb/0x4f0 [ 1298.894393][T28326] EXT4-fs (loop2): mount failed 00:20:29 executing program 3: ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000300)={0x4, 0x0, [{0x6, 0x3, 0x0, 0x0, @msi={0x7ff, 0x0, 0x8, 0x10000}}, {0x7, 0x2, 0x0, 0x0, @adapter={0x3, 0x7fffffffffffffff, 0x2, 0x1, 0x5}}, {0x9, 0x2, 0x0, 0x0, @irqchip={0x2, 0x1}}, {0x1000, 0x4, 0x0, 0x0, @sint={0x6, 0x366}}]}) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) (async) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000001280)={0x0, 0xfb, 0x139, 0x0, 0x0, "6c09ecfa2d815613e88c55159d7bde32", "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"}, 0x139, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 1298.951006][ T27] audit: type=1800 audit(1660522829.227:922): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1298.960022][T28322] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 04 00 00 48 8d 7d 0c 4c 8b 63 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e2 [ 1299.028950][T28322] RSP: 0018:ffffc90004657d58 EFLAGS: 00010246 [ 1299.035385][T28322] RAX: dffffc0000000000 RBX: ffffffff8cb5f040 RCX: 0000000000000000 [ 1299.037116][ T27] audit: type=1800 audit(1660522829.227:923): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.044043][T28322] RDX: 0000000000000000 RSI: ffffffff84acdb30 RDI: 0000000000000000 [ 1299.079800][ T27] audit: type=1800 audit(1660522829.227:924): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.089392][T28322] RBP: fffffffffffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 1299.107041][ T27] audit: type=1800 audit(1660522829.267:925): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.132851][ T27] audit: type=1800 audit(1660522829.267:926): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.136660][T28322] R10: 0000000000000000 R11: 000000000008c07c R12: ffff88801f1ea000 [ 1299.155374][ T27] audit: type=1800 audit(1660522829.267:927): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.185329][ T27] audit: type=1800 audit(1660522829.587:928): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1299.207243][ T27] audit: type=1800 audit(1660522829.677:929): pid=28345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 1299.232328][T28322] R13: ffff8880896f49a0 R14: ffff8880794276c0 R15: 0000000000000000 [ 1299.240715][T28322] FS: 0000555556e60400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1299.249921][T28322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.256862][T28322] CR2: 0000001b2f327000 CR3: 0000000025b2c000 CR4: 00000000003506f0 [ 1299.264876][T28322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1299.273844][T28322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1299.281943][T28322] Kernel panic - not syncing: Fatal exception [ 1299.288072][T28322] Kernel Offset: disabled [ 1299.292391][T28322] Rebooting in 86400 seconds..