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"/3972], &(0x7f0000000100)='GPL\x00'}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES8=r6, @ANYRESHEX, @ANYBLOB=',mmap,loose,appraise_type=imasig,rootcontext=room,smackfsdef=,smackfstransmute=,euid<', @ANYRESHEX=r7, @ANYRESHEX=r8]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 00:10:28 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x200, 0x0) 00:10:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 00:10:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 00:10:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x1000000, 0x0, 0x0, 0x400000) 00:10:28 executing program 4: r0 = socket(0x1e, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={0x0}}, 0x951) 00:10:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="1e5222de63cc6887a89a053dfc2bb9e97a05f7e9b18dbb0835c251d8a0d0948c6837128c8ca2bce03c66760b9b25dbf8983825e51c94dfd3b8567531", 0x3c) 00:10:28 executing program 4: syz_read_part_table(0x0, 0x40, 0x0) 00:10:28 executing program 3: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 00:10:28 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101201, 0x0) 00:10:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"/3972], &(0x7f0000000100)='GPL\x00'}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES8=r6, @ANYRESHEX, @ANYBLOB=',mmap,loose,appraise_type=imasig,rootcontext=room,smackfsdef=,smackfstransmute=,euid<', @ANYRESHEX=r7, @ANYRESHEX=r8]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 00:10:28 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101201, 0x0) 00:10:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) 00:10:28 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101201, 0x0) 00:10:28 executing program 3: socketpair(0x25, 0x5, 0x4, 0x0) 00:10:29 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040)=0x7ffffffd, 0x4) 00:10:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"/3972], &(0x7f0000000100)='GPL\x00'}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES8=r6, @ANYRESHEX, @ANYBLOB=',mmap,loose,appraise_type=imasig,rootcontext=room,smackfsdef=,smackfstransmute=,euid<', @ANYRESHEX=r7, @ANYRESHEX=r8]) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 00:10:29 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101201, 0x0) 00:10:29 executing program 3: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x59c739fe}], 0x0, &(0x7f0000000100)) 00:10:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x0, @rand_addr=0x64010101}], 0x20) 00:10:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x2000000, 0x0, 0x0, 0x400000) 00:10:29 executing program 2: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x100c00) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 00:10:29 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) 00:10:29 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/zram0', 0x26400, 0x0) [ 629.392449][T25554] loop3: detected capacity change from 0 to 71481 00:10:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:10:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), 0xe) [ 629.472334][T25554] vxfs: WRONG superblock magic 00000000 at 1 00:10:29 executing program 4: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x0, 0x700}}) 00:10:29 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 00:10:29 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) [ 629.521770][T25554] vxfs: WRONG superblock magic 00000000 at 8 [ 629.545652][T25554] vxfs: can't find superblock. 00:10:29 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) 00:10:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x40000002}, 0x8) 00:10:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x6000000, 0x0, 0x0, 0x400000) 00:10:29 executing program 4: syz_mount_image$ubifs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002540)=[{&(0x7f0000000340)="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", 0xf01, 0x100}, {&(0x7f00000024c0)="bf", 0x1, 0x8000000000000000}], 0x0, 0x0) 00:10:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x301000) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 00:10:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local, @broadcast, @local, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 00:10:29 executing program 5: socketpair(0x25, 0x801, 0x0, 0x0) 00:10:29 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x40010, r0, 0x0) 00:10:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 00:10:29 executing program 1: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 00:10:29 executing program 1: socketpair(0xa, 0x0, 0x7ff, 0x0) 00:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) 00:10:29 executing program 3: syz_mount_image$ubifs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)) [ 629.877472][T25591] x_tables: duplicate underflow at hook 1 [ 629.894267][T25595] loop4: detected capacity change from 0 to 8192 00:10:29 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000000040)="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", 0x1e2}]) [ 629.979429][T25610] loop1: detected capacity change from 0 to 16383 [ 630.006263][ T2971] blk_print_req_error: 14 callbacks suppressed [ 630.006276][ T2971] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 630.039274][ T2971] buffer_io_error: 12 callbacks suppressed [ 630.039320][ T2971] Buffer I/O error on dev loop1, logical block 0, async page read [ 630.096072][ T2971] loop1: AHDI p1 p2 p3 [ 630.100822][ T2971] loop1: p1 start 2253562858 is beyond EOD, truncated [ 630.108313][ T2971] loop1: p2 start 1091540188 is beyond EOD, truncated [ 630.117585][T25610] loop1: AHDI p1 p2 p3 [ 630.122217][T25610] loop1: p1 start 2253562858 is beyond EOD, truncated [ 630.129601][T25610] loop1: p2 start 1091540188 is beyond EOD, truncated [ 630.175897][ T3808] I/O error, dev loop1, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:10:30 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:10:30 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 00:10:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0x7c}, 0xc) 00:10:30 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x519002, 0x0) 00:10:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x7000000, 0x0, 0x0, 0x400000) 00:10:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x6}], 0x1c) 00:10:30 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)) 00:10:30 executing program 4: syz_open_dev$cec(0xfffffffffffffffe, 0x1, 0x2) 00:10:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) 00:10:30 executing program 3: syz_clone(0x4810400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x7c}, 0xc) 00:10:30 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x0) 00:10:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @broadcast}], 0x20) 00:10:30 executing program 5: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x0) 00:10:30 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local, @broadcast, @local}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 00:10:30 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "02aca320"}}) [ 630.443196][T25641] x_tables: duplicate underflow at hook 1 00:10:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x8000000, 0x0, 0x0, 0x400000) 00:10:30 executing program 5: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000001880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 00:10:30 executing program 1: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:10:30 executing program 3: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="d87b27b96f88152ee6168baeaf", 0xd, 0x59c739fe}, {&(0x7f00000000c0)="e75346ef8454a74d4043722c6a2a2592e19a4d163c0bed252c", 0x19}, {&(0x7f00000001c0)="e397f31bcbf21dc93a6e86976b5a22474a", 0x11, 0x8001}, {&(0x7f0000000240)='\x00', 0x1, 0x3ff0000}], 0x0, &(0x7f0000000100)={[{'/\x00'}, {'\xfa.@*%+'}, {'('}, {'[:x/,^*'}, {'\x98\v*'}, {'),-&\x0e'}]}) 00:10:30 executing program 4: io_setup(0x7ffe, &(0x7f0000000440)=0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff0f}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001480)="7442fba23e5c19d5a4a3ef29acb62fadf220c67ed202ca60fd9a57828d83610bc5adb136461527925f71a21ccb6db52853ac74f408f7958da132deec83bd0aed49f4fe2e38693ab8a6cb0842b1bc459644becc7a216a9b63c40b22c725df6d5f5c18eef2f3452215444dbd067661a14f92f6274b3c69693f9129820606a8955297097ac37ad19ec11e6cfec1584ed08a791f70b356e914dd2e4b9fd89e2f6588c167df18705d4588e3c33532380ac18759f8e1a901e44cb0495a0b6eefe505a333dfb8038a022b8f47961f3a63da51a449e5823761910ddb797c84ac6117f9f80f4131fbcc19f47a531d8b810feddb2caefa6433ef1f67d640e4b5c64ad3f6410d5bd39030b17456806fa3b19d2e968b45280bd7d32d2a2f4ee19ed3bed561655b539fa2aba1167ab3b540c47e2fece88093cc7d0142e9af628371f599ede37583104bd27db290be2059509933a045e9f3a971186861844fc8fedb54bcc706c1fed3291298a7e05943789f3f4d0df8aa23d9cb430379bbd580e67a843fffca470b028ec1f93f18c593bb7c115f0cf6f2f858945463fad41463a2af10f28153c8c33ff353e6fefb6e5267138a7680aafd1b20d96619b77bfdf6ef64b9cc6b8a185283f3161455c33dc340bb4cce576d002b941ce76c99fd45d504fa9079a4af96a6a5469cae3876c8b40ba0fe131b0dab4ec969b778533c21692f19601a1345045be7be492cb59c0f439c08790eb39e999987b3577ca82ffd2386f18de6ce432f124d4c18ad06e721a249d64e579bf5ee58c4f10761161fcde81279ce017a3894dc7b704f81d8d50a5fe24dddc42088def36a614a31f1d9ca200c00000000000000ee4caf75813728f2b728880aeb74f9e1c552fc146308def39afa2dc3ae19be57d50f12592b0b1a47220245f2f5281df37ff796b98eccb9f771a700cf69f940e6f686cdbe9eb27be06ce561cc3718988690ba14bd8261c07a742e3969e3df07150a12ccac3ccdc04bb4f6da1a6dba1d0e7acf2f7f7e9554664546c2f464aa040aa65896b90a5a1bb2d3c552de492e29b517599d86c315a41453e33f2e79a3ce132de1da15bedb1fe59e61526adb9b9ffc3d91bf2d7966e6694e0bf85e1456d178528b3e5aa738769442c1556837728c149485aea9bae2609d27f638655193052f8ac0be21569072eb739489bbdda7e78e40af5f6fe9ae15ef14a998b0bb629539c6fb91fca6475a3ac4b7f5d86f8dc7e237c61fdc9fb1850a908be75d6b50d04c8167fd9d2bdebb93335f785caf9799512452105442da6e9eb8189c33d56bac2e3e517449494dec12480bdba01453ece9570fef2e42ed7a79bcc0a128d2f8166bafa253bc9edba53819b47b46628e03e0e04e164567114ea6c53935dae5b4c61f9c3bc86e9744280fe356a5ceea56a25d9ffabb908e1fbdbe62e4b7d33111f268a96a409b8231670c27de5abfd876bfefec93fb9290bbd20f49582ebef4f4ed23f053a615f0b62926259bda50cc158266953af7d758ed0d7a8fd23af917ce19325b3134e61f83966c3e250a5373fce2ce984139115d78faa205d4ae9d01e203cf4c8adc150cf8f2b2f78eb84b4f54fc1cec1e773a2ba46be02c519ec31b9ea0152e4f7426c4c154cfe1dfe3825359a9943e88c913bdf8c7ce0d0260f395437415c274d3e9294d3a50eb95dcbcbbb35e169089836522146df26af2e4dc23cd7fdb35078471656bdf32a244ca8d9dcbdadcbdabb7b6c47cce403246772a6020e6d8eff2a74151825870a90b2b2a0203a8451633f4573a503c9ab7e3250fc72a3d99e46cb9594309002aa3c3b0efecc9988223be28c2fd42acdc3a61483e9fdf8cc902b93f375f5106860524739b78110367f21fd325aa451d6e6de8903efad11f28be2bf3023273a0e140e2b183284084318cf8b7f7fbc498ea507e5383f641100faf7356f7ed7d5d9904573e8a38a1de40610cb7557bf26241bdf0edcca220cd4ea72b791e73a239aea181b9d536a8b3349adcf82f08245f7bc51945341658893354fda91fa430e43b6296be3e9a7dd2b5c522e3bc973e3c4ffa8346971f51ed2511218529ad7c4e32aa60cb546aeaafb6a255e32322eb7570bd89a236de6d185b44bb49e2948010019faba226c2fa720a2a0047e91cbf201189453f0096ae31e7978b7d3ea4276384a592843a63b41495a8d39bfc47bd83bdea45ec83e803354825767bc79da27ac590b6a8aacca2c06c1718ffa749adf7ccbf3bfe58503f31a0a3bb8d6a69d35500c513b67b959d2ebe237abc8122f03102c5f7b6e2951aa92d9ccc93392963d0c0c8aa3d2cfab530fca3aa05e7b2bf8ca7f13216337e26c5cf940721a80ca41988dc9740b9e1258762889f02d10c811dc881db7bd1a450db0e65cfc218b39f919ea0cf6cb831f92622758e0f07979fd2e90f1133bf209e4c1f3fa137efb58af034ddb2cf95ec1b6ed944885cb1ce185d7a844823e6f20affde05167ba8e576ba5750a00cf590000000400dcf07db5c4e1d04009f386a360f357efee9703656100ba66502fbb4f4c5c2711af19f52121acd778a6fa707e290499c2d44006726f02501b5d28a4fc2dff2f4dc2c3f446be2ad0c07e108cbb37aaf5fbe5a5029a21ea1d8ea66015cf98448d39812c8baa56d0ce4eb227ea6d336122addd4ff8a231ad5c676e7a2ac2e9dccecc48e917cd5400b2110e8dd0b867f32b6e3e26538b94692cb64ce8e45828eb8ee672ccbed291386706cd63a8a004e468e7ca13545ac635daa325fa312288167061dc6bedc4b89e11cf35363fa4109d695cb85fc85f538d6414d9b6c61ffdead2bf6f7b3e118cbae24ca7e71b6b9691504bea7d05307c6fefb3e1e5a8fa63f9abafe4684cd44f17f7095d5234e19ba57548e2d7437bf97b0b3c23e3ab53debd45762ba81af73a60a8eedfd214ca11ad7e4f7449e1ca044c42d42deda92b699329e805166ecdd97aeafa4ecb0f8671e23ae3dbec1c0546d8158af2ea3023ebda5b0a6a8770f49b3a7e717ebfcaf8ee01cd351d6b7f01d2a139f68258633ba68dfe5c5d91bbd0de0051ab3f9cfa5e276c242678c2c33f69bd0c2c9bbb57fcbf3974bb58a2b12308606cdcabc1fcd762231747cd2969e432ad99927e76cd7b8bf72c04afdc42677ae28556015f5bebc561d349a57f022ad0b528b5a1f4d182a3eac819ab338bc119c290857801a9227ce73b54d9e0357faa0a746648460963e1cf2b50790b35170d047da760fc2aa6bb4a4697d17f9235ee2924fdc4e061c753b2fe56395c51309a9a6c1e7815fd8015c2a768f51700ba0a783bc5d83e93dba7a5f6040a813b7791bc90d5129d1e491949f49192836dda634e74fbc9a7c38fbbf03317d45991d0f727181f8e799da12733ca39a16dfce20555a0de9139ff075505137c5f029ca0aeba19d0e102c69c303050c29c64042ad33e1baed3d489284d56a9e6fa7d09815a4a7d8a3d28668fa7b5256a606b3cd31d15ef133cb191852bff6ca86448c3b0c4f0ec4bca68d3f0ecbe94f954988e7414c759f3c03c2235b8842e2c32bd3c562b82d6274372bd4985df48f6400ecf203a4688dd7e6c59c20dfbddbe2188c2d6b8111141c9f0e61e484aa6e563dd560b4ce7b7a3a1a22eb2bd2bac2303cf344ac3ffe86a23f4847254cd1fb6b601abb4bdfeaf45d53e35fb7af88216d423389d74ecb4e3bcf3aa3a7d07f1d0710fb1a7e7817072babb877232b4f9e8f9ef57acf26a47d24dfe896f25213915ef17c59b5bf2634c0329dd6c5e6cb9f5e1cc552742ae3470a0b5f400b4c34497b630dca0fcf19e47ce9a2e302f5a1865d90b21ed95ce286a69e36b0b1a883a85d3167250597fd570747d4c4269f2bf8fe1d16fd80d8b876dc2f7ba7f96e9247a13e35aa661fef77ea42d947a8edb0af28b00796c7466628980ca8a4991ecbaa6eef5eca61337af61d2ab7f7c72fa9aa1a8f121c780971324af6b43cbf525339ad78b7cf57441b39fb8977c7205645f46c1b634c0edd23dc8f30d8df4249075519205ea050fecb59a6f0587385d2ce6caea31d2c5774e8427577e60a2d2a65d5bf719a2e2a7e9530d29c6678bf998587adbb626ceac6538d17ee56242cc894cdb588c1535d627581cb2afc5dd222387727240585025b810db51f0b9e33f05d5af1ce2866faf8e641cbf4481abb6aac75f18f1b86e5d8dd6a0d4ecd3478a23ebbaf946e5952c1ab9f2023d6316fb4da00edf74f76977718f53ea021e6386342c60edeec3652dbe6a2897b20f0f74ba65738ca083f9607bdfe8816ab9c4baef9da7669f3b5c9a9005465e19e2d7904bd3b513e87746e080b43e6a493b17219854fb0ce5d44eed7faa5fd630e06fbb51cda7e3ab4c41f6608d7df89c885920aa6da3ef502a499847c60df51533468852bca80ede5c1597d614090d2c4f1d17962326c9b9620d1c002bf283b1406eaeb0547ee4c9e05af3b92b2cfe1fd4bfc6908dcc4831b163a66408da739da81f6e78bc40aa8cd6e935ce817c1147122aaa41da3d842df5065ed4fdf61997fc24ebb11cb9d2457ffb5c54622100597efeb3a88b485eda999fffcdf0816c6c5f15fc840ce5aa40f3e7ff63ecf7e08bac983834639f269500436bdabd928db76e7cd0302a0e2d43161603623f0ade9bb2c3c2c9422bb4594170fafec39e72afaae91ed34566b2987cc11ac2fa7f29b9250d6fcac1a6db9638d0b6b5f12669d69b9519e11846dc6cbde1ca64dd6d5780b08758efdbd18b3e41ae40fdef31ab8d1717243bacf8a468bcaeaffac156c87f6ed53342f99b9dfb747f4d4747f6a48c98b207a237cc17fb70e2a42f34cb6dd77d3593e24b3bfa61cf64acb748e3b46a91ea2415e75f728cf2af45d42d0be80181ccafe3ca4e569491e6d5fb58e071988f7f47810cc47f56f37c54e2fc45748a4adecb491d13c3853827e4af519be767d578971c23570e8599460528af6f76ceaf2baf496f5571bf86ca0f5780af97b668debbcfb6d5df8ef525fb8cb61f9337aa9d72b5ef36f0a3a2b594778eee5f5047796e9a185b1d7cc79efec19f987b55f7350d0a9e3ebd982da8ebc4b50cbc8cc0104b0fd9912bc2ffb0524619eb28884a11c936420635afc1eb90349d652f56902531be6358820f37b22a10d660ac6541d1f6b1d30387dfb5574eb5311f70bb56ff2106f80d84053264ffff33d24fef93ca5a6cad44a1fc3a6e524e8f0b0c5e473897519a3ed736a3c5c53a3541803cc3c29481c9d6afacd69ae71be212211b581a1f5c8bc91ca2aa39cce9f4660cc0b597056aa7c68dd1540f7c70e58ff6b4e8f98f2fb7f1ddb3d03bd10fcc5fbbcc27ac0914d87b88bff94faa0e03230d1eee1d945b9a19e248a8cc9880d391e6b9e1031095fd3b03d485540af972cfb78f5c965e8f6fb18c709f0f1a06a89f37ce5efb11e9e27735a71cb76cef530c04da6be3b909e0388fa1702d0cc8bca58859150854ae9f00362c166b8b0fe897a296f52a51f3446f594bb5d55dcf3f6c00e22a62fe83da27a1c37032a0edbf5910475e60a53c2895ac04a0c02a49346ad895b8b6c9e2bdd393bcd5f91af1259da8db74bdab62b379a16fddf4d32fbbd69bbcd590186333157d28e4f4b3a46bd0ce9743e80e317a7e3f6c5b8685a872aa918ff08b5d08f819b49111e77104e0a8f2a582bd494d36cfb1feb4083ea14c435773fa7cebda5bb2539d188ce329f370ca5da64bc1f0745b088b6f3f23c719eb248eeb9df15ea9e0ae843f7eb7f171553a762928941d6a6c920740ea36f74ee74a025e17df646bf137d0c81b847e8f2b5211e8412f7bcf5d2467d0312a4502fc014a4cecad9ecc485b88fd06eee79469627f0440863aaf078c5b7b337ad62dc9ad8c84ef45e0e7a8b603c6a383d9a6937d384f24ec5e15f2fd4de3ed78e919735b6e296094eb3d3be2175e8bbbb524a4db0f058a15084610694aa9e145025de4c3aa4bc6c7e365f88f118255167c2ef6f611e6a4d72088866fdd29e691d8bbec6d1646bdbc48919eac81de760932f90752edb7187b73bd8e104acd8bd71407df16565b05e93b067ca8fafa8d27b69358bdfc68bc678e15e00d3e933be3e84df606cd6b1c7745ac32fbdd47876d70f716e0798", 0x0, 0x1}]) 00:10:30 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f00000001c0)='FROZEN\x00', 0x7) 00:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000175031"], 0x5c}}, 0x0) 00:10:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, 0x84) [ 630.700869][T25654] loop3: detected capacity change from 0 to 261888 [ 630.721818][T25654] vxfs: WRONG superblock magic 00000000 at 1 [ 630.739910][T25654] vxfs: WRONG superblock magic 00000000 at 8 [ 630.746440][T25654] vxfs: can't find superblock. 00:10:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300), 0x8) 00:10:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) 00:10:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) 00:10:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 00:10:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xc000000, 0x0, 0x0, 0x400000) 00:10:31 executing program 2: setfsgid(0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 00:10:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) 00:10:31 executing program 5: socketpair(0x23, 0x0, 0xfffffffe, 0x0) 00:10:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080), &(0x7f0000000140)=0x8) 00:10:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 00:10:31 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 00:10:31 executing program 2: process_vm_writev(0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f0000001680)=[{&(0x7f0000001380)=""/217, 0xd9}, {0x0}], 0x2, 0x0) 00:10:31 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) 00:10:31 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f00000008c0), 0x20000) 00:10:31 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 00:10:31 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x2, &(0x7f0000000000)) 00:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "b29b0965d403e82e0f7a597baf7500e3d4b2b87d5756c9d824fcb4c5c3898a29e8a0804d7ba6014b8a4e67fec9d2dab6fefd6aa752287de9533d2c619f9a10abef93ff31669fc12b6ca0454e233a328e3dcee914a34ec7d1dca3aff737758eedbdaa6d970c9a7eb33164e39327110c700d07262e67161eb2ad2eb07d6c21d63bb64ac0d396393520a4d47237ed64b1e733cfd6093e9dbc1196bf68690b95e777ee"}, @ETHTOOL_A_WOL_MODES={0xdfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xdf5, 0x5, "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"}]}]}, 0xec4}}, 0x0) 00:10:31 executing program 4: socketpair(0x22, 0x0, 0x40, 0x0) 00:10:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 00:10:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x12000000, 0x0, 0x0, 0x400000) 00:10:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:10:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000140), 0x10000, 0x0) 00:10:31 executing program 1: timer_create(0x3, 0x0, &(0x7f00000010c0)) 00:10:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '+@#[%--\x00'}]}, 0x30}}, 0x0) 00:10:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 00:10:31 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x4100, 0x0) 00:10:31 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x2, &(0x7f0000000000)) 00:10:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x84) 00:10:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 631.827707][T25712] nbd: must specify a size in bytes for the device 00:10:31 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="633de8") 00:10:31 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x2, &(0x7f0000000000)) 00:10:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x18000000, 0x0, 0x0, 0x400000) 00:10:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}]}, 0x2c}}, 0x0) 00:10:32 executing program 1: sysfs$2(0x2, 0x6, &(0x7f0000000000)=""/212) 00:10:32 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000004c0)) 00:10:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:10:32 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x2, &(0x7f0000000000)) 00:10:32 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, 0x0) 00:10:32 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000004c0)) 00:10:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000041) 00:10:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:10:32 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000004c0)) 00:10:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x30082) 00:10:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x1d020000, 0x0, 0x0, 0x400000) 00:10:32 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 00:10:32 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/usb', 0x0, 0x0) 00:10:32 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f00000004c0)) 00:10:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:10:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:10:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x400, 0x3, 0x2}, 0x10) 00:10:32 executing program 1: syz_mount_image$ubifs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100004, &(0x7f0000000440)=ANY=[]) 00:10:32 executing program 5: syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000100)={[{'\xfa.@*%+'}, {'('}, {'\x98\v*'}, {'),-&\x0e'}]}) 00:10:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) 00:10:32 executing program 1: syslog(0x2, &(0x7f0000000140)=""/217, 0xd9) 00:10:32 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tpm_tis_core', 0x0, 0x0) 00:10:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x1e000000, 0x0, 0x0, 0x400000) 00:10:32 executing program 2: syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x301000) 00:10:32 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:10:32 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/bnep\x00') 00:10:32 executing program 4: timer_create(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0xa0004100, &(0x7f00000001c0)="adafbdde8c7c5c75fda14e922e89664f810e22345addb9f617d93a5bacc29d813de90ad7cea98a9c5d4561fdf41d1f67dcef3fbc0c5ce0c33a8405a6f7263695898bbdb7b502ed1b6a362456d3565882c9ad13397da54806ce7e6cc61b1b0e9ea908daa925a394d8947a1e1e2b7e0114f8bd31653a12aac2bcf3e744188ce574cef0ab471d6bce4045b5e8622904aa0ebc7081389595122254e9ace64706646781e02450e1b61c09e14ff7b4c6e947d4db07de0163b4", 0xb6, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="e2b9b731ab503500ad154522d38692fa2637691028cb760f1204189a83732cc44eccca14e8bba2a3bcedf11f02c20acaed13c064a9f8488c4cd64e8313ec7bc6410d9481c67e6761e1602746dfd0e520f3791325f157cda4c4ca11a4f387f16bbebb3d8b491f9ea303502a197e5170f389c1030e7de8723d0da713eb77c9a04f034b2053") getpid() 00:10:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 00:10:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02170607dede39"], 0x20}}, 0x0) 00:10:33 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) 00:10:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1a, 0x0, 0x1f, 0x0, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 00:10:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x58) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xf, @private1}, 0x1c) 00:10:33 executing program 1: sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x45) 00:10:33 executing program 2: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 00:10:33 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000380)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) 00:10:33 executing program 3: syz_mount_image$ubifs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x1e020000, 0x0, 0x0, 0x400000) 00:10:33 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000280)) 00:10:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 00:10:33 executing program 2: accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0xc00) 00:10:33 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:10:33 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/time\x00') 00:10:33 executing program 3: syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 00:10:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 00:10:33 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:10:33 executing program 2: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000480)="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", 0x401}]) 00:10:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:10:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x1f000000, 0x0, 0x0, 0x400000) 00:10:33 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 00:10:33 executing program 5: socketpair(0x3, 0x0, 0x98000000, 0x0) 00:10:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x212001, 0x0) 00:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:10:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) [ 633.931911][T25839] nbd: must specify an index to disconnect 00:10:34 executing program 5: timer_create(0x0, 0x0, 0x0) syz_clone(0xa0004100, &(0x7f00000001c0)="adafbdde8c7c5c75fda14e922e89664f810e22345addb9f617d93a5bacc29d813de90ad7cea98a9c5d4561fdf41d1f67dcef3fbc0c5ce0c33a8405a6f7263695898bbdb7b502ed1b6a362456d3565882c9ad13397da54806ce7e6cc61b1b0e9ea908daa925a394d8947a1e1e2b7e0114f8bd31653a12aac2bcf3e744188ce574cef0ab471d6bce4045b5e8622904aa0ebc7081389595122254e9ace64706646781e02450e1b61c09e14ff7b4c6e947d4db07de0163b4", 0xb6, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="e2b9b731ab503500ad154522d38692fa2637691028cb760f1204189a83732cc44eccca14e8bba2a3bcedf11f02c20acaed13c064a9f8488c4cd64e8313ec7bc6410d9481c67e6761e1602746dfd0e520f3791325f157cda4c4ca11a4f387f16bbebb3d8b491f9ea303502a197e5170f389c1030e7de8723d0da713eb77c9a04f034b20") getpid() 00:10:34 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 00:10:34 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 00:10:34 executing program 4: socket(0x0, 0x80d, 0x0) 00:10:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) 00:10:34 executing program 4: sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/85) 00:10:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x20000000, 0x0, 0x0, 0x400000) 00:10:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 00:10:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:10:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) write$P9_RWALK(r0, 0x0, 0x3d) 00:10:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)) 00:10:34 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_mount_image$vxfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) 00:10:34 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) read$proc_mixer(r0, 0x0, 0x0) 00:10:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote}], 0x1c) 00:10:34 executing program 5: syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) 00:10:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2a8b03) 00:10:34 executing program 2: r0 = socket(0x2, 0x3, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80}}, 0x8881) 00:10:34 executing program 3: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) 00:10:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x22070000, 0x0, 0x0, 0x400000) 00:10:34 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1a, 0x200, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 00:10:34 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/module', 0x443, 0x0) 00:10:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)={0x14}, 0x4}}, 0x0) 00:10:34 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='c') 00:10:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:10:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}}, 0x90) 00:10:34 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$proc_mixer(r0, 0x0, 0x6f) 00:10:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x30}, 0xc) 00:10:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x20) 00:10:34 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40402) 00:10:34 executing program 4: io_setup(0x7ffe, &(0x7f0000000440)=0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:10:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x24000000, 0x0, 0x0, 0x400000) 00:10:34 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x7ffffffffffffffd}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 00:10:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 00:10:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 00:10:34 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40402) 00:10:34 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0) 00:10:35 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40402) 00:10:35 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001a40)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:10:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:10:35 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00'}) 00:10:35 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40402) 00:10:35 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$proc_mixer(r0, 0x0, 0x6f) 00:10:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x26020000, 0x0, 0x0, 0x400000) 00:10:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @local}, 0x20, {}, 'bridge_slave_1\x00'}) 00:10:35 executing program 4: socket$inet(0x2, 0x0, 0xd55) 00:10:35 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@quota_quantum}]}) 00:10:35 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0xe67ee7997a8f9f4e, 0x0) 00:10:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}]}) 00:10:35 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0x4) 00:10:35 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000840)='id_legacy\x00', 0x0, 0x0) 00:10:35 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_gettime(0x0, 0x0) 00:10:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) [ 635.453306][T25965] gfs2: quota_quantum mount option requires a positive numeric argument 00:10:35 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 00:10:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)) 00:10:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x2a000000, 0x0, 0x0, 0x400000) 00:10:35 executing program 2: clock_gettime(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 00:10:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x3938700}) 00:10:35 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 00:10:35 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000140)={0x24, @long}, 0x14) 00:10:35 executing program 5: pselect6(0x40, &(0x7f00000007c0), 0x0, 0x0, &(0x7f0000000880)={0x0, 0x989680}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x10001]}, 0x8}) 00:10:35 executing program 4: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2090818, &(0x7f0000000640)) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 00:10:35 executing program 1: getitimer(0x0, &(0x7f0000003980)) 00:10:35 executing program 3: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2710}) 00:10:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x0, 0x2}) 00:10:35 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) 00:10:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={0x0, &(0x7f0000001a80)=""/4096, 0x0, 0x1000, 0x1}, 0x20) 00:10:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x2e040000, 0x0, 0x0, 0x400000) 00:10:36 executing program 5: syz_io_uring_setup(0x1d47, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) 00:10:36 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000480)) 00:10:36 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) 00:10:36 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'y\x00'}}]}) socket(0x1a, 0x803, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2, 0x14, 0x0) 00:10:36 executing program 4: syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x0) 00:10:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "ca"}]}}, &(0x7f0000000240)=""/251, 0x2a, 0xfb, 0x1}, 0x20) 00:10:36 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 00:10:36 executing program 2: syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x120b008, &(0x7f00000008c0)={[{'*-'}], [{@dont_measure}]}) 00:10:36 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 00:10:36 executing program 4: syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[], [{@smackfsfloor}]}) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2, 0x14, 0x0) [ 636.140686][T26018] tmpfs: Unknown parameter 'smackfstransmute' 00:10:36 executing program 3: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000016c0)=[{0x0, 0x0, 0x4fd}, {&(0x7f0000000600)="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", 0x1db, 0x5}], 0x0, &(0x7f0000002f40)) [ 636.244525][T26033] loop3: detected capacity change from 0 to 4 [ 636.250689][ T2971] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 636.290074][ T2971] Buffer I/O error on dev loop3, logical block 0, async page read [ 636.307679][ T2971] Dev loop3: unable to read RDB block 4 [ 636.316194][ T2971] loop3: unable to read partition table [ 636.323517][ T2971] loop3: partition table beyond EOD, truncated [ 636.330439][T26033] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 636.396748][ T3808] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 636.407342][ T3808] Buffer I/O error on dev loop3, logical block 0, async page read [ 636.416061][ T3808] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 636.425943][ T3808] Buffer I/O error on dev loop3, logical block 1, async page read 00:10:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x2f000000, 0x0, 0x0, 0x400000) 00:10:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, 0x0) 00:10:36 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e10f043051fffffff00074000632f77fb05140e0ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39050108038da1924425181aa5", 0x0, 0x1e00, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830e3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7007c0605a0ffffffff"}, 0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "7e9d5783ddb5943232218feff5fa6094858f08c79f1cdb464d3a203179b19b04"}) 00:10:36 executing program 4: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:36 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) 00:10:36 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40049409, 0x0) 00:10:36 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)) 00:10:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="da4979cc"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa) 00:10:36 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0xffff, '\x00', 0x0}) 00:10:36 executing program 2: syz_mount_image$adfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580), &(0x7f0000000100), 0x2, 0x0) 00:10:36 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="ec22f07e1b88c2295b", 0x9, 0x5}, {&(0x7f0000000140)="d674571a4ff3bbb303010c69b5586dbcfbcfcfd298bef3066048f6cb9e971eaf6a5819cb850a9364b8cf166b17d026ca65f6da704d85d2068ece4e04e4d9562a8db66a3d80b05813c096a510f8daa67cb5b81ebfbb2670fd8559a9308eb4221f59e85752e3d5eb57dddff302cdc567b54240e5ae2e6f1724868eae6bc89c4a2b83bf6f25f3f42fb905336d9e57f9ab2af51b6271759e01ab4c8179ce915037c52f8ef2d803c54f411b07de2e033cb033437bf7f01a47aaf34d2b008b7b16199dd2a5575c", 0xc4, 0x7}]) 00:10:36 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/27, 0x1b) modify_ldt$read_default(0x2, 0x0, 0x0) 00:10:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x30000000, 0x0, 0x0, 0x400000) 00:10:37 executing program 2: r0 = memfd_secret(0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}) 00:10:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@norecovery}, {@dax}, {@journal_path={'journal_path', 0x3d, './file0'}}]}) 00:10:37 executing program 4: syz_io_uring_setup(0x4905, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:10:37 executing program 3: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) 00:10:37 executing program 1: syz_mount_image$afs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x200c970, &(0x7f0000000680)) 00:10:37 executing program 5: io_uring_setup(0x9, &(0x7f00000000c0)) 00:10:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x44048011, 0x0, 0x0) 00:10:37 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x11c0cc, 0x0) 00:10:37 executing program 3: syz_mount_image$adfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580), &(0x7f0000000100), 0x2, 0x0) [ 637.177765][T26075] fuse: Invalid rootmode 00:10:37 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x41, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001700), 0xa2400, 0x0) 00:10:37 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x0, &(0x7f00000001c0)) 00:10:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x32060000, 0x0, 0x0, 0x400000) 00:10:37 executing program 4: syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@discard_size}]}) 00:10:37 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x0, &(0x7f00000001c0)) 00:10:37 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f00000014c0), 0x40000, 0x0) 00:10:37 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) 00:10:37 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680), 0x264040, 0x0) 00:10:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 00:10:37 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) [ 637.518179][T26098] Mount JFS Failure: -22 00:10:37 executing program 2: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000006c0)={[{@statfs_quantum}]}) 00:10:37 executing program 5: socket(0x0, 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x10) 00:10:37 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004840)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x11c0cc, &(0x7f0000000400)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.origin\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, '(:[\"+(!4'}}, {@subj_type={'subj_type', 0x3d, 'y\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'y\x00'}}]}) socket(0x1a, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000004980), &(0x7f00000049c0)=0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2, 0x14, 0x0) 00:10:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:root_t:s0\x00'}]}, 0x5c}}, 0x0) [ 637.556456][T26098] jfs_mount failed w/return code = -22 [ 637.576745][T26109] gfs2: not a GFS2 filesystem 00:10:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x35070000, 0x0, 0x0, 0x400000) 00:10:37 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000003b40)=@abs, 0x6e) 00:10:37 executing program 3: syz_mount_image$udf(0x0, 0x0, 0xffff, 0x0, &(0x7f00000003c0), 0x0, 0x0) 00:10:37 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:37 executing program 5: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 00:10:37 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4281, 0x0) 00:10:37 executing program 4: r0 = syz_io_uring_setup(0x2024, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) [ 637.907289][T26124] loop3: detected capacity change from 0 to 127 [ 637.966117][ T3808] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:10:38 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)) 00:10:38 executing program 1: clock_gettime(0x7, &(0x7f0000000940)) 00:10:38 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/bus/dp-aux', 0x258d01, 0x0) 00:10:38 executing program 2: r0 = socket(0xa, 0x1, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) 00:10:38 executing program 3: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}], 0x1, 0x0, &(0x7f0000000a40)={[0x200]}, 0x8) 00:10:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x36000000, 0x0, 0x0, 0x400000) 00:10:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) setxattr$incfs_size(&(0x7f000000e4c0)='./file0\x00', &(0x7f000000e500), &(0x7f000000e540), 0x8, 0x0) 00:10:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x2}, 0x40000060) 00:10:38 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@quota_quantum={'quota_quantum', 0x3d, 0xfffffffffffffffb}}]}) 00:10:38 executing program 2: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, &(0x7f0000000180)={0x4}, 0x0, 0x0) 00:10:38 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000640), 0x10) 00:10:38 executing program 5: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)="12", 0x1}, {0x0}], 0x0, 0x0) [ 638.466501][T26148] fuse: Bad value for 'fd' 00:10:38 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/firmware/acpi', 0x141180, 0x0) 00:10:38 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0xc1d5fda9d0f003c9) 00:10:38 executing program 4: pselect6(0x40, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={0x29d}, 0x0, 0x0) [ 638.522898][T26152] gfs2: Bad value for 'quota_quantum' 00:10:38 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x0, 0x1}]}) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:10:38 executing program 5: syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x120b008, &(0x7f00000008c0)={[{'func'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x39], 0x2d, [0x0, 0x0, 0x62], 0x2d, [0x66, 0x0, 0x63], 0x2d, [0x0, 0x0, 0x0, 0x36], 0x2d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}}}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 00:10:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x3c000000, 0x0, 0x0, 0x400000) 00:10:38 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) unlinkat(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:38 executing program 2: syz_io_uring_setup(0x3b1a, &(0x7f0000000280), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x4905, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 00:10:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) 00:10:38 executing program 1: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x541b, 0x0) 00:10:38 executing program 3: io_uring_setup(0x34a1, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x124}) 00:10:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 00:10:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:10:38 executing program 3: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:38 executing program 5: syz_mount_image$adfs(&(0x7f000000bd00), &(0x7f000000bd40)='./file0\x00', 0x0, 0x0, &(0x7f000000d3c0), 0x0, &(0x7f000000d480)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 00:10:38 executing program 3: socket$bt_rfcomm(0x1f, 0x43199a01703b5db3, 0x3) 00:10:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getstats={0x1c}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x14}, 0x14}}, 0x0) [ 639.022551][ T27] audit: type=1804 audit(639.024:299): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4020099799/syzkaller.kSBkBn/1175/bus" dev="sda1" ino=1173 res=1 errno=0 [ 639.468969][ T27] audit: type=1800 audit(639.024:300): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1173 res=0 errno=0 00:10:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x3f000000, 0x0, 0x0, 0x400000) 00:10:39 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'y\x00'}) 00:10:39 executing program 2: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000016c0)=[{0x0, 0x0, 0x4fd}, {0x0}, {&(0x7f0000000600)="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", 0x1e7, 0x5}], 0x0, &(0x7f0000002f40)) 00:10:39 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) 00:10:39 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 00:10:39 executing program 3: syz_mount_image$vxfs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)) 00:10:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x5451, 0x0) [ 639.696374][T26205] loop2: detected capacity change from 0 to 4 [ 639.716869][T26205] Dev loop2: unable to read RDB block 4 00:10:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) 00:10:39 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000023c0)=[{0x0}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) [ 639.747688][T26205] loop2: unable to read partition table [ 639.771974][T26205] loop2: partition table beyond EOD, truncated [ 639.778532][T26205] ADFS-fs (loop2): error: unable to read block 3, try 0 00:10:39 executing program 2: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 00:10:39 executing program 1: syz_io_uring_setup(0x1d47, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)) 00:10:39 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00') lstat(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) [ 639.793447][T26215] vxfs: WRONG superblock magic 00000000 at 1 [ 639.865939][T26215] vxfs: WRONG superblock magic 00000000 at 8 [ 639.876845][T26215] vxfs: can't find superblock. [ 639.893313][T26222] 9pnet_fd: p9_fd_create_unix (26222): problem connecting socket: ./file0: -111 00:10:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x40000000, 0x0, 0x0, 0x400000) 00:10:40 executing program 4: socket$kcm(0x29, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:40 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 00:10:40 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000500)='./file0\x00', 0x0) 00:10:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_delroute={0x50, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}, @RTA_ENCAP_TYPE={0x6}, @RTA_GATEWAY={0x14, 0x5, @dev}, @RTA_EXPIRES={0x8}, @RTA_IIF]}, 0x50}}, 0x0) 00:10:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)='\'', 0x1}, {&(0x7f0000000600)="ad", 0x1}], 0x2, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, "0dfd70d2179805dd9df62515d800c1dfbe"}], 0x28}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=')', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000050) 00:10:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)) 00:10:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50fa"], 0x50}}, 0x0) 00:10:40 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x801c581f, 0x0) 00:10:40 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0xace, 0x8) [ 640.142044][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000200), 0xfffffffffffffffe, 0x0) 00:10:40 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='logbsize=%,swalloc,norecovery,biosize=000000m5000000000008,nodiscard,logbufs=18446744073709551615,nogrpid,logbsize=1p%k50gk0,fscontext']) 00:10:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x40070000, 0x0, 0x0, 0x400000) 00:10:40 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffff, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@dmode}]}) 00:10:40 executing program 2: syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)) 00:10:40 executing program 3: socket$inet(0x2, 0xa, 0xd55) 00:10:40 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:10:40 executing program 4: syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x0, 0x2, &(0x7f0000003d80)=[{0x0}, {&(0x7f0000002d00)="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", 0x1fd, 0x3}], 0x0, &(0x7f0000003e40)={[{@check_strict}, {}]}) 00:10:40 executing program 5: io_uring_setup(0x25e30, &(0x7f0000000000)) 00:10:40 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x40021, &(0x7f0000001000)) 00:10:40 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) 00:10:40 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@huge_advise}], [{@subj_role={'subj_role', 0x3d, '(:[\"+(!4'}}, {@subj_type={'subj_type', 0x3d, 'y\x00'}}]}) socket(0x1a, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000049c0)) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2={0x2000000, [{}, {0x7}]}, 0x14, 0x0) [ 640.484058][T26253] loop4: detected capacity change from 0 to 1 [ 640.497232][T26259] loop1: detected capacity change from 0 to 127 00:10:40 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffff, 0x1, &(0x7f00000003c0)=[{0x0}], 0x0, &(0x7f0000000440)={[{@dmode}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}]}) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x7f, 0x0, 0x0, 0x3, 0x8d0, 0xefb, 0x9}, &(0x7f0000000800)={0x0, 0x8, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x6}, 0x0, 0x0, &(0x7f0000000900)={0x0}) 00:10:40 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/252, 0x0, 0xfc}, 0x20) [ 640.595382][T26269] tmpfs: Unknown parameter 'subj_role' [ 640.612197][T26259] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 640.626857][T26253] Dev loop4: unable to read RDB block 1 [ 640.639984][T26259] UDF-fs: Scanning with blocksize 512 failed [ 640.647856][T26253] loop4: unable to read partition table [ 640.653621][T26253] loop4: partition table beyond EOD, truncated [ 640.671829][T26259] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 640.690997][T26259] UDF-fs: Scanning with blocksize 1024 failed [ 640.697742][T26253] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 640.706380][T26259] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 640.716278][T26259] UDF-fs: Scanning with blocksize 2048 failed [ 640.722897][T26259] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 640.731535][T26259] UDF-fs: Scanning with blocksize 4096 failed 00:10:40 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)="14", 0x1}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:40 executing program 2: syz_io_uring_setup(0x34bf, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:10:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 00:10:40 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x41070000, 0x0, 0x0, 0x400000) 00:10:40 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)="14", 0x1}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:40 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0xfffffffa, 0x2}) 00:10:41 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14}, 0x14}}, 0x40) 00:10:41 executing program 4: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) 00:10:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 00:10:41 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000780)=@known='system.posix_acl_default\x00') 00:10:41 executing program 1: add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000300)="66719149d3576d73b6429959", 0xc, 0xffffffffffffffff) 00:10:41 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x802000, &(0x7f0000000340)) 00:10:41 executing program 3: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x202) msgctl$IPC_RMID(r0, 0x0) 00:10:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={0x0, &(0x7f0000001a80)=""/4096, 0x0, 0x1000}, 0x20) 00:10:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x42000000, 0x0, 0x0, 0x400000) 00:10:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 00:10:41 executing program 3: syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x120b008, &(0x7f00000008c0)={[], [{@subj_type={'subj_type', 0x3d, '@8:#%,'}}]}) socket$nl_generic(0x10, 0x3, 0x10) 00:10:41 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) 00:10:41 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000780)=@known='system.posix_acl_default\x00') 00:10:41 executing program 4: socket(0xa, 0x0, 0x2e1) 00:10:41 executing program 5: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 00:10:41 executing program 2: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) 00:10:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x5460, 0x0) 00:10:41 executing program 3: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000011c0)=""/136) 00:10:41 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, 0x0, 0x0, 0x70bd2a}, 0x14}}, 0x40) 00:10:41 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}], 0x1, &(0x7f0000000a00), &(0x7f0000000a40), 0x8) 00:10:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x42070000, 0x0, 0x0, 0x400000) 00:10:41 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$sock(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 00:10:41 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0) 00:10:41 executing program 1: pipe2$9p(&(0x7f0000001340), 0x0) 00:10:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) 00:10:41 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10}], 0x10}}], 0x1, 0x0) 00:10:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:10:41 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005a40), 0x210081, 0x0) 00:10:41 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x1000) 00:10:41 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x40) 00:10:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@discard}]}) 00:10:41 executing program 2: r0 = syz_io_uring_setup(0x2451, &(0x7f0000000040), &(0x7f0000cf2000/0x1000)=nil, &(0x7f0000f01000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x0, 0x100010, r0, 0x8000000) [ 642.066296][T26347] XFS (loop3): Invalid superblock magic number 00:10:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x43070000, 0x0, 0x0, 0x400000) 00:10:42 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1669, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff], 0x1) 00:10:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d2ad5288aba7721e53b11362e594652cc1f23f4e", "094bcf20771c1bdd0abbb342af25fa670720eb47"}) 00:10:42 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x10, 0x0) 00:10:42 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)='\'', 0x1}, {&(0x7f0000000600)="ad", 0x1}], 0x2, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, "0dfd70d2179805dd9df62515d800c1dfbe"}], 0x28}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=')', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}, {{&(0x7f0000001040)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ae874793c4b9b4cfee425df17c3537119eb2edade560c61f70abb42a9e39e59a6da27ab351b8dbe1799acd006c03c3c6d852fca657cc5f8300ce98cb02620b"}, 0x80, 0x0}}], 0x4, 0x20000050) 00:10:42 executing program 3: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$llc(r0, 0x0, 0x0, 0x100000) 00:10:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40) 00:10:42 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:10:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000280)) 00:10:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000180)) 00:10:42 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9a33, 0x0) 00:10:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64], 0x1c}}, 0x0) 00:10:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x44070000, 0x0, 0x0, 0x400000) 00:10:42 executing program 1: syz_io_uring_setup(0x78c6, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:10:42 executing program 3: openat$vimc1(0xffffffffffffff9c, &(0x7f000000bb40), 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) syz_mount_image$adfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 00:10:42 executing program 5: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 00:10:42 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000001340), 0x80080) 00:10:42 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={0x0}}, 0x0) 00:10:42 executing program 2: syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x80800, &(0x7f0000000680)) 00:10:42 executing program 5: r0 = io_uring_setup(0x5f8a, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 00:10:42 executing program 1: syz_io_uring_setup(0x78c6, &(0x7f00000001c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:10:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getstats={0x1c}, 0x1c}}, 0x0) 00:10:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 00:10:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) [ 642.753045][ T27] audit: type=1804 audit(642.754:301): pid=26411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3140594792/syzkaller.AcO0TG/1626/bus" dev="sda1" ino=1165 res=1 errno=0 [ 642.841374][ T27] audit: type=1800 audit(642.754:302): pid=26411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1165 res=0 errno=0 00:10:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x46070000, 0x0, 0x0, 0x400000) 00:10:43 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)) 00:10:43 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000600", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040001000000000008"], 0x4c, 0x0) 00:10:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x4020940d, 0x0) 00:10:43 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) socketpair(0xa, 0x1, 0x101, &(0x7f0000000100)) 00:10:43 executing program 2: syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x184c1) [ 643.379198][T26420] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 00:10:43 executing program 3: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_io_uring_setup(0x1669, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200)=[r0], 0x1) [ 643.421700][T26420] UDF-fs: Scanning with blocksize 512 failed [ 643.433736][T26420] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 00:10:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:10:43 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 643.467668][T26420] UDF-fs: Scanning with blocksize 1024 failed 00:10:43 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='logbsize=%']) 00:10:43 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/partitions\x00', 0x0, 0x0) [ 643.517406][T26420] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 643.606884][T26420] UDF-fs: Scanning with blocksize 2048 failed [ 643.621531][ T27] audit: type=1804 audit(643.624:303): pid=26434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3140594792/syzkaller.AcO0TG/1627/bus" dev="sda1" ino=1157 res=1 errno=0 00:10:43 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) [ 643.708490][ T27] audit: type=1800 audit(643.624:304): pid=26434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1157 res=0 errno=0 [ 644.002233][T26420] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 644.013481][T26420] UDF-fs: Scanning with blocksize 4096 failed 00:10:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x49070000, 0x0, 0x0, 0x400000) 00:10:44 executing program 4: r0 = memfd_secret(0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}}) 00:10:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @dev}, &(0x7f0000000100)=0xc) 00:10:44 executing program 1: r0 = io_uring_setup(0x1bc8, &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)) 00:10:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0) 00:10:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0189436, 0x0) [ 644.262677][T26445] fuse: Bad value for 'user_id' 00:10:44 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) 00:10:44 executing program 3: syz_mount_image$udf(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000003c0)="1ac6", 0x2, 0xfff}, {&(0x7f0000000480)="f4", 0x1, 0x3eac0000000}], 0x0, &(0x7f0000000640)) 00:10:44 executing program 1: r0 = io_uring_setup(0x5f8a, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 00:10:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) [ 644.408587][T26458] loop3: detected capacity change from 0 to 135168 00:10:44 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:10:44 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 00:10:44 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x800, "ec6c8289a35d2de1dc49f08184e9f01e4723aaece7bf1d6537aa26e4c8efb6be"}) 00:10:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:10:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6679}]}) 00:10:44 executing program 5: syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1831, &(0x7f0000000600)=ANY=[]) 00:10:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x4a070000, 0x0, 0x0, 0x400000) 00:10:44 executing program 5: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$phonet_pipe(r0, &(0x7f00000000c0), 0x10) 00:10:44 executing program 4: getgroups(0x2, &(0x7f0000000180)=[0xee00, 0xee01]) 00:10:44 executing program 1: syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)={[], [{@seclabel}]}) 00:10:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000b80)) 00:10:44 executing program 2: io_uring_setup(0x34a1, &(0x7f0000000000)={0x0, 0x0, 0x2}) 00:10:44 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0x6, 0x4000) 00:10:44 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000006c0)={[{@localflocks}, {@statfs_quantum}]}) 00:10:44 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 00:10:44 executing program 2: syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) [ 644.724201][T26484] ntfs: (device loop1): parse_options(): Unrecognized mount option seclabel. [ 644.755655][T26484] ntfs: (device loop1): parse_options(): Unrecognized mount option . 00:10:44 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x2710}) 00:10:44 executing program 1: syz_mount_image$xfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x0) 00:10:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x4e070000, 0x0, 0x0, 0x400000) 00:10:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@prjquota}, {@data_journal}]}) 00:10:45 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x1}, 0x6e) 00:10:45 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0x6, 0x4000) 00:10:45 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004840)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x11c0cc, &(0x7f0000000400)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2, 0x14, 0x0) 00:10:45 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:45 executing program 5: r0 = syz_io_uring_setup(0x1669, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200), 0x0) 00:10:45 executing program 3: syz_mount_image$gfs2(&(0x7f00000012c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f0000003700), 0x0, &(0x7f0000003780)={[{@data_writeback}, {@nosuiddir}, {@loccookie}]}) 00:10:45 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x10e0081, &(0x7f0000000900)=ANY=[]) 00:10:45 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)='\'', 0x1}, {&(0x7f0000000600)="ad", 0x1}], 0x2, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, "0dfd70d2179805dd9df62515d800c1dfbe"}], 0x28}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=')', 0x1}], 0x1}}], 0x2, 0x20000050) 00:10:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) [ 645.139171][T26514] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:10:45 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, &(0x7f0000000000)='|', 0x1, 0x0, 0x0, 0x0) [ 645.208495][T26521] gfs2: not a GFS2 filesystem 00:10:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x54070000, 0x0, 0x0, 0x400000) 00:10:45 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)={[{@nls={'nls', 0x3d, 'cp869'}}, {@case_sensitive_yes}, {@errors_continue}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_no}], [{@obj_role={'obj_role', 0x3d, '/U'}}, {@fowner_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'dmode'}}, {@pcr}, {@uid_eq}, {@seclabel}, {@seclabel}]}) 00:10:45 executing program 4: add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000300)='f', 0x1, 0xffffffffffffffff) 00:10:45 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', 0x0}) 00:10:45 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x8}, {0x6679, 0x47, 0x1a, 0x1000}, {0xfffe}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) 00:10:45 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x179847, 0x0) 00:10:45 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000ac85f8356951e3"]) 00:10:45 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="ec", 0x1}, {&(0x7f0000000140)="d6", 0x1}]) 00:10:45 executing program 4: socketpair(0xa, 0x0, 0x0, &(0x7f0000000100)) 00:10:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/206, 0x1a, 0xce, 0x1}, 0x20) [ 645.518308][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option obj_role. 00:10:45 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x11c0cc, &(0x7f0000000400)) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) [ 645.572870][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option fowner<00000000000000000000. [ 645.674077][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option smackfsroot. [ 645.701425][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option pcr. [ 645.722479][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option seclabel. [ 645.734729][T26541] ntfs: (device loop2): parse_options(): Unrecognized mount option secla. 00:10:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x5b070000, 0x0, 0x0, 0x400000) 00:10:46 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)={[{@nls={'nls', 0x3d, 'cp869'}}, {@case_sensitive_yes}, {@errors_continue}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_no}], [{@obj_role={'obj_role', 0x3d, '/U'}}, {@fowner_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'dmode'}}, {@pcr}, {@uid_eq}, {@seclabel}, {@seclabel}]}) 00:10:46 executing program 3: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="12", 0x1}, {&(0x7f0000000240)="c1", 0x1, 0xe16c}, {0x0}], 0x0, 0x0) 00:10:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 00:10:46 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) 00:10:46 executing program 4: syz_mount_image$vxfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14}, 0x14}}, 0x0) 00:10:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x5d070000, 0x0, 0x0, 0x400000) 00:10:46 executing program 1: fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) 00:10:46 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x0, "0ccc5269f66a3367ad02b1d80fa1b792885f9a5c4b76a41873c648ed8b37fdb87b8f09ffb27aed9070ccf67dbb0fa73801e31c8d1183d69f009e866ec1c36933f7b2f1ca5aa20daea36fd3e005c66d9ab837fe7d3ac47f3a817f25bb61f957ac35749ecf0ef626cfaa115515700d0a73ffb4970a296940b3dbb29df79848e5ef"}) 00:10:46 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) 00:10:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 00:10:46 executing program 3: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x4001}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001200)) socket(0x21, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x0, 0x400, 0x70bd27, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004a010}, 0x8004) [ 646.327398][T26566] loop3: detected capacity change from 0 to 225 00:10:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000001a80)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 646.446720][T26583] ntfs: (device loop2): parse_options(): Unrecognized mount option obj_role. [ 646.475361][T26583] ntfs: (device loop2): parse_options(): Unrecognized mount option fowner<00000000000000000000. 00:10:47 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)={[{@nls={'nls', 0x3d, 'cp869'}}, {@case_sensitive_yes}, {@errors_continue}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_no}], [{@obj_role={'obj_role', 0x3d, '/U'}}, {@fowner_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'dmode'}}, {@pcr}, {@uid_eq}, {@seclabel}, {@seclabel}]}) 00:10:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendto$llc(r0, &(0x7f0000000000)='T', 0x1, 0x0, 0x0, 0x0) 00:10:47 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = geteuid() lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000600", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040001000000000008000400", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32], 0x4c, 0x0) 00:10:47 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 00:10:47 executing program 3: pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:10:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x65040000, 0x0, 0x0, 0x400000) 00:10:47 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)) 00:10:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 00:10:47 executing program 4: socket$inet(0x2, 0x3, 0x9) 00:10:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setxattr$system_posix_acl(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_default\x00', &(0x7f0000000840), 0x24, 0x0) 00:10:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0xd08}) 00:10:47 executing program 1: r0 = syz_io_uring_setup(0x1669, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff], 0x1) 00:10:48 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_gettime(0x0, &(0x7f00000000c0)) 00:10:48 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f00000005c0)) 00:10:48 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) 00:10:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setxattr$system_posix_acl(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='system.posix_acl_default\x00', &(0x7f0000000840), 0x24, 0x0) 00:10:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x93010000, 0x0, 0x0, 0x400000) 00:10:48 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x400) 00:10:48 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="98", 0x1}], 0x2}}], 0x1, 0x0) 00:10:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @sdr}) 00:10:48 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 00:10:48 executing program 4: syz_mount_image$gfs2(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:48 executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 00:10:48 executing program 2: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000016c0)=[{0x0, 0x0, 0x4fd}], 0x0, &(0x7f0000002f40)) 00:10:48 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 00:10:48 executing program 1: syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2, 0x14, 0x0) 00:10:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x0, 0x0, 0x0, 0x21, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) [ 648.288587][T26640] loop2: detected capacity change from 0 to 4 00:10:48 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/firmware/acpi', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, 0x0) [ 648.337559][T26640] Dev loop2: unable to read RDB block 4 [ 648.375937][T26640] loop2: unable to read partition table [ 648.402401][T26640] loop2: partition table beyond EOD, truncated [ 648.436198][T26640] ADFS-fs (loop2): error: unable to read block 3, try 0 00:10:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xa6010000, 0x0, 0x0, 0x400000) 00:10:48 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)={0xec4, 0x15, 0x0, 0x0, 0x0, {0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "ef75a8e23150738526e6067292fd6676e8dfce2166aa3d685b54e373af4e90004321b8fa310c52c5689ead2720d9edaa5b8e59553af7ef1d5d3243badb9e4fd786d596d69be00b877cafd9b68d62a2b41d16c95c11ac9f8983dd6879b76330e5aad1f762e50103eff5defc17e9c5d8fb976a2f2fc1c1b510cf70d9"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "6047933536d2958c548c6499202610996fa6d4ec2571f99976a286ed61bd65b5a60501b1d3fd60f068678dc64c6c0939843e997c310e30cec397e01393c0fadd81abb71e198604158b348f0ca2db8553bd82320b288410ef32f25a6a8bf27e06079556f6281b072b6dc5c2e644847b01bfb6d6ce5e8a54e68ce9936bac42646508688429dca99c119464ed8142d9cf26313678c6819776784de1f8edc3372c3030918a6cd8b656801c1b3baebdc40da8dca02be148dca7700c47d9a8c78dff1409d77135b5573ffd0d4fc78fc000bfe697759e3ab545dee0883e7ebffe79af9794223fc0dbf5a9"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "b2dbb3b9d0171fc4bfbc93039908b9ca593d99889663166e0a987ebbc1afd1baac3a2a1bf852edbf57d4983d389e23098ced397ae0082920db1fb51641fb176f40845f0adfee7d7b5b0b9fbb6defafa36e0a79d9ad34553627387eb07703a149b09341cb19c6acc279bb10574ebd579087f0c5e9349fd3708814b74b0692fcf7fe18579a410155cdef541ce023e8c384a08f8ee1c35c7d6920e8ccf2ab0d3e1d441e767e6117fa83262962ed923b0adfa06750284b650917c394b2a515385ef563f490834ecb16fd840a"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "cb3be827a9890c4b2ab7b809eb1e975b6a53ea0ad15b95b6f71719d9810cb07567c9c8c611c0db2ce4531a3ce536e6587eb8facc7c29374a8c9f3c3b0ede0fd493aeebdd6ae52d5e69bb2472f66326e896eec28d5233cc3ddc39975fffa84181d000b7d95e753b06ae4ecb9a41d826a2b7968c8ca7b2a3b9872fcea42cfc19117bc2f0e0f26d703a08b6a532c7ab3bd839a89b6ee96505971115e73a20f44998f4885f4ffc7f57050f9cbbe8dd7da021606cbd20c5456a228b59d2f4f4b95db3be"}, @INET_DIAG_REQ_BYTECODE={0xba8, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}, 0x1, 0x0, 0x0, 0x20000801}, 0x40010) 00:10:48 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.origin\x00'}}]}) socket(0x1a, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) 00:10:48 executing program 1: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) 00:10:48 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/tpm_tis', 0x266e83, 0x0) 00:10:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@func], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000280)=""/247, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0x9dbc, 0x7fffffff}, 0x10}, 0x80) 00:10:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)) 00:10:48 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000e80), 0x24, 0x0) 00:10:48 executing program 4: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x20200) 00:10:48 executing program 5: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x5, 0x4, "3e2bab26", "fa5219f9"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x5, 0x5d, 0x8, 0x0, 0x37c}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x20, 0xa, 0xf0, "e2af63b6cc10ceec3cb45acafacd884a1138836431f125b67bd1bb4eb6308af600e54c4b632bc372b9e2461ff176d0219f913464bb0d3c0676f5d4256ea58b98041bbdac085df144747cee9a6e71024a72d49912b65fc63a2687631e2b9acd69a44b1daad95514ba74d650bbacca7fbd155f73096c13b8354fa19c46a477bac417cfbdb3d101be5921fd0119027e071dc551459493af24da174595b0f49cb2c7f64c8d4fcf38b30f1a202f12252bcf1baef35c2bd6fa4a0f641743805f92659cd235da0afdf8a56a3bc09203dfb9cd8c64ad731b4bbba758b751212fc18202f3dbd2350924c9260f6dcf629b0d14f4c7"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x40, 0x1}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x2d}, &(0x7f0000000780)={0x40, 0xb, 0x2, "2793"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x11b7}, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "491b"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xca}}) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) 00:10:48 executing program 2: syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) socket$rxrpc(0x21, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 00:10:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x0, 0x1, &(0x7f0000003d80)=[{&(0x7f0000002d00)="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", 0x1fd, 0x3}], 0x0, &(0x7f0000003e40)={[{}], [{@subj_type={'subj_type', 0x3d, 'y\x00'}}]}) [ 648.626962][T26653] tmpfs: Unknown parameter 'smackfstransmute' [ 648.731232][T26668] loop1: detected capacity change from 0 to 1 [ 648.752313][ T3808] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.767609][ T3808] Buffer I/O error on dev loop1, logical block 0, async page read [ 648.786356][ T3808] Dev loop1: unable to read RDB block 1 [ 648.809246][ T3808] loop1: unable to read partition table [ 648.819848][ T3808] loop1: partition table beyond EOD, truncated 00:10:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xb6010000, 0x0, 0x0, 0x400000) 00:10:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x4b47, 0x0) 00:10:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20102100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 00:10:49 executing program 4: syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000e00)) 00:10:49 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0xe67ee7997a8f9f4e, 0x0) 00:10:49 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 00:10:49 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2, 0x14, 0x0) 00:10:49 executing program 4: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 00:10:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x5452, 0x0) 00:10:49 executing program 5: syz_mount_image$vxfs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[], [{@context={'context', 0x3d, 'system_u'}}]}) 00:10:49 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x20a0000, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) 00:10:49 executing program 3: socket(0x2, 0x1, 0x8) 00:10:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xb9010000, 0x0, 0x0, 0x400000) 00:10:49 executing program 2: r0 = memfd_secret(0x0) accept(r0, 0x0, 0x0) 00:10:49 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005a40), 0x0, 0x0) 00:10:49 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x10, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e10f043051fffffff00074000632f77fb05140e0ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39050108038da1924425181aa5", 0x0, 0x1e00, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830e3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7007c0605a0ffffffff"}, 0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "7e9d5783ddb5943232218feff5fa6094858f08c79f1cdb464d3a203179b19b04"}) 00:10:49 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xe16c}], 0x0, &(0x7f0000000440)) 00:10:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x6}]}}, &(0x7f0000000280)=""/206, 0x2a, 0xce, 0x1}, 0x20) 00:10:49 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) 00:10:49 executing program 2: syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) 00:10:49 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@ax25={{0x3, @null}, [@rose, @netrom, @rose, @rose, @default, @netrom, @default, @default]}, 0x80, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x2}, 0x40000060) 00:10:49 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x7ffffffff000, 0x0) 00:10:49 executing program 2: mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', 0x0, 0x0, 0x0) 00:10:49 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) 00:10:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xda010000, 0x0, 0x0, 0x400000) 00:10:49 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) 00:10:49 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0x4c, 0x0) 00:10:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)={0x7fff}) 00:10:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan4\x00'}) 00:10:49 executing program 1: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x202) msgsnd(r0, &(0x7f0000000000)={0x0, "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"}, 0x102, 0x800) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/4096) msgrcv(r0, &(0x7f0000001140)={0x0, ""/20}, 0x1c, 0x2, 0x3000) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001180)=""/27) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000011c0)=""/136) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000001280)=""/180) pipe2$9p(&(0x7f0000001340), 0x80080) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001380)=""/99) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001400)=""/237) r1 = msgget$private(0x0, 0x10) msgsnd(r1, &(0x7f0000001500)={0x0, "19d7e3669d05a804e692b2814dc7295bd42343a8227976c8025cdbbeb03efa4bfeeef90f55eeea15acca7f9c443b14a2eaa2c86ed65f225dabfa0c41e97c8ada08120d36354aea291d88d89a1634217d382f83db34e552b8196b7f9477c61ac21985dfa2ff8970b103c21160cced7153adcd699e7cae74e6d01625997c87dc5714fded2e6435195b68146e8146bab46ca0377623c5c07747ba57f9d5471692e1e5b7b731fff7874a55636acd18da"}, 0xb6, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000015c0)=""/234) r2 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000016c0)=""/86) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001740), 0x8) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000001780)) 00:10:49 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000e80)={{}, {}, [{}], {}, [{}, {0x8, 0xc}]}, 0x3c, 0x0) 00:10:49 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x4004) 00:10:49 executing program 5: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 00:10:50 executing program 4: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan3\x00'}) 00:10:50 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x10, 0x0) 00:10:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) 00:10:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xe5010000, 0x0, 0x0, 0x400000) 00:10:50 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:50 executing program 1: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x0) pipe2$9p(&(0x7f0000001340), 0x0) 00:10:50 executing program 2: syz_io_uring_setup(0x0, 0xfffffffffffffffd, &(0x7f0000feb000/0x13000)=nil, &(0x7f0000ff1000/0x4000)=nil, 0x0, 0x0) 00:10:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f00000015c0)) 00:10:50 executing program 4: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 00:10:50 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000001380), 0xffffffffffffffff) 00:10:50 executing program 1: syz_mount_image$adfs(&(0x7f000000bd00), &(0x7f000000bd40)='./file0\x00', 0x0, 0x0, &(0x7f000000d3c0), 0x0, &(0x7f000000d480)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'subj_user'}}]}) 00:10:50 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000640), 0x10) 00:10:50 executing program 3: syz_mount_image$vxfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001380), 0xffffffffffffffff) 00:10:50 executing program 4: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x8000000) 00:10:50 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "ef75a8e23150738526e6067292fd6676e8dfce2166aa3d685b54e373af4e90004321b8fa310c52c5689ead2720d9edaa5b8e59553af7ef1d5d3243badb9e4fd786d596d69be00b877cafd9b68d62a2b41d16c95c11ac9f8983dd6879b76330e5aad1f762e50103eff5defc17e9c5d8fb976a2f2fc1c1b510cf"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "6047933536d2958c548c6499202610996fa6d4ec2571f99976a286ed61bd65b5a60501b1d3fd60f068678dc64c6c0939843e997c310e30cec397e01393c0fadd81abb71e198604158b348f0ca2db8553bd82320b288410ef32f25a6a8bf27e06079556f6281b072b6dc5c2e644847b01bfb6d6ce5e8a54e68ce9936bac42646508688429dca99c119464ed8142d9cf26313678c6819776784de1f8edc3372c3030918a6cd8b656801c1b3baebdc40da8dca02be148dca7700c47d9a8c78dff1409d77135b5573ffd0d4fc78fc000bfe697759e3ab545dee0883e7ebffe79af9794223fc0db"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "b2dbb3b9d0171fc4bfbc93039908b9ca593d99889663166e0a987ebbc1afd1baac3a2a1bf852edbf57d4983d389e23098ced397ae0082920db1fb51641fb176f40845f0adfee7d7b5b0b9fbb6defafa36e0a79d9ad34553627387eb07703a149b09341cb19c6acc279bb10574ebd579087f0c5e9349fd3708814b74b0692fcf7fe18579a410155cdef541ce023e8c384a08f8ee1c35c7d6920e8ccf2ab0d3e1d441e767e6117fa83262962ed923b0adfa06750284b650917c394b2a515385ef563f490834ecb16fd84"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb6d, 0x1, "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"}]}, 0xec4}}, 0x0) [ 650.363528][T26766] ADFS-fs (loop1): unrecognised mount option "smackfstransmute=subj_user" or missing value 00:10:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xf0010000, 0x0, 0x0, 0x400000) 00:10:50 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0) 00:10:50 executing program 3: syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x1, &(0x7f0000000880)=[{&(0x7f00000007c0)="0e477ad8e9210a35f70d3e9701a24c763ce8bc043722944d81856376353d0e1262e6be715d044064b47d51572ce31aa3ae227de377c8d364a817d0dff3f90519f515a3736a3c0d816af6bfceceedd787ff7d6a65197d95320584919b38f2bc4640f14fcecde66af081f55f91391942a36466e4b3cc03c36e588603c435927ef543337ffe7acbf827ac689e9aed658d3c2f", 0x91, 0x2}], 0x120b008, &(0x7f00000008c0)={[{'func'}, {'mode'}, {'*-'}, {'//&.%${%.!'}, {'subj_user'}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x32, 0x62, 0x38, 0x63, 0x39, 0x30], 0x2d, [0x62, 0x57, 0x62, 0x39], 0x2d, [0x66, 0x37, 0x63, 0x34], 0x2d, [0x64, 0x30, 0x39, 0x36], 0x2d, [0x33, 0x64, 0x39, 0x37, 0x66, 0x36, 0x32, 0x34]}}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'func'}}, {@subj_type={'subj_type', 0x3d, '@8:#%,'}}]}) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000a00)={r0, r1+10000000}, &(0x7f0000000a40)={[0x200]}, 0x8) r2 = getuid() r3 = syz_mount_image$vxfs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x7, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b00)="8f1a6283b4092105d5ee1cdb6b67e0cdfa05b5d97fb762300943c09aaa1d8ab7dae46b2100c29013ddb6a29d3d72b55b4923393706c16dc25e4827bcdcc5bbc97c939085aa5041808ed9627620358270671a3dd715b5bc577d5409101f4def08d424b02867e403730c776ab5ae88a3be11652c5de87bb94d", 0x78, 0x8}], 0x0, &(0x7f0000000bc0)={[{}, {'subj_user'}, {}, {'-)+*}{.\xc6'}, {'mode'}, {'@8:#%,'}, {'func'}, {'}'}], [{@measure}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r2}}]}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getstats={0x1c, 0x5e, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x170, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4ad3}}]}, 0x170}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x14c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xfc, 0xa8, @random="732f48fbc8acd7b6c56fd096733aef9ecd2f866aa9438d9412ac3797993f2f89b62f32f65237a5b03d3b59388ddcafbcb32ff630e700407a8e50fcdd39bc853727a903ee39d8939eca184a24313600873cbab89d760f8bf554e2859b18a0caac711a9610618f2ba9a1358c17dc04ae9c7d90670487e96aa7a944cb5effb22f4b6a6368cdadb5e0b998674ea53c0bd77cc5c8ed98148b0cbd38d9f1d560f391f1f3b0d8090d7a39d25acc2234fb819b11bf2bbbc8bbf90700fe7c891ebe7ab3740e16d6f12fb75dca417e599c3b0aa480485732f09622fa27427cbec0db658259643899482c6c41e91ccb721c80b9315bf8db50b3dbf07c15"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="233d62b28448320163264d6bad009f61486eed5b1ca9ad53fb841262ab21e495a00823a059edc0"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x1084) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x40}}, 0x20000841) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0xc000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000001580)={r5, 0xffffffffffffffff, 0x80000001}) 00:10:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) 00:10:50 executing program 5: socket(0x21, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001680), 0x149101, 0x0) 00:10:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)) 00:10:50 executing program 1: socket(0x21, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001680), 0x149101, 0x0) 00:10:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0) recvmsg$unix(r1, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) close(r0) 00:10:50 executing program 5: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) 00:10:50 executing program 2: syz_mount_image$adfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:50 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/4096) 00:10:50 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="d6", 0x1}]) [ 650.740893][T26789] vxfs: WRONG superblock magic 00000000 at 1 [ 650.774271][T26789] vxfs: WRONG superblock magic 00000000 at 8 [ 650.783391][T26789] vxfs: can't find superblock. 00:10:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0xf5010000, 0x0, 0x0, 0x400000) 00:10:51 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 00:10:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$llc(r0, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 00:10:51 executing program 4: socket(0xa, 0x0, 0x8f49a8c) 00:10:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) 00:10:51 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x4e82, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:10:51 executing program 1: syz_open_dev$video(0x0, 0x0, 0x0) 00:10:51 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)={&(0x7f0000001700)='./file1\x00'}, 0x10) 00:10:51 executing program 4: msgsnd(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001340), 0x0) [ 651.058681][T26812] vivid-007: ================= START STATUS ================= [ 651.080846][T26812] vivid-007: Generate PTS: true [ 651.086117][T26812] vivid-007: Generate SCR: true [ 651.091441][T26812] tpg source WxH: 640x360 (Y'CbCr) [ 651.104496][T26812] tpg field: 1 00:10:51 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "ef75a8e23150738526e6067292fd6676e8dfce2166aa3d685b54e373af4e90004321b8fa310c52c5689ead2720d9edaa5b8e59553af7ef1d5d3243badb9e4fd786d596d69be00b877cafd9b68d62a2b41d16c95c11ac9f8983dd6879b76330e5aad1f762e50103eff5defc17e9c5d8fb976a2f2fc1c1b510cf"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "6047933536d2958c548c6499202610996fa6d4ec2571f99976a286ed61bd65b5a60501b1d3fd60f068678dc64c6c0939843e997c310e30cec397e01393c0fadd81abb71e198604158b348f0ca2db8553bd82320b288410ef32f25a6a8bf27e06079556f6281b072b6dc5c2e644847b01bfb6d6ce5e8a54e68ce9936bac42646508688429dca99c119464ed8142d9cf26313678c6819776784de1f8edc3372c3030918a6cd8b656801c1b3baebdc40da8dca02be148dca7700c47d9a8c78dff1409d77135b5573ffd0d4fc78fc000bfe697759e3ab545dee0883e7ebffe79af9794223fc0db"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "b2dbb3b9d0171fc4bfbc93039908b9ca593d99889663166e0a987ebbc1afd1baac3a2a1bf852edbf57d4983d389e23098ced397ae0082920db1fb51641fb176f40845f0adfee7d7b5b0b9fbb6defafa36e0a79d9ad34553627387eb07703a149b09341cb19c6acc279bb10574ebd579087f0c5e9349fd3708814b74b0692fcf7fe18579a410155cdef541ce023e8c384a08f8ee1c35c7d6920e8ccf2ab0d3e1d441e767e6117fa83262962ed923b0adfa06750284b650917c394b2a515385ef563f490834ecb16fd84"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb6e, 0x1, "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"}]}, 0xec4}}, 0x0) 00:10:51 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)) [ 651.111050][T26812] tpg crop: 640x360@0x0 [ 651.115481][T26812] tpg compose: 640x360@0x0 [ 651.121272][T26812] tpg colorspace: 8 [ 651.125691][T26812] tpg transfer function: 0/0 [ 651.130499][T26812] tpg Y'CbCr encoding: 0/0 [ 651.135183][T26812] tpg quantization: 0/0 [ 651.139548][T26812] tpg RGB range: 0/2 [ 651.182770][T26812] vivid-007: ================== END STATUS ================== [ 651.269098][T26829] ISOFS: Unable to identify CD-ROM format. 00:10:51 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/4096) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001180)=""/27) 00:10:51 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/112) 00:10:51 executing program 4: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0xe16c}], 0x800001, &(0x7f0000000440)={[{@unhide}, {@umask={'umask', 0x3d, 0xffffffffffff3bcc}}, {}, {@dmode={'dmode', 0x3d, 0x100000001}}], [{@uid_eq}, {@euid_eq}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) 00:10:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:51 executing program 3: getuid() syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)="12fa47a0078d5314333e9ef1f458eafc03b3fc72675ac525a807a26135e622fb7ba0be7af8ead128942cec4a29daa678948c84ed58c4ea95caa649bd698ae065bed6c7155ca262ecc53015963629299e07eb75e1cdc07c2da59376564a245c951dffd4327b011202a130a12736ba3c707e0907c3dff4fecb95aa7d5ea0347bde8393b72517f7324d7ff7ffcbad7df8292f6d76f592d67c5d6a48b3c9d5fd54b491b5", 0xa2}, {&(0x7f0000000240), 0x0, 0xe16c}], 0x0, &(0x7f0000000440)={[{@dmode={'dmode', 0x3d, 0x100000001}}]}) syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x1, &(0x7f0000000d80)=[{0x0}], 0x0, &(0x7f0000000e00)={[{@nls={'nls', 0x3d, 'cp869'}}, {@case_sensitive_yes}, {@errors_continue}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_no}], [{@obj_role={'obj_role', 0x3d, '/U'}}, {@fowner_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'dmode'}}, {@pcr}, {@uid_eq}, {@seclabel}, {@seclabel}]}) 00:10:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2, 0x0, 0x400000) 00:10:51 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 00:10:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) [ 651.896500][T26839] loop4: detected capacity change from 0 to 225 [ 651.900113][T26840] vivid-007: ================= START STATUS ================= [ 651.917122][T26841] loop3: detected capacity change from 0 to 225 [ 651.934126][T26840] vivid-007: Generate PTS: true [ 651.959607][T26840] vivid-007: Generate SCR: true [ 651.964663][T26840] tpg source WxH: 640x360 (Y'CbCr) [ 651.970400][T26840] tpg field: 1 [ 651.972351][T26841] __ntfs_error: 11 callbacks suppressed [ 651.972367][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_role. [ 651.973869][T26840] tpg crop: 640x360@0x0 [ 651.993464][T26840] tpg compose: 640x360@0x0 [ 651.998728][T26840] tpg colorspace: 8 00:10:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 652.009024][T26840] tpg transfer function: 0/0 [ 652.085604][ T27] audit: type=1804 audit(652.074:305): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4020099799/syzkaller.kSBkBn/1227/bus" dev="sda1" ino=1166 res=1 errno=0 00:10:52 executing program 5: syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) 00:10:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) [ 652.217427][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner<00000000000000000000. [ 652.240356][T26840] tpg Y'CbCr encoding: 0/0 [ 652.255025][T26840] tpg quantization: 0/0 [ 652.259505][T26840] tpg RGB range: 0/2 00:10:52 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0) [ 652.271415][T26840] vivid-007: ================== END STATUS ================== [ 652.281822][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option smackfsroot. [ 652.291145][ T27] audit: type=1800 audit(652.074:306): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 00:10:52 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 652.356848][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option pcr. [ 652.395902][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option seclabel. [ 652.481585][ T27] audit: type=1804 audit(652.464:307): pid=26859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3140594792/syzkaller.AcO0TG/1659/bus" dev="sda1" ino=1171 res=1 errno=0 00:10:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) [ 652.774443][T26841] ntfs: (device loop3): parse_options(): Unrecognized mount option secla. [ 652.784887][ T27] audit: type=1800 audit(652.464:308): pid=26859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1171 res=0 errno=0 00:10:52 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) 00:10:52 executing program 3: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000440), 0x8340, 0x0) 00:10:52 executing program 4: pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) [ 652.849850][T26863] vivid-007: ================= START STATUS ================= [ 652.866275][T26863] vivid-007: Generate PTS: true [ 652.871183][T26863] vivid-007: Generate SCR: true [ 652.957219][T26863] tpg source WxH: 640x360 (Y'CbCr) [ 652.962900][T26863] tpg field: 1 [ 652.967274][T26863] tpg crop: 640x360@0x0 [ 652.972381][T26863] tpg compose: 640x360@0x0 [ 652.978956][T26863] tpg colorspace: 8 [ 652.982850][T26863] tpg transfer function: 0/0 [ 652.988671][T26863] tpg Y'CbCr encoding: 0/0 [ 652.994265][T26863] tpg quantization: 0/0 [ 652.999096][T26863] tpg RGB range: 0/2 [ 653.003139][T26863] vivid-007: ================== END STATUS ================== 00:10:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x6, 0x0, 0x400000) 00:10:53 executing program 1: r0 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 00:10:53 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002400)='/sys/module/ib_ipoib', 0x0, 0x0) 00:10:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x80086601, 0x0) 00:10:53 executing program 5: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000015c0)=""/234) 00:10:53 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)='\'', 0x1}, {&(0x7f0000000600)="ad", 0x1}], 0x2, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, "0dfd70d2179805dd9df62515d800c1dfbe"}], 0x28}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000c80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}, {{&(0x7f0000001040)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ae874793c4b9b4cfee425df17c3537119eb2edade560c61f70abb42a9e39e59a6da27ab351b8dbe1799acd006c03c3c6d852fca657cc5f8300ce98cb02620b"}, 0x80, 0x0}}], 0x4, 0x20000050) 00:10:53 executing program 3: r0 = getuid() syz_mount_image$udf(&(0x7f0000000000), 0x0, 0xffff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000080), 0x0, 0x6}, {&(0x7f0000000180)="a8d44717f0205f9b134d35a233c9900b34e57cd1320b1470c16c9b139549e841185ec07d6809fce62a8cb01ae406d32a90065d5fb74361ddb3273426b5f60c2bbd656b8d5f2691087163538b84752904277c3dfb138dfd4414b7f352daf79011", 0x60}, {&(0x7f0000000240)="c15f9045679715602d65af3f679f5070768248629dfcd3fe9f15f6d569cf329eeb03c1e2926b36265534953b4cdd40d24ddd96936ca8048f92ad2eb16713ce64230e7b1ac7be6c49b96527bd25fccadfbd6ea9065225557f3efb2a152b6dd9", 0x5f, 0xe16c}, {&(0x7f0000000300), 0x0, 0x89}], 0x800001, &(0x7f0000000440)={[{@unhide}, {@umask={'umask', 0x3d, 0xffffffffffff3bcc}}, {}, {@dmode={'dmode', 0x3d, 0x100000001}}, {}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@euid_eq={'euid', 0x3d, r0}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) pselect6(0x40, &(0x7f0000000540)={0xfff, 0x81, 0x7ff, 0xd2, 0x3, 0x8, 0x6, 0x8}, &(0x7f0000000580)={0x5, 0x4, 0xffffffff, 0x9, 0x7, 0x0, 0xcc3e, 0x4}, &(0x7f00000005c0)={0x29d, 0x1, 0x7, 0x0, 0x4, 0x9, 0xffffffffffffffe0}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0xffffffff]}, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000f40)={0x1, 0x2}, 0x2) [ 653.161599][T26879] vivid-007: ================= START STATUS ================= [ 653.170834][T26879] vivid-007: Generate PTS: true [ 653.194958][T26879] vivid-007: Generate SCR: true [ 653.199898][T26879] tpg source WxH: 640x360 (Y'CbCr) 00:10:53 executing program 1: syz_io_uring_setup(0x3b1a, &(0x7f0000000280), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x4905, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 653.210323][T26884] loop3: detected capacity change from 0 to 225 [ 653.219209][T26879] tpg field: 1 [ 653.222696][T26879] tpg crop: 640x360@0x0 [ 653.227631][T26879] tpg compose: 640x360@0x0 [ 653.232141][T26879] tpg colorspace: 8 [ 653.236079][T26879] tpg transfer function: 0/0 [ 653.240734][T26879] tpg Y'CbCr encoding: 0/0 [ 653.245270][T26879] tpg quantization: 0/0 [ 653.249495][T26879] tpg RGB range: 0/2 [ 653.253478][T26879] vivid-007: ================== END STATUS ================== 00:10:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 00:10:53 executing program 3: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) 00:10:53 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 00:10:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:10:53 executing program 1: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, 0x0, 0x2501a, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000140), &(0x7f00000001c0)="0ea3f2a0a7a23f2452793bf6f8cb2229676d885b31467ecf5fd23ceb89285848f4b90c4e5ad0fae1b57e8094cabed9491595286cdccb550d6bb3c107c90bcd18e6c983f17e2a30da095b99ef9aac9363578ed7b8637d08523ee8f057d0d6f6776fe0b2ef4344cd4db8c6acdf1e479381e8b05b4497e3b029d24a96973579ee1a2b33ed2ef50d8636eaffeed9050dc0965c75215acece1631648fc0b306626c909f225b0dfa90b4aa1efbe59bbcebb206c7"}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000000c0)) 00:10:53 executing program 5: add_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) 00:10:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x7, 0x0, 0x400000) 00:10:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8}]}) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) 00:10:53 executing program 3: statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 00:10:53 executing program 4: syz_mount_image$udf(&(0x7f0000000000), 0x0, 0xffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{}], [{@fowner_lt={'fowner<', 0xee00}}, {@euid_eq}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:10:53 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 00:10:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:53 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x7c3240, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140500002500000127bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:10:53 executing program 5: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x221410, &(0x7f0000000780)) 00:10:53 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000e80)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) 00:10:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) pipe2$watch_queue(&(0x7f0000000240), 0x80) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:53 executing program 4: socket$inet(0x2, 0xa, 0xff) 00:10:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x1) 00:10:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x8, 0x0, 0x400000) 00:10:54 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:10:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:10:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:10:54 executing program 4: getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 654.228759][T26931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.241024][T26933] vivid-007: ================= START STATUS ================= [ 654.264190][T26933] vivid-007: Generate PTS: true [ 654.269241][T26933] vivid-007: Generate SCR: true 00:10:54 executing program 1: bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) clock_gettime(0x7, 0x0) syz_mount_image$ntfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x4, &(0x7f0000000d80)=[{&(0x7f0000000b80)="f2", 0x1}, {&(0x7f0000000c00)='b', 0x1}, {0x0, 0x0, 0x2}, {&(0x7f0000000d40)}], 0x0, &(0x7f0000000e00)={[], [{@obj_role={'obj_role', 0x3d, '/U'}}]}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) getuid() 00:10:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)={[{@usrquota}, {@grpquota}]}) 00:10:54 executing program 4: socketpair(0xa, 0x1, 0x101, &(0x7f0000000100)) 00:10:54 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xffff0000) [ 654.274569][T26933] tpg source WxH: 640x360 (Y'CbCr) [ 654.281689][T26933] tpg field: 1 [ 654.285633][T26933] tpg crop: 640x360@0x0 [ 654.290176][T26933] tpg compose: 640x360@0x0 [ 654.294722][T26933] tpg colorspace: 8 [ 654.299917][T26933] tpg transfer function: 0/0 [ 654.304714][T26933] tpg Y'CbCr encoding: 0/0 [ 654.309765][T26933] tpg quantization: 0/0 [ 654.314099][T26933] tpg RGB range: 0/2 [ 654.319395][T26933] vivid-007: ================== END STATUS ================== 00:10:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xff, 0x8a2a, 0x3, 0xfffffffc, 0x2, 0x4, 0x10, 0x9}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:54 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f0000000480)="f4", 0x1, 0x3eac0000000}], 0x0, 0x0) [ 654.457498][T26951] vivid-007: ================= START STATUS ================= [ 654.468978][T26953] loop3: detected capacity change from 0 to 135168 [ 654.475667][T26951] vivid-007: Generate PTS: true [ 654.480814][ T3808] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.506418][ T3808] Buffer I/O error on dev loop3, logical block 0, async page read [ 654.517967][T26951] vivid-007: Generate SCR: true [ 654.523573][ T3808] loop3: unable to read partition table [ 654.529581][T26951] tpg source WxH: 640x360 (Y'CbCr) [ 654.535016][T26951] tpg field: 1 [ 654.559394][T26951] tpg crop: 640x360@0x0 [ 654.578180][T26951] tpg compose: 640x360@0x0 [ 654.598610][T26951] tpg colorspace: 8 [ 654.614418][T26951] tpg transfer function: 0/0 [ 654.630354][T26951] tpg Y'CbCr encoding: 0/0 [ 654.635823][T26951] tpg quantization: 0/0 [ 654.640145][T26951] tpg RGB range: 0/2 [ 654.644188][T26951] vivid-007: ================== END STATUS ================== 00:10:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xc, 0x0, 0x400000) 00:10:54 executing program 5: syz_io_uring_setup(0x3b1a, &(0x7f0000000280), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4905, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:10:54 executing program 1: syz_mount_image$udf(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) 00:10:54 executing program 3: clock_gettime(0x0, &(0x7f0000000940)) 00:10:54 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 00:10:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000003a40)) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000ed67d9f91fff0200000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 00:10:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) 00:10:54 executing program 3: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x739003, 0x0) [ 654.821013][T26966] vivid-007: ================= START STATUS ================= [ 654.839730][T26966] vivid-007: Generate PTS: true [ 654.845436][T26966] vivid-007: Generate SCR: true [ 654.850395][T26966] tpg source WxH: 640x360 (Y'CbCr) [ 654.863028][T26966] tpg field: 1 00:10:54 executing program 4: syz_io_uring_setup(0x1d47, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) 00:10:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000280)=""/206, 0x2a, 0xce, 0x1}, 0x20) 00:10:54 executing program 5: syz_io_uring_setup(0x77f3, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 654.880000][T26966] tpg crop: 640x360@0x0 [ 654.896359][T26966] tpg compose: 640x360@0x0 [ 654.906638][T26966] tpg colorspace: 8 [ 654.910738][T26966] tpg transfer function: 0/0 [ 654.922034][T26966] tpg Y'CbCr encoding: 0/0 [ 654.958848][T26966] tpg quantization: 0/0 [ 654.984591][T26966] tpg RGB range: 0/2 [ 655.332628][T26966] vivid-007: ================== END STATUS ================== [ 655.380955][T26979] device wireguard0 entered promiscuous mode 00:10:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x12, 0x0, 0x400000) 00:10:55 executing program 4: syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) syz_mount_image$vxfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getstats={0x1c}, 0x1c}}, 0x0) 00:10:55 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="1ac6a0cc1c79b9001ea8e4e2c78dd628", 0x10, 0xfff}], 0x2090818, &(0x7f0000000640)={[{@fileset}, {@mode}], [{@subj_user={'subj_user', 0x3d, '&'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_lt}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x1, &(0x7f0000000880)=[{&(0x7f00000007c0)="0e477ad8e9210a35f70d3e9701a24c763ce8bc043722944d81856376353d0e1262e6be715d044064b47d51572ce31aa3ae227de377c8d364a817d0dff3f90519f515a3736a3c0d816af6bfceceedd787ff7d6a65197d95320584919b38f2bc4640f14fcecde66af081f55f91391942a36466e4b3cc03c36e588603c43592", 0x7e, 0x2}], 0x120b008, &(0x7f00000008c0)={[{'func'}, {'mode'}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x0, 0x0, 0x62, 0x0, 0x63, 0x39, 0x30], 0x2d, [0x62, 0x0, 0x62, 0x39], 0x2d, [0x66, 0x37, 0x63], 0x2d, [0x0, 0x30, 0x39], 0x2d, [0x33, 0x0, 0x39, 0x37, 0x0, 0x36]}}}, {@subj_role={'subj_role', 0x3d, 'func'}}, {@subj_type={'subj_type', 0x3d, '@8:#%,'}}]}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000a00), &(0x7f0000000a40), 0x8) r0 = getuid() r1 = syz_mount_image$vxfs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x7, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b00)="8f1a6283b4092105d5ee1cdb6b67e0cdfa05b5d97fb762300943c09aaa1d8ab7dae46b2100c29013ddb6a29d3d72b55b4923393706c16dc25e4827bcdcc5bbc97c939085aa5041808ed9627620358270671a3dd715b5bc577d5409101f4def08d424b02867e403730c", 0x69, 0x8}], 0x0, &(0x7f0000000bc0)={[{}, {'subj_user'}, {}, {'-)+*}{.\xc6'}, {'mode'}, {'@8:#%,'}, {'func'}, {'}'}], [{@measure}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r0}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getstats={0x1c, 0x5e, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2b, 0xa8, @random="233d62b28448320163264d6bad009f61486eed5b1ca9ad53fb841262ab21e495a00823a059edc0"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1084) bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r1) 00:10:55 executing program 5: add_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 00:10:55 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:10:55 executing program 5: socket(0xe07418c2e6778c81, 0x0, 0x0) [ 655.628069][T26987] loop3: detected capacity change from 0 to 15 [ 655.649768][T26988] vivid-007: ================= START STATUS ================= [ 655.669725][T26988] vivid-007: Generate PTS: true 00:10:55 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) 00:10:55 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) 00:10:55 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000002400)='/sys/module/ib_ipoib', 0x2, 0x0) [ 655.679108][T26988] vivid-007: Generate SCR: true [ 655.684256][T26988] tpg source WxH: 640x360 (Y'CbCr) [ 655.695920][T26987] vxfs: WRONG superblock magic 00000000 at 1 [ 655.702092][T26988] tpg field: 1 [ 655.712724][T26987] vxfs: WRONG superblock magic 00000000 at 8 00:10:55 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0}], 0x0, 0x0) [ 655.731762][T26988] tpg crop: 640x360@0x0 [ 655.736551][T26988] tpg compose: 640x360@0x0 [ 655.744644][T26988] tpg colorspace: 8 [ 655.752082][T26988] tpg transfer function: 0/0 [ 655.757853][T26988] tpg Y'CbCr encoding: 0/0 [ 655.762406][T26988] tpg quantization: 0/0 [ 655.764766][T26987] vxfs: can't find superblock. [ 655.776760][T26988] tpg RGB range: 0/2 00:10:55 executing program 5: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 00:10:55 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0xfffffffffffffd4d) [ 655.798077][T26988] vivid-007: ================== END STATUS ================== 00:10:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x18, 0x0, 0x400000) 00:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, 0x0}, 0x0) 00:10:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x541b, 0x0) 00:10:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:10:56 executing program 1: bpf$LINK_DETACH(0x22, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x0, 0x1}]}) 00:10:56 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0xa10000, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, '\x00', @p_u32=0x0}}) 00:10:56 executing program 1: openat$vimc1(0xffffffffffffff9c, &(0x7f000000bcc0), 0x2, 0x0) 00:10:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan3\x00'}) 00:10:56 executing program 4: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f0000000580)=[{0x0}, {&(0x7f00000003c0)="1ac6a0cc1c79b9001ea8e4e2c78dd628f7f315b0", 0x14, 0xfff}, {0x0}], 0x2090818, &(0x7f0000000640)={[], [{@subj_user={'subj_user', 0x3d, '&'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) syz_mount_image$vxfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x1, &(0x7f0000000880)=[{0x0, 0x0, 0x2}], 0x120b008, &(0x7f00000008c0)={[{'func'}, {'mode'}, {'*-'}], [{@dont_measure}]}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}, {}, {}], 0x3, &(0x7f0000000a00), &(0x7f0000000a40)={[0x200]}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0xb0, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x20000841) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) [ 656.094254][T27014] vivid-007: ================= START STATUS ================= [ 656.128282][T27014] vivid-007: Generate PTS: true 00:10:56 executing program 5: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/27, 0x1b) 00:10:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) [ 656.144096][T27014] vivid-007: Generate SCR: true [ 656.158349][T27014] tpg source WxH: 640x360 (Y'CbCr) [ 656.170212][T27014] tpg field: 1 [ 656.178343][T27014] tpg crop: 640x360@0x0 00:10:56 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, 0x0) [ 656.197009][T27014] tpg compose: 640x360@0x0 [ 656.212565][T27031] loop4: detected capacity change from 0 to 15 [ 656.220161][T27014] tpg colorspace: 8 [ 656.224115][T27014] tpg transfer function: 0/0 [ 656.246963][T27014] tpg Y'CbCr encoding: 0/0 [ 656.273434][T27014] tpg quantization: 0/0 [ 656.292946][T27014] tpg RGB range: 0/2 [ 656.321189][T27014] vivid-007: ================== END STATUS ================== 00:10:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e, 0x0, 0x400000) 00:10:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)={[{@usrquota}, {@grpquota}, {@qnoenforce}], [{@subj_type={'subj_type', 0x3d, ')\\.'}}]}) 00:10:56 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, '\x00', @p_u32=0x0}}) 00:10:56 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@huge_advise}]}) 00:10:56 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x41, 0x0) 00:10:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:10:56 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)="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", 0x1f8, 0x8}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:10:56 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680), 0x264040, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, 0x0) 00:10:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000004c0)={'pimreg0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:10:56 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x1, 0x9}]}) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'vlan0\x00'}) 00:10:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:10:56 executing program 4: socket$kcm(0x29, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) [ 656.610257][T27057] loop1: detected capacity change from 0 to 1 [ 656.644600][ T3635] Dev loop1: unable to read RDB block 1 [ 656.650530][ T3635] loop1: unable to read partition table [ 656.657005][ T3635] loop1: partition table beyond EOD, truncated 00:10:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x24, 0x0, 0x400000) 00:10:56 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='logbsize']) 00:10:56 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) 00:10:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:10:56 executing program 1: socket(0x28, 0x0, 0xbf51) 00:10:56 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001340)) 00:10:56 executing program 1: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x3c, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) 00:10:56 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x600, 0x0) 00:10:56 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:56 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/dvb_usb_dvbsky', 0x0, 0x0) 00:10:56 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 00:10:56 executing program 5: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) 00:10:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2a, 0x0, 0x400000) 00:10:57 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000440)) 00:10:57 executing program 3: syz_mount_image$adfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f00000017c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 00:10:57 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40086602, 0x0) 00:10:57 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x149101, 0x0) 00:10:57 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 00:10:57 executing program 1: io_uring_setup(0x9, &(0x7f00000000c0)={0x0, 0xbe03, 0x0, 0x0, 0x94}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) 00:10:57 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}]}) 00:10:57 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x2}, @func], &(0x7f0000000240)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000280)=""/247, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, 0x0}, 0x80) 00:10:57 executing program 3: socket(0x0, 0x300, 0x0) 00:10:57 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x11c0cc, 0x0) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2, 0x14, 0x0) 00:10:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2f, 0x0, 0x400000) 00:10:57 executing program 5: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000023c0)=[{&(0x7f0000001080)="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", 0x286, 0x8}, {0x0}, {0x0}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x0) 00:10:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 00:10:57 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "ef75a8e23150738526e6067292fd6676e8dfce2166aa3d685b54e373af4e90004321b8fa310c52c5689ead2720d9edaa5b8e59553af7ef1d5d3243badb9e4fd786d596d69be00b877cafd9b68d62a2b41d16c95c11ac9f8983dd6879b76330e5aad1f762e50103eff5defc17e9c5d8fb976a2f2fc1c1b510cf"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "6047933536d2958c548c6499202610996fa6d4ec2571f99976a286ed61bd65b5a60501b1d3fd60f068678dc64c6c0939843e997c310e30cec397e01393c0fadd81abb71e198604158b348f0ca2db8553bd82320b288410ef32f25a6a8bf27e06079556f6281b072b6dc5c2e644847b01bfb6d6ce5e8a54e68ce9936bac42646508688429dca99c119464ed8142d9cf26313678c6819776784de1f8edc3372c3030918a6cd8b656801c1b3baebdc40da8dca02be148dca7700c47d9a8c78dff1409d77135b5573ffd0d4fc78fc000bfe697759e3ab545dee0883e7ebffe79af9794223fc0db"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "b2dbb3b9d0171fc4bfbc93039908b9ca593d99889663166e0a987ebbc1afd1baac3a2a1bf852edbf57d4983d389e23098ced397ae0082920db1fb51641fb176f40845f0adfee7d7b5b0b9fbb6defafa36e0a79d9ad34553627387eb07703a149b09341cb19c6acc279bb10574ebd579087f0c5e9349fd3708814b74b0692fcf7fe18579a410155cdef541ce023e8c384a08f8ee1c35c7d6920e8ccf2ab0d3e1d441e767e6117fa83262962ed923b0adfa06750284b650917c394b2a515385ef563f490834ecb16fd84"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "cb3be827a9890c4b2ab7b809eb1e975b6a53ea0ad15b95b6f71719d9810cb07567c9c8c611c0db2ce4531a3ce536e6587eb8facc7c29374a8c9f3c3b0ede0fd493aeebdd6ae52d5e69bb2472f66326e896eec28d5233cc3ddc39975fffa84181d000b7d95e753b06ae4ecb9a41d826a2b7968c8ca7b2a3b9872fcea42cfc19117bc2f0e0f26d703a08b6a532c7ab3bd839a89b6ee96505971115e73a20f44998f4885f4ffc7f57050f9cbbe8dd7da021606cbd20c5456a228b59d2f4f4b95db3be"}, @INET_DIAG_REQ_BYTECODE={0xba5, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}}, 0x0) 00:10:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[], [{@subj_role}]}) 00:10:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 00:10:57 executing program 2: pipe2$9p(&(0x7f0000001340), 0x80080) 00:10:57 executing program 4: pselect6(0x40, &(0x7f00000007c0), 0x0, 0x0, &(0x7f0000000880)={0x0, 0x989680}, &(0x7f0000000900)={0x0}) 00:10:57 executing program 1: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) 00:10:57 executing program 2: pipe2$watch_queue(&(0x7f0000000240), 0x80) syz_io_uring_setup(0x1d47, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), 0x0) 00:10:57 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', 0x0, 0x0, 0x0) 00:10:57 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 00:10:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x30, 0x0, 0x400000) 00:10:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 00:10:57 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xf641d71dd540928e) 00:10:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 00:10:57 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/dvb_usb_dvbsky', 0xc0101, 0x0) 00:10:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 00:10:57 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000540), 0x9, 0x8001) 00:10:57 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 00:10:57 executing program 4: openat$incfs(0xffffffffffffffff, &(0x7f0000001640)='.pending_reads\x00', 0x0, 0x0) 00:10:57 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 00:10:57 executing program 2: syz_io_uring_setup(0x1d47, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)) 00:10:57 executing program 3: socket(0x18, 0x0, 0x80) 00:10:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x36, 0x0, 0x400000) 00:10:58 executing program 5: syz_clone(0x52208580, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x10208000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x10000, 0x20200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 00:10:58 executing program 2: io_uring_setup(0x34a1, &(0x7f0000000000)={0x0, 0x1fd3, 0x2, 0x0, 0x124}) socket$inet_udp(0x2, 0x2, 0x0) 00:10:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)) 00:10:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 00:10:58 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e12fc82038a9c32dbefb3495f780cd0b2e2bb39248fb9f561965893f771d6dd30592e51b3aa5707ec3744f787c29e02b250d701916eede56a085a292ca17ae6fb11cdc4469e34b0fd42449e68dec2d0ce48d01225967841f4f9e9ec1ea06c7ffe83e7029f28d12b408001f9cc56cc4c889aa811cab31fbec556167fe04fa6a9adfb2e5374cad0f5ee9ff46451ed01d27b5d7b5f7f263b6cdc2475c40f57977301d85393df12d4f8f52f58af3b5cbd935790f51", 0xb3}, {&(0x7f0000000440)="98e2cdfae1f826717bb18af77d1883bee44e6b8c32fb5df36815514d3cf2a93d45ee5a6daba81184381d960db48fd8baec34dc26e6e2db265009e4558342b82d4747d34bcd9d94c3daacd6d7ce93596a489dfdc9865c8a9a1f6cf37923633d8620bcfb638982a8a9612f73a93fee3206e5849f18a17ed6c042814966474423cd1694891d26ed43d65bd3131fae533c71b406b84f2c171f457cb4649cd480443c465d7b2b69b020da", 0xa8}, {&(0x7f0000000500)="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", 0xea5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000240)='D', 0x1}], 0x1}}], 0x2, 0x0) 00:10:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x5421, 0x0) [ 658.100007][T27163] vivid-007: ================= START STATUS ================= [ 658.113852][T27168] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 658.137594][T27163] vivid-007: Generate PTS: true 00:10:58 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 00:10:58 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x0) 00:10:58 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000080)={0x1, '\x00'}) [ 658.159000][T27163] vivid-007: Generate SCR: true [ 658.166665][T27163] tpg source WxH: 640x360 (Y'CbCr) 00:10:58 executing program 5: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 658.206500][T27163] tpg field: 1 [ 658.212713][T27163] tpg crop: 640x360@0x0 [ 658.233058][T27163] tpg compose: 640x360@0x0 [ 658.248227][T27163] tpg colorspace: 8 [ 658.252162][T27163] tpg transfer function: 0/0 [ 658.269442][T27163] tpg Y'CbCr encoding: 0/0 [ 658.274328][T27163] tpg quantization: 0/0 [ 658.278966][T27163] tpg RGB range: 0/2 [ 658.289409][T27163] vivid-007: ================== END STATUS ================== 00:10:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3c, 0x0, 0x400000) 00:10:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 00:10:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000600), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, 0x0, 0xa37544bee7c6044c, &(0x7f0000001f00)) 00:10:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:10:58 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x46800, 0x0) 00:10:58 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x571800, 0x0) 00:10:58 executing program 4: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000016c0)=[{0x0, 0x0, 0x4fd}, {&(0x7f0000000600)="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", 0x1e7, 0x5}], 0x0, &(0x7f0000002f40)) 00:10:58 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000001640)='.pending_reads\x00', 0x0, 0x0) 00:10:58 executing program 3: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_pressure(r0, 0x0, 0x0) [ 658.502499][T27200] loop4: detected capacity change from 0 to 4 [ 658.510879][T27200] Dev loop4: unable to read RDB block 4 [ 658.516987][T27200] loop4: unable to read partition table [ 658.522744][T27200] loop4: partition table beyond EOD, truncated [ 658.530534][T27200] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 658.588746][ T3808] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.622583][ T3808] Buffer I/O error on dev loop4, logical block 0, async page read [ 658.640154][ T3808] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.651225][ T3808] Buffer I/O error on dev loop4, logical block 1, async page read 00:10:59 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="12", 0x1}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0xe16c}], 0x800001, &(0x7f0000000440)={[{@unhide}, {@umask={'umask', 0x3d, 0xffffffffffff3bcc}}, {@dmode={'dmode', 0x3d, 0x100000001}}, {}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x7f, 0x0, 0x0, 0x0, 0x8d0, 0xefb}, &(0x7f0000000800)={0x8001}, 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0) clock_gettime(0x0, 0x0) 00:10:59 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 00:10:59 executing program 4: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001280)=""/180) 00:10:59 executing program 5: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={[], [{@subj_user={'subj_user', 0x3d, 'y\x00'}}]}) 00:10:59 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 00:10:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x42, 0x0, 0x400000) 00:10:59 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x0, 0x0, @value}) 00:10:59 executing program 5: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:10:59 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x5f8a, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) 00:10:59 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000240)="c1", 0x1, 0xe16c}], 0x0, 0x0) 00:10:59 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 659.077989][T27210] cgroup: Unknown subsys name 'subj_user' [ 659.100533][T27216] loop2: detected capacity change from 0 to 225 00:10:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001a80)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 00:10:59 executing program 2: pselect6(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)={0x29d}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0xffffffff]}, 0x8}) 00:10:59 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/cpuinfo\x00', 0x0, 0x0) 00:10:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) [ 659.181914][T27228] loop1: detected capacity change from 0 to 225 [ 659.194636][ T2971] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 00:10:59 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 00:10:59 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, '(:[\"+(!4'}}]}) [ 659.231928][ T2971] Buffer I/O error on dev loop1, logical block 0, async page read [ 659.263898][ T2971] loop1: unable to read partition table [ 659.308835][T27238] tmpfs: Unknown parameter 'subj_role' 00:10:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x193, 0x0, 0x400000) 00:10:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:10:59 executing program 1: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)="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", 0x1f8, 0x8}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x0) 00:10:59 executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20e1, &(0x7f0000000200)) 00:10:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:10:59 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001340), 0x80080) 00:10:59 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x100, '\x00', 0x0}) 00:10:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 00:10:59 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:10:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) [ 659.527905][T27249] loop1: detected capacity change from 0 to 1 [ 659.578298][ T2971] Dev loop1: unable to read RDB block 1 [ 659.591085][ T2971] loop1: unable to read partition table [ 659.657787][ T2971] loop1: partition table beyond EOD, truncated 00:11:00 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x100, '\x00', &(0x7f0000000040)}) 00:11:00 executing program 2: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000980), 0x24, 0x0) [ 659.991681][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 659.991695][ T27] audit: type=1804 audit(659.654:309): pid=27260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2614288855/syzkaller.sl7oXL/1313/bus" dev="sda1" ino=1178 res=1 errno=0 [ 660.133388][ T27] audit: type=1800 audit(659.654:310): pid=27260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1178 res=0 errno=0 00:11:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1a6, 0x0, 0x400000) 00:11:00 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)) 00:11:00 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) getuid() lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 00:11:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14}, 0x14}}, 0x0) 00:11:00 executing program 4: socketpair(0x29, 0x2, 0x7fff, &(0x7f0000000080)) 00:11:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:11:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:11:00 executing program 2: r0 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:11:00 executing program 5: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001180)=""/27) 00:11:00 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000008c0)={0x0, 0x3938700}) accept$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000002200)) 00:11:00 executing program 4: getuid() syz_mount_image$udf(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000240), 0x0, 0xe16c}], 0x800001, &(0x7f0000000440)={[{}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)) clock_gettime(0x7, &(0x7f0000000940)) 00:11:00 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, 0x0) [ 661.748998][ T27] audit: type=1804 audit(661.424:311): pid=27293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2614288855/syzkaller.sl7oXL/1314/bus" dev="sda1" ino=1151 res=1 errno=0 00:11:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1b6, 0x0, 0x400000) 00:11:01 executing program 5: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:11:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) fsmount(0xffffffffffffffff, 0x1, 0xa) sched_setaffinity(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 00:11:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x4, @raw_data="cae3eae72b6a8dabea582ead528fefbebe3043ee57545c876428c0ea6185bf50994a1fdbfc20621d1b76e4550048abedc03ec8ff6907fca4a4ec72cfc18565f016110c3d5978c7ebbcc77cec3e61ce5bcb9049a93b7b9f7d44f826ef2fff4436df353694d21bae4492071e0a722036a03f9dee0e9eeccca432c4b3bc37e79efbe0eb6301596feff3e9b0553369abd564ab4a1c0d53a9c6176126a326b306f78ea23463a13f98237b32534c5ae10378ae47a5a29fc2095893de1fece6154eceb3cef91ecef101bf4d"}) 00:11:01 executing program 1: syz_mount_image$xfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000023c0)=[{&(0x7f0000001080)="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", 0x1f8, 0x8}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x0) 00:11:01 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x0) [ 661.820360][ T27] audit: type=1800 audit(661.424:312): pid=27293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1151 res=0 errno=0 [ 661.840102][T27297] loop4: detected capacity change from 0 to 225 [ 661.850046][ T3808] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.860696][ T3808] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.876111][ T27] audit: type=1804 audit(661.424:313): pid=27292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4020099799/syzkaller.kSBkBn/1263/bus" dev="sda1" ino=1165 res=1 errno=0 [ 662.034077][ T27] audit: type=1800 audit(661.424:314): pid=27292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 662.055082][ T27] audit: type=1804 audit(661.954:315): pid=27307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2614288855/syzkaller.sl7oXL/1315/bus" dev="sda1" ino=1173 res=1 errno=0 [ 662.085239][ T27] audit: type=1800 audit(661.964:316): pid=27307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1173 res=0 errno=0 00:11:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 00:11:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000003c0)) 00:11:02 executing program 5: r0 = getpid() ptrace$getregset(0x4204, r0, 0x0, 0x0) [ 662.286980][ T3808] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.303649][T27313] loop1: detected capacity change from 0 to 1 00:11:02 executing program 2: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0xa883ba35f8a69db1}) [ 662.332964][ T3808] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.393174][ T3808] ldm_validate_partition_table(): Disk read failed. [ 662.405345][ T3808] Dev loop4: unable to read RDB block 0 [ 662.427459][ T3808] loop4: unable to read partition table [ 662.434444][ T3635] Dev loop1: unable to read RDB block 1 00:11:02 executing program 4: getuid() syz_mount_image$udf(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000240), 0x0, 0xe16c}], 0x800001, &(0x7f0000000440)={[{}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)) clock_gettime(0x7, &(0x7f0000000940)) 00:11:02 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000001800)='./file0/../file0\x00', &(0x7f0000001b80), &(0x7f0000001d00)=@v3, 0x18, 0x0) [ 662.441545][ T3635] loop1: unable to read partition table [ 662.447407][ T3635] loop1: partition table beyond EOD, truncated [ 662.470664][ T3808] loop4: partition table beyond EOD, truncated [ 662.534637][T27326] loop4: detected capacity change from 0 to 225 [ 662.575886][ T3808] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.588097][ T3808] Buffer I/O error on dev loop4, logical block 0, async page read [ 662.596810][ T3808] ldm_validate_partition_table(): Disk read failed. [ 662.603633][ T3808] Dev loop4: unable to read RDB block 0 [ 662.610681][ T3808] loop4: unable to read partition table [ 662.616932][ T3808] loop4: partition table beyond EOD, truncated 00:11:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1b9, 0x0, 0x400000) 00:11:02 executing program 5: getuid() syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="12fa47a0078d5314333e9ef1f458eafc03b3fc72675ac525a807a26135e622fb7ba0be7af8ead128942cec4a29daa678948c84ed58c4ea95caa649bd698ae065bed6c7155ca262ecc53015963629299e07eb75e1cdc07c2da59376564a245c951dffd4327b011202a130a12736ba3c707e0907c3dff4fecb95aa7d5ea0347bde8393b725", 0x84, 0x6}, {&(0x7f0000000240)="c1", 0x1, 0xe16c}, {&(0x7f0000000300)}], 0x0, &(0x7f0000000440)={[{@umask}, {}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, ':'}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)) clock_gettime(0x7, &(0x7f0000000940)) 00:11:02 executing program 2: sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x423, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x88080) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x40020) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) 00:11:02 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x0, "0d56a19917dda15ca14b01fc6e1db75be9daa031b145be7814120ca1eadd870de388885da514119df2cd3a7d7855d96fda0da25dec63f3d8c7834fb223b646b26ac9b7296588c207a37b4b987c3d1b15c1f3763e6894625bba9750e3042a987dea9be2816b0d1df70623899d79613399df0cefd4d29127859bc755a2dbecee46"}) 00:11:02 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880)={0x0, 0x989680}, 0x0) 00:11:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x0, "6ab4e7040ee6351cf8932f9ac312a330fb81e18f0d5e1442c7b1f77da0faf9f8"}) 00:11:02 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x3f, 0x6, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x80, 0x80, 0x8, 0x10000}}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @bcast, 0x3}, @rc={0x1f, @any, 0x81}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='veth1_vlan\x00', 0x401, 0xf000, 0xad79}) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d00)={'syztnl2\x00', &(0x7f0000007c80)={'ip6_vti0\x00', r5, 0x4, 0x4, 0x5, 0xc6, 0x40, @local, @remote, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000007d40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000007d80)={'gre0\x00', r5, 0x40, 0x20, 0x8, 0x101, {{0x18, 0x4, 0x3, 0x7, 0x60, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x6e, [@broadcast, @broadcast, @remote]}, @end, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x2}, {@multicast1}, {@rand_addr=0x64010100, 0xddd9}, {@multicast2, 0x32}, {@multicast2, 0x100}, {@empty, 0x80000001}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000080c0)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008080)={&(0x7f0000007e80)={0xe8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r8}, {0x4}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40800}, 0x84) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x210, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0xdd, 0x24, 0x9}, {0x0, 0x2, 0x0, 0x1}, {0xc9, 0xd3, 0x13, 0xffff}, {0x7f, 0x4, 0x20, 0x3ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r7}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x40040}, 0x4) socketpair(0x6, 0x800, 0x5, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf250600000020000180140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="60000180080001003fc40bc42213eb3384ff99b964d6a40c36ac414339607687e58a1b0379940263a4ead42fe5fff59ccc8e64860d6707754470b41b390051aa6bba0c076fc81c2adefd208a9e4c9aeadd8350ab4a33775af7839feb5581a36ae828ff453b25e805cb1ad2ad5767", @ANYRES32=0x0, @ANYBLOB="080003008b532eab1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020073797a6b616c6c65723000000000000014000200776c616e3100"/48], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xa5}, &(0x7f0000000100)={0x0, r1/1000+60000}) 00:11:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @loopback}, &(0x7f0000000080)=0xc) 00:11:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0x0, 0x0, "6ab4e7040ee6351cf8932f9ac312a330fb81e18f0d5e1442c7b1f77da0faf9f8"}) 00:11:02 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x1}) 00:11:02 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000040)={'bridge0\x00'}) 00:11:02 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="12", 0x1}], 0x0, 0x0) 00:11:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1da, 0x0, 0x400000) 00:11:03 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 00:11:03 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:11:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x1) 00:11:03 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@unhide}, {}, {@dmode}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, ':'}}]}) 00:11:03 executing program 4: ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) [ 663.077416][T27359] UDF-fs: bad mount option "fowner<00000000000000060928" or missing value 00:11:03 executing program 5: renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x6) 00:11:03 executing program 2: syz_mount_image$adfs(&(0x7f000000bd00), &(0x7f000000bd40)='./file0\x00', 0x0, 0x0, &(0x7f000000d3c0), 0x0, &(0x7f000000d480)) 00:11:03 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000001c0)={0x0, "cf2727f86ccbe383be15f551840494e37b4ebfa6887b4e2c92d816816ba03419"}) 00:11:03 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) 00:11:03 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 00:11:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e5, 0x0, 0x400000) 00:11:03 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) 00:11:03 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) 00:11:03 executing program 1: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:11:03 executing program 5: getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) [ 663.647387][T27373] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. 00:11:03 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="12fa47a0078d5314333e9ef1f458eafc03b3fc72675ac525a807a26135e622fb7ba0be7af8ead128942cec4a29daa678948c84ed58c4ea95caa649bd698ae065bed6c7155ca262ecc53015963629299e07eb75e1cdc07c2da59376564a245c951dffd4327b011202a130a12736ba3c707e0907c3dff4fecb95aa7d5ea0347bde8393b72517f7324d7ff7ffcbad7df8292f6d76f592d67c5d6a48b3c9d5fd54b491b57498143ea9f64a1307bf324f34078840ee1563cc32", 0xb7, 0x6}, {0x0, 0x0, 0x3}, {&(0x7f0000000240), 0x0, 0xe16c}], 0x0, &(0x7f0000000440)={[{@unhide}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xee00}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, ':'}}]}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) 00:11:03 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 00:11:03 executing program 2: socket$isdn(0x22, 0x3, 0x6) 00:11:03 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, 0x0) 00:11:03 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x76, 0x0, 0x4, 0x9}) 00:11:03 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) 00:11:03 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600), 0x0) [ 663.771319][T27388] loop3: detected capacity change from 0 to 225 [ 663.852369][T27388] UDF-fs: bad mount option "fowner<00000000000000060928" or missing value 00:11:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1f0, 0x0, 0x400000) 00:11:04 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, &(0x7f0000001000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@version_L}]}}) 00:11:04 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x258d01, 0x0) 00:11:04 executing program 5: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0xffffffffffffffcb) 00:11:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000001940)) 00:11:04 executing program 3: syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x2205002, &(0x7f0000000680)) 00:11:04 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "ef75a8e23150738526e6067292fd6676e8dfce2166aa3d685b54e373af4e90004321b8fa310c52c5689ead2720d9edaa5b8e59553af7ef1d5d3243badb9e4fd786d596d69be00b877cafd9b68d62a2b41d16c95c11ac9f8983dd6879b76330e5aad1f762e50103eff5defc17e9c5d8fb976a2f2fc1c1b510cf70d997"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "6047933536d2958c548c6499202610996fa6d4ec2571f99976a286ed61bd65b5a60501b1d3fd60f068678dc64c6c0939843e997c310e30cec397e01393c0fadd81abb71e198604158b348f0ca2db8553bd82320b288410ef32f25a6a8bf27e06079556f6281b072b6dc5c2e644847b01bfb6d6ce5e8a54e68ce9936bac42646508688429dca99c119464ed8142d9cf26313678c6819776784de1f8edc3372c3030918a6cd8b656801c1b3baebdc40da8dca02be148dca7700c47d9a8c78dff1409d77135b5573ffd0d4fc78fc000bfe697759e3ab545dee0883e7ebffe79af9794223fc0db"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "b2dbb3b9d0171fc4bfbc93039908b9ca593d99889663166e0a987ebbc1afd1baac3a2a1bf852edbf57d4983d389e23098ced397ae0082920db1fb51641fb176f40845f0adfee7d7b5b0b9fbb6defafa36e0a79d9ad34553627387eb07703a149b09341cb19c6acc279bb10574ebd579087f0c5e9349fd3708814b74b0692fcf7fe18579a410155cdef541ce023e8c384a08f8ee1c35c7d6920e8ccf2ab0d3e1d441e767e6117fa83262962ed923b0adfa06750284b650917c394b2a515385ef563f490834ecb16fd84"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "cb3be827a9890c4b2ab7b809eb1e975b6a53ea0ad15b95b6f71719d9810cb07567c9c8c611c0db2ce4531a3ce536e6587eb8facc7c29374a8c9f3c3b0ede0fd493aeebdd6ae52d5e69bb2472f66326e896eec28d5233cc3ddc39975fffa84181d000b7d95e753b06ae4ecb9a41d826a2b7968c8ca7b2a3b9872fcea42cfc19117bc2f0e0f26d703a08b6a532c7ab3bd839a89b6ee96505971115e73a20f44998f4885f4ffc7f57050f9cbbe8dd7da021606cbd20c5456a228b59d2f4f4b95db3be5d9bf3d4522ee0bc836ee934308eda14cd7a3f8e8c99eeab63d3bfa0ff17229f22367f3080873cb4977d9edee664f325d25b578d8d28b3c7a5ff7fc3"}, @INET_DIAG_REQ_BYTECODE={0xb6d, 0x1, "3104af772b89a82c036af8be8211b78533ddf3d8144a24b52d82fc64d3d713e77af8a64a5c049b1c5adbd6a79e428e47a8375479c64b08001c6317890f4267a5337fb866a7dbeaf8d3ebb7b034dacc25468c9d6ab194cc3a83633af16e5ff843aa72c94a2b012620ff672718469ff28ea4541c8eeccd8a99ba88bd37d9d64d689d5bcf4574adab71dfd7cccb4cda0fa5b12a043da1bf5ffd21e9d461d00cb1ddf4fe8453d3c5b8f5cc2f73b4ecdb4c0e5453f043473bdff16a6ada9b4074e741a0642038cc55e963343dbdbd9e4b196e305ecd9c2a721e8da23a07b4c201cf75b5c5189f23677408509259eeb8e9e241a93c98930354d42e65d62add5a722ec816a1e0ffce38fb77c26acb053d272f12e38620909b134d2ccd92f9da81de8f21a61caae683218841fa4cf97bc5ead2970ea35a93dd980f7bbdc22cfff3034ba60b3deafa8efeaafd6310f39bd8da5865293de57f289059d9efd2b7f2985b83553292b65423ba7fead1dfcd8ddc783153d9616ae164058233d175cff1e10db0b36ad03870a928b2c18013067632a552779fe7e86f82b0bb8980b36b7bb62a44f4d20f94bf6114b5c3230980c3245e5fe4a931dabeea33c461364d00746bc639c14a5a023f0ee27cb7180c227128cd1c9ae559eb4f077182e57c45b97fad7e3d87de6b6684415c3acac87a73b04f30eb357b4dd62e875d876851e986e14d07e56199af4b344feb3251cf8636969a7a377433392c3ad1c22cb5d5752828a130fc8140c342a3ff85477dbaa7a7c655c06d1bba94c70db942c187591deb1bb1451a531f4a58f2107b76f5dfb1e8ff5b4a91d8cebe0490f90ec2fb71cd0c1a741dce8a69d9b51008d0bc5d43e891390450e1b733266aca9f4770ad6dce44a065f05fab4b80acc6e60021dd0fa71c6e33705559eabf4affbcb128cf24989c16b8994b85f6584e904b6ca88f7538639f5583508b80707a45542d4e38265dfbee231ca10a56737c06c01154c4c95e6647135e54de1667e9ee0d997c3740d544fb477636b9f5b59f60fcb2e261bd4910065abd24efb1e3a80843a05a5bb39ddc43bc000ee03400a0aaf340525398c49d73bc9a163ab58af293702edd9cbcaa22770b82bcd7d85372f98fbb2660f29233c674ba9f2de00e606d161d12e9b7c15b69c8243623e0d334eb752d4a121ab20ca4049487c490b7de5b47e4aadccc098e42718a12a87aafbdd3c8f58584653cd24941a32fb2108a6a512356fc8af03dc31318947187d3de0ceeec28896bfa6649098b38876d4fa613895ef57bdea03ba70f727e166097d5b9d9fe66af8ce0183374f011ff74c3dcd77620a54698622d2bfcfbd9d9821e37c59e00d4181f17f4ebd76754707b6bc154e00b42442539984f4754c411bfae4fd79217c05afc4a464c76a19aedd6a1de242110b83c631528c4c7309eb2f6ff45a20a1cf9637d64336100a21ce4b8110fbf8bdeb8a189a198390939f65c6194b7ca0075ede6f5a9de1c4b44271ca131c4a2796b12a0a3a6ac12e145b1417d984793a1c950e7db642b72ab9ab45ab270b701bb48fc969bfba0945aaceaf52173dbec2d4779367a6202a029bda8fe45e1a7e98f95f4aa5afa8e6574793e257075532d69d66bd3b732970318d486af2c1c9aecc530adb0e389e582fb4fa58ca6b8a7992404d5ea5a8f883a025a0357e51e9c65b3e7c061205aec32a891bf9c684e78eddf47dd028981f366304cdc900da8890264e5718185ee5b9551c8c700bbfb17873ae02d2053cd560782b7a91efc7ff94e9344408f7e95e75c0510ec20e42eef6e708eb848b19b78c81a4a812a3366798af6376a3189db5f22841c43263b2b8d157f9c327d6ae707df4d678ed472c87ea6d79af22426cbedda64c17be11256d1249f2b4d745dedb7b26c9e6aa1f361414fd74224ab9b78406f2eaba9948fb21162f5fb9b502e60981350f4c324abab666e5c5b2516f324857aacab7980d79853a1794abc559ded2d55d92e186c067fd6c04386e8558b798e00cc3d0aa990ff518561f37bc0ca96958a868fd6691c5d9602e009afb1b6641ecbac8c6cacd294dc6f2ea86d45c75d2d35744cc171acf2b8c911354467f2c744077fc4be6463ebb577ee8c6fdc7bec376520894f344f620fa0e5305c0cc08f74667901ce09b5d139d24cf9f3cc6f96c85c4d160f60e3c005658f15d451aadec775c4f32303486a2b188bca508a497ec63789d98cbe92fc806e21c1e158b603364e3311784d82c1a010be97f4ee6f6c17647bfeae5182f07bf3345867b08986b27ee30b5160a038034b6bd0a5a10fcfd940114b9061a59e729c41ae9d24f1c699a14d465124b9627567e449411ac0d141d0bfd4c81bb29b3bcc0c8beb5ffb49ff0f9b8b7096054d12778a936ec3b9b7eb399b8197bd1948000cce5d8a17bb6b2aef377185f7ddf849c34a5a402913b9054788548bb28d7a7d6c052252c83f56c2a1afb27132e7ff2021a07c09fb9a8aca5ddb0574ea81fed77ba89c3c5266616e33b5c516f6ecf6fc33a5ba1bb79c49c977c07c59b3285237ecba0c5b14275cc870ee0cb278ae5cade5ad6c175ed39e45f7c2a08330acd16d90fdfc4cd578a51317ff50d948baa984bb4f4ee235250d0ab906dc3075cd7b103355fe27728456c91c74671f927f715fec81eda0194c024fccc9643684c71ac3fa83d5012f7c6ff15e5d5572cc8d33b4f139732b070cf8a5e608db1ac4ed37094d01d76e68e6aeaca6913ab5da7283c0daf85aff494cb2fc6cae052c63f7469ceabaae3f0a3cfa261ae5441527702babf6076aaeb977547f7ae4fa9530a34467a61f6f71334e9834b2f301d5624be11bf7b6c178f0b56dab9bd0c81f78b1bdbf64a888d19574288a979ae6ae05e9d284386f235c07e8fbecf4c38b2f325383f9dc3d556bd21bba1475042c292c4805c165952752237154913cbcaf7e5f6a6726be1af1d40a2517a5c4bb8005e71c62495b1c6cd9c8c1b00b33a14f8528abc94a6aebab5ba2c49a7383bbd4e6e546064e5c2d48cb96094cb2163383c8025384d7ee01563f4bf7137713bfec687eeff3324ec5d35f4bad43a77a37ea1404c90ea1d5b31bcbe10b4347d9f881299d858d48c7e5f5c6ddd4fe1227a5408b38cbee76f533600a89d0fe31df77ff66cc9cfb9207ba5f4f4fd9153b386575a5bbc5e2c8eca4a48e9f8011f5ccc0361e4f9319ac4bf0618931058f68f386bb1d87fe86ae2882a1207439b57c4626405f24c5c43549f7174c8b4c5f61261832a3c84deadf5296f93b177212eb236648830d2a9d4643377e7e7f8b21029cca8fdfb6a6c671c688e8f0917933f541ef2ee1655e8a88c63b24ec6e94f07581ca306b87e5f3ddf1f859bf3f2a2fe3c0f9b845721fa7fdf0250762f7ec8e11330014880e377ef30869895cf2f2d1bda123e6fb775e0169845b19b412e93d0a3ab4431d15505c83304b12a9d7f0c15ba6cb1033cead4dc9f0249550f1ee16fc4db528f6f61995c19dc50c684a349e1b868fc4d30aaa2adaf8e2d379578b1fcbfa44ad842de75ff615ddbc8fccbeca74998dd74233ef7ad3015fcfac9b9726f8fea7dbfa0b869c66ad235ec970dfb135fa2d3b958f0bbe61a68282eb6d2635212a4c53a4576b61aeeff837218886737a466a2d5914f4f8e0e7bd44b3b36cf18dd01dfc782752914466b2a8b2cc18bfd3f59ea0f12a98c2bd288800d8a6fe25cfc50a0fa693231eee314e0cb961961f870f677935555a6a2c4c155460a83b1624a64c29ea99f518843b4591d97eb1000415602940d014f9e38830bbadce46840e7950a24566de84bf84762f23da2a8f02c6bbba2a3a779ab89f9d25da6a87fbf4fcf55039de97f8b8b59c7f38158b619ab7229c0e3dfd67f2eee690a37196e7b44f0a57c6268f8219db4e211e716a03338be7ac2c74201aaebbe93c073d0f6545ab83a1db0b419050871d2bb1b8dedefff080d1788099ce634ba3e93c9d6ef2d9da3bb974617d82b394078c0bbb6c5815992ab2204053fd69684f4786fa9ec1abdfbc10e91ff6bce4858b4be334c462bd4e073c4b0b40fedd34c73cd9b75c81b359b0bb28f0b146ea3fcaa974115b7b6cf6066a336c575868e6489b9806c1f8"}]}, 0xec4}}, 0x0) 00:11:04 executing program 5: syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x0, 0x1, &(0x7f0000003d80)=[{&(0x7f0000002d00)="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", 0x1fd, 0x3}], 0x0, &(0x7f0000003e40)={[{@check_strict}, {}]}) 00:11:04 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0}) 00:11:04 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00') 00:11:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "ec6c8289a35d2de1dc49f08184e9f01e4723aaece7bf1d6537aa26e4c8efb6be"}) [ 664.082566][T27413] 9pnet_fd: Insufficient options for proto=fd 00:11:04 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, &(0x7f0000001000)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) [ 664.249808][T27427] 9pnet_fd: Insufficient options for proto=fd 00:11:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1f5, 0x0, 0x400000) 00:11:04 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) 00:11:04 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000280)) 00:11:04 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00') 00:11:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)) 00:11:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:11:04 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0xc580, 0x0) 00:11:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:11:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 00:11:04 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) 00:11:04 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x10000000) 00:11:04 executing program 1: syz_io_uring_setup(0x2451, &(0x7f0000000040), &(0x7f0000cf2000/0x1000)=nil, &(0x7f0000f01000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:11:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x21d, 0x0, 0x400000) 00:11:04 executing program 4: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 00:11:04 executing program 2: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000016c0)=[{&(0x7f0000002e80)="50f36cfad0e7a159b5cccb707087f010273c8dd5ad6b82b9e2addd6a51d8af53076b0756788a26412427937e1db6ead42cc503461b7b39373f647b73571c66a12e1600bf73db8bc2ad40990f1787c23f0f7f33161ec71822552a0909a7f02d87b78a5b9966b2cbb71ac06d875c12f2b87903ed4ef8d18f7dc427d59c973cd4ca23ea14366233cf17a8cd382806c395f022", 0x91, 0x4}, {&(0x7f0000000140)="8c6f9391f97d3c41116795ba7a5fa2f4d1e14c203b07aabc74447d7ca44db09208b3413ef45e429675f0eb086d2f43fc5ca63ed8596e78473de3bef186f44cb19aebfd806cfdb633f1a8199cad9c0b09dab44fc9a3d84c3e69a38a18c7c8505e48d153561bf7d96afb3bcf981b4fb09cb03340ef4c6c3a0e4df13b82f695710627fae5a26d31323f93ef752f507d382d02709a9bbf55d087ba07c016874b0346cd600de111fccc74884f911a3f5a5c2164", 0xb1, 0x40}, {&(0x7f0000000200)="1f323ab893a2a9e3657d73b39de86f7486eb2ae2447b0e8707ab0cd8bd9f335b9fd1fc9b1681e8b531687aabada9f6258a0900ec40631c03cd0d2eb737f1a0e638a5793548cc4854f5de87ecb3f3859980ac47f675f37ff5e4f6efc8a2c35717cf2aca7c483db6f8799be130c31da90b1a8c488f6d34e92f8b781ffea5e05ea84e66df18cffd96af361b4db194f7a94ff04c421d0000000100000300"/188, 0xbc, 0x4fd}], 0x1000010, &(0x7f0000002f40)={[{'\xd9\xcba-]\x7f)_\xd5\xe4~[#\x10\xef\x12\x03\x03\x9c\xe6!\xb6(+\xe3\xd6H%\xda\xf0\xb8\x97'}, {'):)::'}]}) 00:11:04 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x4c}, 0x4c}}, 0x0) 00:11:04 executing program 1: pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, 0x0) 00:11:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000080), 0x80000000, 0x1) 00:11:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:root_t:s0\x00'}]}, 0x5c}}, 0x0) 00:11:04 executing program 4: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$phonet_pipe(r0, 0x0, 0x0) 00:11:04 executing program 5: syz_mount_image$gfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000200)=ANY=[]) 00:11:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64], 0x1c}}, 0x0) [ 664.729987][T27460] loop2: detected capacity change from 0 to 4 00:11:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x62649b4be576e417, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x1c}}, 0x0) [ 664.780136][T27460] Dev loop2: unable to read RDB block 4 [ 664.789552][T27460] loop2: unable to read partition table [ 664.798043][T27460] loop2: partition table beyond EOD, truncated [ 664.804594][T27460] ADFS-fs (loop2): unrecognised mount option "a-])_~[#!(+H%" or missing value 00:11:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0130000", @ANYRES16=r1, @ANYBLOB="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"], 0x13f0}}, 0x0) 00:11:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x21e, 0x0, 0x400000) 00:11:05 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={0x0, 0x0, 0x18}, 0x10) 00:11:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, 0x0) 00:11:05 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0xf0ff7f) 00:11:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:05 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:11:05 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000200)) 00:11:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x2}, 0x0) 00:11:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9d1fdee5930f566c8c2709"], 0x30}}, 0x0) 00:11:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f00000001c0)=""/150, 0x2a, 0x96, 0x1}, 0x20) 00:11:05 executing program 3: bpf$BPF_GET_MAP_INFO(0xc, 0x0, 0x0) 00:11:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) 00:11:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x226, 0x0, 0x400000) 00:11:05 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a800000024000be4000000000000000000001200", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f000078000200560001000200000000000000000000000000000000000800040000000000000000000000000000000000000000000000000000000000000008"], 0xa8}}, 0x0) 00:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:11:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)) 00:11:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, 0x0) 00:11:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 00:11:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "8fe94d", 0x1}) 00:11:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="0084800000010000c4448000f0ff00001800000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\t'], 0x40}}, 0x0) [ 665.398459][T27515] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:05 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e) 00:11:05 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:11:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) [ 665.462452][T27521] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x42e, 0x0, 0x400000) 00:11:05 executing program 5: socketpair$unix(0xf, 0x3, 0x2, &(0x7f0000000b00)) 00:11:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, 0x0) 00:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x33fe0}}, 0x0) 00:11:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x18, r1, 0x721, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:11:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) [ 666.223845][T27511] Bluetooth: hci0: Opcode 0x c03 failed: -4 [ 666.231557][T27523] Bluetooth: hci0: HCI_REQ-0x0401 00:11:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "8fe94d", 0x1}) 00:11:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x465, 0x0, 0x400000) 00:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0xb2f, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:11:06 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000180)) 00:11:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffc8e}}, 0x0) 00:11:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}}, 0x0) 00:11:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002100)=0x10001, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0xf}}}, 0xb) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffffffffffff1d, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffc8e}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20000081) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) [ 666.343404][T27559] Bluetooth: hci0: HCI_REQ-0x0401 00:11:06 executing program 5: socketpair(0x2, 0x0, 0x200, &(0x7f0000000000)) 00:11:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 00:11:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f0000000240)) 00:11:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 00:11:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002100)=0x10001, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0xf}}}, 0xb) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffffffffffff1d, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffc8e}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20000081) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) 00:11:07 executing program 5: bpf$BPF_GET_MAP_INFO(0x5, 0x0, 0x0) 00:11:07 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xd5, &(0x7f00000000c0)=""/213, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, 0x0) 00:11:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x600, 0x0, 0x400000) 00:11:07 executing program 5: socketpair(0x11, 0xa, 0x8, &(0x7f0000000040)) 00:11:07 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 00:11:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002100)=0x10001, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0xf}}}, 0xb) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffffffffffff1d, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffc8e}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20000081) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) 00:11:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000240)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}}}, 0xb) 00:11:07 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 00:11:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002100)=0x10001, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0xf}}}, 0xb) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffffffffffff1d, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xfffffffffffffc8e}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20000081) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) 00:11:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x60}, 0x0) 00:11:07 executing program 4: socketpair(0x63, 0x0, 0x0, &(0x7f0000000180)) 00:11:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, 0x0) 00:11:07 executing program 1: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000240)) 00:11:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x632, 0x0, 0x400000) 00:11:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 00:11:07 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f0000000180)) 00:11:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="0084800000010000c4448000f0ff0000180000000600000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\t'], 0x40}}, 0x0) 00:11:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, 0x0) 00:11:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:07 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3c}, 0xc) 00:11:07 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x2c}}, 0x0) 00:11:07 executing program 1: bpf$BPF_GET_MAP_INFO(0x1a, 0x0, 0x0) 00:11:07 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xffffff48}, 0x8) [ 667.610921][T27615] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="0084800000010000c4448000f0ff0000180000000600000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\t'], 0x40}}, 0x0) 00:11:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x8, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4296172a1b38"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}]}, 0x30}}, 0x0) [ 667.721519][T27631] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x700, 0x0, 0x400000) 00:11:07 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xc000, 0x4) 00:11:07 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 00:11:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00cb"], 0x5c}}, 0x0) 00:11:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x615, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="d8f22b96d66553233dfa0dc31cf203f996dbdd116f78ddb5f5174ffa8c6c6fda2923b236a535fe03d10b8e44da4772146cb49cb3bc2735f57d6c28b58050d73a1b304bd3f5e4c233f028c6bb9a6ba3a7f3b127bf807e1996ede2aeaae8df0642b58e26e1036bd66c9cbc5b7c2ace805a3abf9741ca5de7c75a6ef177860fec520d90ec0826a2d0f6e9df0b66f1125e8b6af8a75953fb9e2fe2afcfe89062aeea8f867ca79383a8ce6eecdffec26b38051603e7d1b40d61ec7571aac7bf21a349cf7ef08a6b3592dac8c6288ec5bfc0182a452ec82fba449488981fd6127c2d3024", 0xe1}, {&(0x7f0000000540)="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", 0x214}], 0x2}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000680), 0x402, r0}, 0x38) 00:11:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0xffffffffffffffff, 0x0) 00:11:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:07 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 00:11:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 00:11:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, 0x0) 00:11:08 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 00:11:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x721, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 00:11:08 executing program 3: bpf$BPF_GET_MAP_INFO(0x8, 0x0, 0x0) 00:11:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x722, 0x0, 0x400000) 00:11:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x25) 00:11:08 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 00:11:08 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:11:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 00:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 00:11:08 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000001400018008", @ANYRES32=0x0, @ANYBLOB='\b'], 0x28}}, 0x0) 00:11:08 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:11:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 4: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 00:11:08 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x29, 0x0, 0x0) 00:11:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:11:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x735, 0x0, 0x400000) 00:11:08 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x10) 00:11:08 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 00:11:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x3f00}, 0x0) 00:11:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) 00:11:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB='\t'], 0x40}}, 0x0) 00:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0) 00:11:08 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:11:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x1) 00:11:08 executing program 2: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000140)) 00:11:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 4: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x615, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="d8f22b96d66553233dfa0dc31cf203f996dbdd116f78ddb5f5174ffa8c6c6fda2923b236a535fe03d10b8e44da4772146cb49cb3bc2735f57d6c28b58050d73a1b304bd3f5e4c233f028c6bb9a6ba3a7f3b127bf807e1996ede2aeaae8df0642b58e26e1036bd66c9cbc5b7c2ace805a3abf9741ca5de7c75a6ef177860fec520d90ec0826a2d0f6e9df0b66f1125e8b6af8a75953fb9e2fe2afcfe89062aeea8f867ca79383a8ce6eecdffec26b38051603e7d1b40d61ec7571aac7bf21a349cf7ef08a6b3592dac8c6288ec5bfc0182a452ec82fba449488981fd6127c2d3024", 0xe1}, {&(0x7f0000000540)="43d4fa3a76799abbcc71d500a5fbc538e7c1493cbe66df898ddea21acd67c851dacd633b78c355193b77a7a81b0d6ff4f55436e4c298d2dbafb7759eeaa8f18d9856fae9e98a5f8e962b0a67e1cc102739b247ec577c5c5f92ec567db3cef3306debf1476490375d7c7d44905fe48813c4b998efefb0e3a577ed8811d056c7a55f75c2191d31785bddd2a07ed981730dd40b1fa17026e76be2badbc487fe497f5db64d1118a3e47bc0ef8e0b8345ca1d17732a6abccc2033be310af958cea69674494f112cd99f2c1e86115b6ebf021a48cb099aaee1eeacdd37deb3dae7a0a3f66238dda4739b98d185c383ca4f2493566e30167b823e47bcaf020fa254e6bd6520735a5cdec8d229a775a6aa92e0fd80c1ee9128582744a3ab7818b63422a73b5298b5d97bc15cb35c5efc548cff091b37b42b95e6b4cd9f4b64fab6abf9781b97242dcda1a338cdc2160109e2504ae193f529cb9959481ef8d9f4f66748b8babd5b155a435c5b21fe255b93b6b6c5e57b4cdebdd63bfe1d9d208d60ddd4137ff94c72b8b5d8726b36ada13c158490d41ab956a2b5514f6e5900d0a372408f1cd624a81112c77ee181bafc76507b1b705c26dce289d7936a15ad47d82213f72bc251afb766a057361ec55ec91a756fcd4a16f92bb1e08f8e7a19ad58853385c77bdac574431e264d1feea5759c89dd20d8922d3330899b5bb141e89f0dd91432dc5117e7ab46c12bd32ede8ba1f2cab853", 0x212}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="84bf6a2e57997080ad40a806fcc260e0c818d8633dfc25c51c56b723eb896360ccfe73f81aa90f32d4155ee3debf7276869826020381363f54166f1aafcc7c5f8a5a07bf64d3df3ec8d9b1316106df61a57b82b1d176b5e593b256d8b10162", 0x5f}, {&(0x7f00000001c0)="2977b5f5f4", 0x5}, {&(0x7f0000000240)}, {&(0x7f0000000340)}, {&(0x7f00000007c0)="56d9fff7b37d38d7c6bedc7a436af55c2bafd8f524fa86c56a34cf174cf7f043587a9cd3ee750eab00f0f12a1693766370a66f2ee0a273fd4be0f8c3f246900d338e", 0x42}, {&(0x7f0000000400)}], 0x6}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000680), 0x402, r0}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x6e, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000240)={0x8, 'dummy0\x00', {'macvlan1\x00'}, 0xcd4}) 00:11:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x740, 0x0, 0x400000) 00:11:08 executing program 3: socketpair(0x2, 0x6, 0x40, &(0x7f0000000000)) 00:11:08 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01005f590000000000000e00000008000300", @ANYBLOB="080001000092"], 0x24}}, 0x0) 00:11:08 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000100)) 00:11:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/150, 0x1a, 0x96, 0x1}, 0x20) 00:11:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x7513}, 0x0) 00:11:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=ANY=[@ANYBLOB="a80f0000", @ANYRES16=r1, @ANYBLOB="390a29bd5eafa6f000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="6c000e8066"], 0xfa8}}, 0x0) 00:11:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0xe00}, 0x0) [ 668.975341][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:09 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={0x0}}, 0x0) 00:11:09 executing program 5: bpf$BPF_GET_MAP_INFO(0x12, 0x0, 0x0) 00:11:09 executing program 4: bpf$BPF_GET_MAP_INFO(0x18, 0x0, 0x0) 00:11:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x741, 0x0, 0x400000) 00:11:09 executing program 1: socketpair(0x25, 0x5, 0x4, &(0x7f0000000140)) 00:11:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 00:11:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1d}, 0x0) 00:11:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\t'], 0x40}}, 0x0) 00:11:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x30}}, 0x0) 00:11:09 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x9000) 00:11:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:09 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000180)) 00:11:09 executing program 1: socketpair(0x25, 0x5, 0x4, &(0x7f0000000140)) 00:11:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:11:09 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000010000000140001"], 0x28}}, 0x0) 00:11:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x742, 0x0, 0x400000) 00:11:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffffffff000}}, 0x0) 00:11:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "8fe94d", 0x32}) 00:11:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17082abd7000fcdbdf2527000000080003"], 0x2c}}, 0x0) 00:11:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:09 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/72, 0x1026000, 0x1000}, 0x20) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:11:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, 0x0) 00:11:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x3, &(0x7f0000000a80)=@framed, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) [ 669.630117][T27775] Bluetooth: hci0: HCI_REQ-0x0401 [ 669.650030][T27776] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:09 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 00:11:09 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000040)) 00:11:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0'], 0x33fe0}}, 0x0) 00:11:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x743, 0x0, 0x400000) 00:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 670.145900][ T3686] kworker/dying (3686) used greatest stack depth: 21696 bytes left 00:11:10 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01005f590000000000000e00000008000300", @ANYRES32, @ANYBLOB="080001000092"], 0x24}}, 0x0) 00:11:10 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01005f590000000000000e000000"], 0x24}}, 0x0) 00:11:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, 0x0) 00:11:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffdef}}, 0x0) 00:11:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, 0x2c}}, 0x0) 00:11:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x744, 0x0, 0x400000) 00:11:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc88dbd45538da5e0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 00:11:10 executing program 5: bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) 00:11:10 executing program 2: bpf$BPF_GET_MAP_INFO(0x16, 0x0, 0x0) 00:11:10 executing program 4: socketpair(0x23, 0x0, 0x10000, &(0x7f0000000040)) 00:11:10 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 00:11:10 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 00:11:10 executing program 2: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x615, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="d8f22b96d66553233dfa0dc31cf203f996dbdd116f78ddb5f5174ffa8c6c6fda2923b236a535fe03d10b8e44da4772146cb49cb3bc2735f57d6c28b58050d73a1b304bd3f5e4c233f028c6bb9a6ba3a7f3b127bf807e1996ede2aeaae8df0642b58e26e1036bd66c9cbc5b7c2ace805a3abf9741ca5de7c75a6ef177860fec520d90ec0826a2d0f6e9df0b66f1125e8b6af8a75953fb9e2fe2afcfe89062aeea8f867ca79383a8ce6eecdffec26b38051603e7d1b40d61ec7571aac7bf21a349cf7ef08a6b3592dac8c6288ec5bfc0182a452ec82fba449488981fd6127c2d3024", 0xe1}, {&(0x7f0000000540)="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", 0x214}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="84bf6a2e57997080ad40a806fcc260e0c818d8633dfc25c51c56b723eb896360ccfe73f81aa90f32d4155ee3debf7276869826020381363f54166f1aafcc7c5f8a5a07bf64d3df3ec8d9b1316106df61a57b82b1d176b5e593b256d8b10162", 0x5f}, {&(0x7f00000001c0)="2977b5f5f4", 0x5}, {&(0x7f0000000240)}, {&(0x7f0000000340)}, {&(0x7f00000007c0)="56d9fff7b37d38d7c6bedc7a436af55c2bafd8f524fa86c56a34cf174cf7f043587a9cd3ee750eab00f0f12a1693766370a66f2ee0a273fd4be0f8c3f246900d338e", 0x42}, {&(0x7f0000000400)}], 0x6}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000680), 0x402, r0}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x6e, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000240)={0x8, 'dummy0\x00', {'macvlan1\x00'}, 0xcd4}) 00:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x721}, 0x14}}, 0x0) 00:11:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:11:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x40}}, 0x0) [ 670.658818][T27833] Bluetooth: hci0: HCI_REQ-0x0401 [ 670.715056][T27837] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x746, 0x0, 0x400000) 00:11:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17082abd7000fcdbdf2527000000080003cd"], 0x2c}}, 0x0) 00:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:11:10 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x98, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x4c011) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) 00:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x40}}, 0x0) 00:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6004a00}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:11:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:10 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x10d, 0x0, 0x0, 0x0) 00:11:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) [ 670.921163][T27850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.933462][T27848] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 00:11:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xc}, 0x48) 00:11:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x749, 0x0, 0x400000) 00:11:11 executing program 4: bpf$BPF_GET_MAP_INFO(0x11, 0x0, 0x0) 00:11:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000253313d6e9f18431c"], 0x30}}, 0x0) 00:11:11 executing program 3: socketpair(0xa, 0x3, 0x9, &(0x7f0000000180)) 00:11:11 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 00:11:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, 0x0) 00:11:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=ANY=[@ANYBLOB="a80f0000", @ANYRES16=r1, @ANYBLOB="390a29bd5eafa6f000000e00000008000300", @ANYRES32=0x0, @ANYBLOB="6c000e"], 0xfa8}}, 0x0) 00:11:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x300}, 0x0) 00:11:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1d}, 0x0) 00:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 00:11:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x18, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) 00:11:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x30}, 0x8}, 0x0) [ 671.272340][T27876] netlink: 3872 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 00:11:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:11:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x401, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:11:11 executing program 3: socketpair(0x25, 0x5, 0x8, &(0x7f0000000000)) 00:11:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xc}, 0x48) 00:11:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x74a, 0x0, 0x400000) 00:11:11 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 00:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 00:11:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6051fb62f2556c9d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:11:11 executing program 5: bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) 00:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x121, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) 00:11:11 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01005f590000000000000e0000000800", @ANYBLOB='\b'], 0x24}}, 0x0) 00:11:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x1030, 0x1}, 0x48) 00:11:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, 0x0) 00:11:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x6, 0x0, 0x1}, 0x48) 00:11:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) 00:11:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16], 0x30}, 0x1d}, 0x0) 00:11:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x74e, 0x0, 0x400000) 00:11:11 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:11:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 'Z+K'}) 00:11:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, 0x0) 00:11:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, 0x0) 00:11:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x7ffffffff000}}, 0x0) 00:11:11 executing program 1: bpf$BPF_GET_MAP_INFO(0x1e, 0x0, 0x0) 00:11:11 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 00:11:11 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 00:11:11 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:11:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:11:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, 0x0) 00:11:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x754, 0x0, 0x400000) 00:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x1}, 0x20) 00:11:12 executing program 3: socketpair(0x22, 0x0, 0x56, &(0x7f0000000040)) 00:11:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17082abd7000fcdbdf2527000000080003cd0b07b2a900"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:11:12 executing program 2: bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0xf4) 00:11:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x3, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x0) 00:11:12 executing program 3: bpf$BPF_GET_MAP_INFO(0x14, 0x0, 0x0) 00:11:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xffff, 0x0, 0x0, 0x1}, 0x48) 00:11:12 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/time\x00') 00:11:12 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001540)={&(0x7f0000000000), 0xc, &(0x7f0000001500)={&(0x7f0000000100)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) 00:11:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, 0x0) [ 672.222689][T27959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}}, 0x0) 00:11:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x75b, 0x0, 0x400000) 00:11:12 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x43c}}, 0x0) 00:11:12 executing program 2: socketpair(0x23, 0x0, 0xffffc7a0, &(0x7f0000000100)) 00:11:12 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={0x0, 0xf0ff7f00000000}}, 0x0) 00:11:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, 0x0) 00:11:12 executing program 4: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x7dd9b2e5de85a70b) 00:11:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2514"], 0x28}}, 0x0) 00:11:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0xf0}, 0x0) 00:11:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25000000000c000300030000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002"], 0x40}}, 0x0) 00:11:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:11:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', 0x0}) [ 672.554760][T27988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:12 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@bcast, @rose, @bcast, @default, @netrom, @null, @remote, @bcast]}, &(0x7f0000000180)=0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) accept$ax25(r2, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @null, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) accept4$netrom(r3, &(0x7f0000000200)={{0x3, @bcast}, [@rose, @remote, @bcast, @default, @null, @netrom, @bcast, @bcast]}, &(0x7f0000000280)=0x48, 0x80800) [ 672.601464][T27991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x75d, 0x0, 0x400000) 00:11:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0xb}, 0x0) 00:11:12 executing program 5: bpf$BPF_GET_MAP_INFO(0x2, 0x0, 0x0) 00:11:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0xfffffdef}}, 0x0) 00:11:12 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000000180)) 00:11:12 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x20, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x70af21c4273e6066}]}]}, 0x20}}, 0x0) 00:11:12 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x393, 0x4) 00:11:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 00:11:12 executing program 3: bpf$BPF_GET_MAP_INFO(0x1c, 0x0, 0x0) 00:11:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x615, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="d8f22b96d66553233dfa0dc31cf203f996dbdd116f78ddb5f5174ffa8c6c6fda2923b236a535fe03d10b8e44da4772146cb49cb3bc2735f57d6c28b58050d73a1b304bd3f5e4c233f028c6bb9a6ba3a7f3b127bf807e1996ede2aeaae8df0642b58e26e1036bd66c9cbc5b7c2ace805a3abf9741ca5de7c75a6ef177860fec520d90ec0826a2d0f6e9df0b66f1125e8b6af8a75953fb9e2fe2afcfe89062aeea8f867ca79383a8ce6eecdffec26b38051603e7d1b40d61ec7571aac7bf21a349cf7ef08a6b3592dac8c6288ec5bfc0182a452ec82fba449488981fd6127c2d3024", 0xe1}, {&(0x7f0000000540)="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", 0x214}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="84bf6a2e57997080ad40a806fcc260e0c818d8633dfc25c51c56b723eb896360ccfe73f81aa90f32d4155ee3debf7276869826020381363f54166f1aafcc7c5f8a5a07bf64d3df3ec8d9b1316106df61a57b82b1d176b5e593b256d8b10162", 0x5f}, {&(0x7f00000001c0)="2977b5f5f4", 0x5}, {&(0x7f0000000240)}, {&(0x7f0000000340)}, {&(0x7f00000007c0)="56d9fff7b37d38d7c6bedc7a436af55c2bafd8f524fa86c56a34cf174cf7f043587a9cd3ee750eab00f0f12a1693766370a66f2ee0a273fd4be0f8c3f246900d338e", 0x42}, {&(0x7f0000000400)}], 0x6}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000680), 0x402, r0}, 0x38) 00:11:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 00:11:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xc00, 0x0, 0x400000) 00:11:13 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) 00:11:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:13 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 00:11:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000040)={0x0, 0x0, "8fe94d"}) 00:11:13 executing program 1: bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) 00:11:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:11:13 executing program 3: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)) 00:11:13 executing program 2: bpf$BPF_GET_MAP_INFO(0xd, 0x0, 0x0) 00:11:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x300}, 0x0) 00:11:13 executing program 5: getuid() syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0xffff, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)="12fa", 0x2}, {&(0x7f0000000240)="c1", 0x1, 0xe16c}], 0x0, 0x0) 00:11:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 00:11:13 executing program 3: bpf$BPF_GET_MAP_INFO(0x21, 0x0, 0x0) 00:11:13 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) 00:11:13 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}]}}]}, 0xa4}}, 0x0) 00:11:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:11:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1200, 0x0, 0x400000) 00:11:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x5}]}}, &(0x7f00000001c0)=""/150, 0x2a, 0x96, 0x1}, 0x20) 00:11:13 executing program 3: socketpair(0x26, 0x5, 0x7b, &(0x7f0000000000)) 00:11:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 00:11:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:11:13 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 00:11:13 executing program 2: bpf$BPF_GET_MAP_INFO(0xa, 0x0, 0x0) 00:11:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1d}, 0x0) 00:11:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800}}) 00:11:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xb}, 0x0) 00:11:13 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/87, 0x24000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) 00:11:13 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:11:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1800, 0x0, 0x400000) 00:11:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x2100}, 0x0) 00:11:14 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x43c}}, 0x0) 00:11:14 executing program 1: socketpair(0x3, 0x0, 0xfff, 0x0) 00:11:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 00:11:14 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000180)="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", 0x76a}], 0x1) 00:11:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 00:11:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 00:11:14 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8], [], 0xfffff000}) 00:11:14 executing program 4: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='-%,\x00', 0xfffffffffffffffc) 00:11:14 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x414202) 00:11:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0x6c00, 0x0) 00:11:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1d02, 0x0, 0x400000) 00:11:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:14 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "82228538be9f279402cdbea68d3abd9f0522025764ac41037ddcba0fdb833dfc6d8546e2a1e1ed9703b6b1a67f3592386a35436e86b620f5ed1320439e3a25d5"}, 0x48, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) 00:11:14 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8906, 0x0) 00:11:14 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:14 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8], [], 0xfffff000}) 00:11:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000d"], 0x14}}, 0x0) 00:11:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0xdb, 0x2, 0xfffffeff, 0x400, 0x8, "f2030ef295e55c4f13a3d145d69bae40cb5f4e"}) 00:11:14 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8], [], 0xfffff000}) 00:11:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x44001, 0x0) 00:11:14 executing program 3: syz_open_dev$dri(&(0x7f0000000840), 0x4000000000080, 0x20a6e2) [ 674.495893][T28116] Restarting kernel threads ... done. 00:11:14 executing program 4: r0 = socket$isdn(0x22, 0x3, 0x0) sendto$isdn(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e00, 0x0, 0x400000) 00:11:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:11:14 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8], [], 0xfffff000}) 00:11:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b5d0807000000319b"], 0x78) 00:11:14 executing program 4: socket(0x10, 0x2, 0x6c444fe8) 00:11:14 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040), 0x4) 00:11:14 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) 00:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={0x0}}, 0x0) 00:11:14 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 00:11:14 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89e3, 0x0) 00:11:14 executing program 1: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) 00:11:15 executing program 5: socket(0xa, 0x3, 0x31) 00:11:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e02, 0x0, 0x400000) 00:11:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000440)) 00:11:15 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x541b, 0x0) 00:11:15 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 00:11:15 executing program 3: add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "59eb4085eb1708e832c108267633bc69174aad19c886662033ba634fc89a680a8f315ceafa71456f2ac5baad14ce8e0c97b697cf4c6c4ddfe13b020371367e32"}, 0x48, 0xfffffffffffffffb) 00:11:15 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 00:11:15 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{}]}) 00:11:15 executing program 5: add_key$fscrypt_v1(&(0x7f0000000540), 0x0, &(0x7f00000005c0)={0x0, "59eb4085eb1708e832c108267633bc69174aad19c886662033ba634fc89a680a8f315ceafa71456f2ac5baad14ce8e0c97b697cf4c6c4ddfe13b020371367e32"}, 0x48, 0xfffffffffffffffb) 00:11:15 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8907, 0x0) 00:11:15 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) sendfile(r1, r1, &(0x7f00000001c0), 0x8080ffffff24) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 00:11:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) 00:11:15 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8901, 0x0) [ 675.422617][T28178] loop2: detected capacity change from 0 to 512 [ 675.597538][T28178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 00:11:16 executing program 5: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) 00:11:16 executing program 3: shmget(0x3, 0x800000, 0x0, &(0x7f00007fd000/0x800000)=nil) 00:11:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000020363f"], 0x14}}, 0x0) 00:11:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 00:11:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1f00, 0x0, 0x400000) 00:11:16 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 676.277488][ T3637] EXT4-fs (loop2): unmounting filesystem. 00:11:16 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, &(0x7f0000000080)={{0x3, @rose}, [@rose, @bcast, @rose, @null, @null, @null, @netrom, @rose]}, &(0x7f0000000140)=0x48) 00:11:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8903, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:16 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) 00:11:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x28}}, 0x0) 00:11:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:11:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) 00:11:16 executing program 5: syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x309041) 00:11:16 executing program 3: socket(0x2, 0x2, 0x7) 00:11:16 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:11:16 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000200) 00:11:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2000, 0x0, 0x400000) 00:11:16 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000300)) 00:11:16 executing program 5: syz_open_dev$dri(&(0x7f0000000840), 0x0, 0xa441) 00:11:16 executing program 4: r0 = socket(0x18, 0x0, 0x0) accept$ax25(r0, 0x0, 0x0) 00:11:16 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000001440)) 00:11:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe, 0x1}) 00:11:16 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)) 00:11:16 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 00:11:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89a1, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) [ 676.942626][T28235] syz-executor.2 uses old SIOCAX25GETINFO 00:11:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000300)) 00:11:17 executing program 3: add_key$keyring(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:11:17 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:11:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2207, 0x0, 0x400000) 00:11:17 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 00:11:17 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:17 executing program 3: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) 00:11:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000300)) 00:11:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/58) 00:11:17 executing program 5: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) 00:11:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) 00:11:17 executing program 2: syz_open_dev$dri(&(0x7f0000000840), 0xb, 0x0) 00:11:17 executing program 4: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/228) 00:11:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 00:11:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000300)) 00:11:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2400, 0x0, 0x400000) 00:11:17 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x40049409, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:17 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8901, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)) 00:11:17 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x9, 0x0, 0x0) 00:11:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1b, 0xa042) 00:11:17 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x541b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) 00:11:17 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 00:11:17 executing program 3: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x25712c1c88c09bad) 00:11:17 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8925, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:17 executing program 1: syz_init_net_socket$ax25(0x3, 0xffffffffffffffff, 0x0) 00:11:17 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x4) 00:11:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2602, 0x0, 0x400000) 00:11:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000940)={0x0}) 00:11:18 executing program 5: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000440)) 00:11:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5460, 0x0) 00:11:18 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8], [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 00:11:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x4020940d, 0x0) 00:11:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 00:11:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f0000000600), 0xc, 0x0}, 0x0) 00:11:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) 00:11:18 executing program 3: syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x400000) 00:11:18 executing program 4: add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 00:11:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2a00, 0x0, 0x400000) 00:11:18 executing program 1: syz_clone(0x140400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @null, @bcast, @null]}, 0x48) 00:11:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, 0x0) 00:11:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 00:11:18 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000, 0x5, 0xfffffff8]}) 00:11:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0xfffffeff, 0x400, 0x8, "f2030ef295e55c4f13a3d145d69bae40cb5f4e"}) [ 678.693404][T28334] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 00:11:18 executing program 1: syz_clone(0x140400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3c) 00:11:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140f"], 0x14}}, 0x0) 00:11:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 00:11:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2e04, 0x0, 0x400000) 00:11:19 executing program 4: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 00:11:19 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) 00:11:19 executing program 1: syz_clone(0x140400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:19 executing program 2: syz_open_dev$dri(&(0x7f0000000840), 0x0, 0xa0c0) 00:11:19 executing program 3: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x0, "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"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000580)) 00:11:19 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:11:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 00:11:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:11:19 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@bcast, @bcast, @bcast, 0x0, 0x0, 0x0, [@default, @bcast, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 00:11:19 executing program 1: syz_clone(0x140400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) 00:11:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2f00, 0x0, 0x400000) 00:11:19 executing program 5: socket(0x65794bfc3db67bc0, 0x0, 0x0) 00:11:19 executing program 3: socket(0x18, 0x0, 0x1de) 00:11:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:11:19 executing program 4: accept$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xae6, 0x181800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) 00:11:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0x68000000, 0x0) 00:11:19 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x44001, 0x0) 00:11:19 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000440)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 00:11:19 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) [ 679.589255][T28383] random: crng reseeded on system resumption 00:11:19 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 00:11:19 executing program 5: r0 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) [ 679.678033][T28399] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 00:11:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3000, 0x0, 0x400000) 00:11:20 executing program 2: syz_open_dev$dri(&(0x7f0000000840), 0xae4, 0xa040) 00:11:20 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x7) 00:11:20 executing program 1: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000140)) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000180), 0x4) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(r0, 0x3305) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) 00:11:20 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:20 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000480), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000003200)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x270, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "ac461785a4125002b7275b5ef4842f28457a820a3a83606412587863b0ba7cf1988ec40dfd64489383eeeae41a8d1699885d3f70de"}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "9306ff3fa9f569b67d17e0a9a43df9e706d1299bfa4ccbfbdcbbe37f1818beb3f40f24d7e9cc2c07f3b7226840b660bb6fdfeb886d945e2c1cc26a2560b4df4849b1d9bd782e36ada36c690cdb"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')]-\xf9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%/\'\\\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "4723755b96ddf7a34029ba6c9d89bc7dec7153a49d4b24784e8af04b64948539f55ef2c61f0fb1961e3b3c18d1"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\x1d*{@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "4c4743c0ef7c533b767cb6b3bd765ea446f0b6a70d4b9e465a7f4c2140c64c84c31fedb4bc33867e397957d006fcdc3b5f95e6a8a0b5c853753899a2458862a1bd3a79e592411206d95ac16960218c370f76ff862a"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "dff9b7963dab01961561add33fb62866b8986e95e389406f59b0d784a49c7f03376a33afcb38e875fe49e4fba6274a8dc6a43df4d2a3443c9853194e67"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x20c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "c7600e78b786f1b150382fb80852433f700c6adf0bbfd614bc6d16abee9519e2d0485b36c80e4fa804624ff938a0b486ecb3bff31a8cc36ee2c9aa940af61e9d14a7df1b48338ae601124b35cee216efe094507b3cd025ffe90b0c467ea50a387b6c82f6a2b2945da3fc0793154910baa0bf362c63b7eff63c2bd9682f4c70100d603bd1bee2336cedd751e985e7144bd82b08c2057c3a5df4419315082901cea1487350e51779838eb6061ae5ece1762ab2a7f1b2077546081b8a5f806c24d65f3b1c6199924baaf78aadf1dd8f8731e960e3e04d1047594ca58ddbad734d9173553c15621365c6c8d10e2c08"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "51021d7e951f8f58fdeed2d60ee531ffc3df3ed21dff0118179fd1085afe822fcfa63983b6eba109abdf7b8aab39d9a968a2340f2467358530101146a82c0ecdd1c84f0b9043d07fd2023e6889e5309c85e699f0da696652441fcc2c8a"}, @ETHTOOL_A_BITSET_VALUE={0x951, 0x4, "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"}]}]}, 0xec4}}, 0x0) 00:11:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x90242) 00:11:20 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) socket(0x0, 0x0, 0x0) 00:11:20 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) 00:11:20 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5450, 0x0) [ 680.098156][T28412] Restarting kernel threads ... done. [ 680.120094][T28416] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.156705][T28425] overlayfs: missing 'lowerdir' 00:11:20 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x309041) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) [ 680.226574][T28431] random: crng reseeded on system resumption 00:11:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3206, 0x0, 0x400000) 00:11:20 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) 00:11:20 executing program 4: socket$isdn(0x22, 0x3, 0x2) 00:11:20 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/104) 00:11:20 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000480), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:20 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89a0, 0x0) 00:11:20 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "82228538be9f279402cdbea68d3abd9f0522025764ac41037ddcba0fdb833dfc6d8546e2a1e1ed9703b6b1a67f3592386a35436e86b620f5ed1320439e3a25d5"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 00:11:20 executing program 2: syz_open_dev$dri(&(0x7f0000000840), 0x0, 0x4f943) 00:11:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 00:11:20 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:11:20 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:20 executing program 3: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_open_pts(r0, 0x12d820) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc0100, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0xfffffffffffffffe) syz_open_pts(r0, 0x23500) [ 680.673024][T28441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.743169][T28455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.801311][T28441] overlayfs: missing 'lowerdir' 00:11:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3507, 0x0, 0x400000) 00:11:21 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8983, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:21 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r0, &(0x7f0000000100), 0x6) 00:11:21 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), 0x4) 00:11:21 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:21 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000480), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:21 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) 00:11:21 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89ed, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:21 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0}}, 0x48) 00:11:21 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 00:11:21 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) [ 681.170230][T28466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 681.187596][T28464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:21 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 681.259853][T28466] overlayfs: missing 'lowerdir' [ 681.451085][T28486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3600, 0x0, 0x400000) 00:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x40000001) 00:11:21 executing program 2: syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) 00:11:21 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000480), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:21 executing program 3: r0 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 00:11:21 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:21 executing program 4: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/146) 00:11:21 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 681.733231][T28493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 681.756485][T28493] overlayfs: missing 'lowerdir' 00:11:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5452, 0x0) 00:11:21 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, 0x0, 0x0) [ 681.820200][T28496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:21 executing program 4: r0 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 00:11:21 executing program 4: r0 = socket$isdn(0x22, 0x3, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, 0x0) 00:11:22 executing program 3: getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) 00:11:22 executing program 2: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0) 00:11:22 executing program 5: socket(0x2b, 0x1, 0xffff) 00:11:22 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000f40)=""/165) 00:11:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3c00, 0x0, 0x400000) 00:11:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0xf0ff7f, 0x0) 00:11:22 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 00:11:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f00000001c0)) 00:11:22 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 00:11:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x2, 0x0) 00:11:22 executing program 1: request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 00:11:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) 00:11:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x3437f2d0, 0x0, 0x0, "e741c5ff0b7dfe49f7df129b0e27fabb7b5eb8"}) 00:11:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x0, 0x1}) 00:11:22 executing program 5: socket(0x1, 0x0, 0x1f) 00:11:22 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8904, 0x0) 00:11:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3f00, 0x0, 0x400000) 00:11:22 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:22 executing program 3: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x452000) 00:11:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0xc0189436, 0x0) 00:11:22 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) 00:11:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:11:22 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 00:11:22 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f00000005c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 00:11:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8cf78e53becc4568274b21c9f0de663e687e7"}) 00:11:22 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x894c, 0x0) 00:11:22 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x0, [0x1000]}) 00:11:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) write$snapshot(r0, 0x0, 0x0) 00:11:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4000, 0x0, 0x400000) 00:11:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 00:11:23 executing program 2: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 00:11:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000180), 0x4) 00:11:23 executing program 4: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_FREE(r0, 0x3305) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) 00:11:23 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f00000005c0)) 00:11:23 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, 0x0, &(0x7f0000000140)) 00:11:23 executing program 5: accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x1800) 00:11:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}], 0x0, 0x0, 0x0}) 00:11:23 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='a') 00:11:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5421, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:23 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xae6, 0x181800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) [ 683.314297][T28593] random: crng reseeded on system resumption 00:11:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4007, 0x0, 0x400000) 00:11:23 executing program 4: socket(0x2, 0xa, 0x1) 00:11:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}], 0x0, 0x0, 0x0}) 00:11:23 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc0100, 0x0) 00:11:23 executing program 3: syz_open_dev$dri(&(0x7f0000000840), 0x0, 0xa040) 00:11:23 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x2, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}], 0x0, 0x0, 0x0}) 00:11:23 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1200000, 0x1) 00:11:23 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5452, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:23 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8940, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:23 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 00:11:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}], 0x0, 0x0, 0x0}) 00:11:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4107, 0x0, 0x400000) 00:11:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:11:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8981, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000300)) 00:11:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f2030ef295e55c4f13a3d145d69bae40cb5f4e"}) 00:11:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000840), 0xae4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, 0x0) 00:11:24 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x3f}) 00:11:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000580)) 00:11:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89a0, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:24 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5451, 0x0) 00:11:24 executing program 2: socket(0x2c, 0x3, 0x7) 00:11:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000500), 0x4) [ 684.179310][T28639] random: crng reseeded on system resumption 00:11:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4200, 0x0, 0x400000) 00:11:24 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x30000) 00:11:24 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x6642) 00:11:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) 00:11:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x40049409, 0x0) 00:11:24 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x3f}) 00:11:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 00:11:24 executing program 4: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) 00:11:24 executing program 3: r0 = socket(0xa, 0x3, 0x31) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) [ 684.584437][T28656] random: crng reseeded on system resumption 00:11:24 executing program 5: request_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0xfffffffffffffffc) 00:11:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000440)) 00:11:24 executing program 3: add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffb) 00:11:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4207, 0x0, 0x400000) 00:11:25 executing program 4: shmget$private(0x0, 0x1000, 0x78000801, &(0x7f0000ffe000/0x1000)=nil) 00:11:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000440)) 00:11:25 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x62, 0x0, 0x0) 00:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0xc001) 00:11:25 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x3f}) 00:11:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x0) 00:11:25 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) [ 685.038409][T28684] random: crng reseeded on system resumption 00:11:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000440)) 00:11:25 executing program 4: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) 00:11:25 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000001, 0x10, r0, 0x83000000) 00:11:25 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x3f}) [ 685.229324][T28697] random: crng reseeded on system resumption 00:11:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4307, 0x0, 0x400000) 00:11:25 executing program 4: request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 00:11:25 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x4000200) 00:11:25 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000440)) 00:11:25 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:11:25 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x4000200) [ 685.505799][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.512181][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 00:11:25 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x0) 00:11:25 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) 00:11:25 executing program 2: r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) 00:11:25 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d262c7d865d5e2c667363", @ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, 0x0) 00:11:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe}) [ 685.633796][T28717] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 00:11:26 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 00:11:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8980, 0x0) 00:11:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d262c7d865d5e2c667363", @ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4407, 0x0, 0x400000) 00:11:26 executing program 2: setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0xfffffdcf) 00:11:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000003200)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x270, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "ac461785a4125002b7275b5ef4842f28457a820a3a83606412587863b0ba7cf1988ec40dfd64489383eeeae41a8d1699885d3f70de"}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "9306ff3fa9f569b67d17e0a9a43df9e706d1299bfa4ccbfbdcbbe37f1818beb3f40f24d7e9cc2c07f3b7226840b660bb6fdfeb886d945e2c1cc26a2560b4df4849b1d9bd782e36ada36c690cdb"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')]-\xf9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%/\'\\\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "4723755b96ddf7a34029ba6c9d89bc7dec7153a49d4b24784e8af04b64948539f55ef2c61f0fb1961e3b3c18d1"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\x1d*{@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "4c4743c0ef7c533b767cb6b3bd765ea446f0b6a70d4b9e465a7f4c2140c64c84c31fedb4bc33867e397957d006fcdc3b5f95e6a8a0b5c853753899a2458862a1bd3a79e592411206d95ac16960218c370f76ff862a"}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "dff9b7963dab01961561add33fb62866b8986e95e389406f59b0d784a49c7f03376a33afcb38e875fe49e4fba6274a8dc6a43df4d2a3443c9853194e67"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x20c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "c7600e78b786f1b150382fb80852433f700c6adf0bbfd614bc6d16abee9519e2d0485b36c80e4fa804624ff938a0b486ecb3bff31a8cc36ee2c9aa940af61e9d14a7df1b48338ae601124b35cee216efe094507b3cd025ffe90b0c467ea50a387b6c82f6a2b2945da3fc0793154910baa0bf362c63b7eff63c2bd9682f4c70100d603bd1bee2336cedd751e985e7144bd82b08c2057c3a5df4419315082901cea1487350e51779838eb6061ae5ece1762ab2a7f1b2077546081b8a5f806c24d65f3b1c6199924baaf78aadf1dd8f8731e960e3e04d1047594ca58ddbad734d9173553c15621365c6c8d10e2c08"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "51021d7e951f8f58fdeed2d60ee531ffc3df3ed21dff0118179fd1085afe822fcfa63983b6eba109abdf7b8aab39d9a968a2340f2467358530101146a82c0ecdd1c84f0b9043d07fd2023e6889e5309c85e699f0da696652441fcc2c8a"}, @ETHTOOL_A_BITSET_VALUE={0x951, 0x4, "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"}]}]}, 0xec4}}, 0x0) 00:11:26 executing program 5: mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x83000000) 00:11:26 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x7ffffffffffffdff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) 00:11:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)) 00:11:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5411, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:26 executing program 4: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 00:11:26 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0x0, 0xffffffffffffffff}}) 00:11:26 executing program 1: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "82228538be9f279402cdbea68d3abd9f0522025764ac41037ddcba0fdb833dfc6d8546e2a1e1ed9703b6b1a67f3592386a35436e86b620f5ed1320439e3a25d5"}, 0x48, 0xfffffffffffffffe) [ 686.108316][T28733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d262c7d865d5e2c667363", @ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 686.337410][T28758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4607, 0x0, 0x400000) 00:11:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) 00:11:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x541b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:11:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket(0x0, 0x0, 0x0) 00:11:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d262c7d865d5e2c667363", @ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)) 00:11:26 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) 00:11:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@my=0x0}) 00:11:26 executing program 5: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) 00:11:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0xc020660b, 0x0) [ 686.703566][T28769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 686.925320][T28785] Restarting kernel threads ... done. 00:11:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4907, 0x0, 0x400000) 00:11:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) 00:11:27 executing program 1: socket(0x1d, 0x0, 0xc8) 00:11:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f0000000600), 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) 00:11:27 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) 00:11:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:27 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 00:11:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8925, 0x0) 00:11:27 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x89e3, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:27 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:11:27 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:11:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000), 0x3, &(0x7f0000000540)={&(0x7f00000005c0)={0x170, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x170}}, 0x0) 00:11:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4a07, 0x0, 0x400000) 00:11:27 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 00:11:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0xc0045878, 0x0) 00:11:27 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 00:11:27 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:11:27 executing program 2: syz_open_dev$dri(&(0x7f0000000840), 0xae4, 0x8a240) 00:11:27 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) 00:11:27 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:11:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 00:11:27 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 00:11:27 executing program 5: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "ed78aa0cce012932098b819461333eceaf4c457064081043e6a92ff74d19a61e7413b8cd2aaaa41e0ac6e893c2f58e8822b341eb431cd851b680f84e73ba8949"}, 0x48, 0xfffffffffffffffd) 00:11:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8980, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4e07, 0x0, 0x400000) 00:11:27 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:11:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @default}) 00:11:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 00:11:27 executing program 2: r0 = socket(0x25, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0xae8}}, 0x95) 00:11:27 executing program 1: r0 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 00:11:27 executing program 1: connect$ax25(0xffffffffffffffff, 0x0, 0x0) 00:11:27 executing program 4: r0 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000a00)) 00:11:28 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 00:11:28 executing program 5: request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='(}\x87\x00', 0xfffffffffffffffc) 00:11:28 executing program 3: r0 = socket(0x18, 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0) 00:11:28 executing program 4: syz_init_net_socket$ax25(0x3, 0x0, 0x1a7) 00:11:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x5407, 0x0, 0x400000) 00:11:28 executing program 5: r0 = socket(0xa, 0x3, 0x31) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 00:11:28 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 00:11:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 00:11:28 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) 00:11:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe, 0x1}) 00:11:28 executing program 5: socket(0x28, 0x0, 0x8) 00:11:28 executing program 1: syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x280) 00:11:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe, 0x1}) [ 688.364645][T28867] random: crng reseeded on system resumption 00:11:28 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x109401) 00:11:28 executing program 5: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 00:11:28 executing program 3: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) 00:11:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x5b07, 0x0, 0x400000) 00:11:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe, 0x1}) 00:11:28 executing program 1: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 00:11:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCMSET(r0, 0x5418, 0x0) 00:11:28 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x5421, 0x0) 00:11:28 executing program 2: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 00:11:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8982, 0x0) 00:11:28 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 00:11:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xe, 0x1}) 00:11:28 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000980)={&(0x7f00000001c0), 0xc, &(0x7f0000000940)={0x0}}, 0x0) 00:11:28 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x8982, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @null, @bcast, @default, @null, @null]}) 00:11:28 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 688.937618][T28900] Restarting kernel threads ... done. 00:11:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x5d07, 0x0, 0x400000) 00:11:29 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 00:11:29 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) 00:11:29 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffff3e9c, 0x0) 00:11:29 executing program 4: mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x48e16dd42e08963d, 0xffffffffffffffff, 0x83000000) 00:11:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9f89a974e115a13a620a01d794647c24f11a2a"}) 00:11:29 executing program 2: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/215) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0xfe, 0x9, 0x2, 0xffffff78, "7c4cdc16bea728b0df4fe52890d312064f8647a31b86d35b37cdbc61fb0ab802"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/254) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/54) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/117) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000380)={0x7ff, 0xf84, 0xb42, 0x9, 0xb01a, 0x4}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/75) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x10100) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000480)=""/239) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000580)=""/77) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000600)=0x3150) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000640)=""/64) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xaa, {0xaa, 0x22, "56421d0150d19e5c7bbe1b95b67cd9fd86c010c6bb07d1d4e2f9841a2f28501cf2c0fb7ce34c3e8c3c9065bac5e4dee5c20a94787d2be7f825af694e843b27b3841db11e70d010f308815c9335eaf2d38f593800e8de9597b7a3c168145e582b8543e16943f2bb405e28787edf2af20b5c88c1d4fc7c4644bb40d4d17c2e9d0748816a9a7837d318e04e6f9456df8ac289d32cf4f619d3117e61dbb9727bd6aa0594c7c01ce776f7"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x0, 0x16, 0x54, "e267d3d05981590116d126d09f2d5072903672c28db29ea41615caef269e306e228d4755050986e23c63070c6718caaab46f72b2d06af623f790dca1809f46db8032fcfa751f37caf93a0d8fb00a1674591a6173"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x20}}) r3 = syz_open_dev$evdev(&(0x7f0000000e00), 0x101, 0x58041) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000ec0)=0x8) write$hidraw(0xffffffffffffffff, &(0x7f0000000f00)="0a81277487c6a083c25916e1fd2e0007b028da0f6ad1ebe541efcf0cb484947567f5e0cd6a9d822dc6196e20d4df5373002b8f135a5e8e229b1cce", 0x3b) 00:11:29 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x2, &(0x7f0000000180)=@string={0x2}}]}) [ 689.284840][T12832] usb 2-1: new high-speed USB device number 31 using dummy_hcd 00:11:29 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 00:11:29 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 00:11:29 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 689.524879][T12832] usb 2-1: Using ep0 maxpacket: 32 [ 689.604948][ T3689] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 689.636402][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 689.654927][T12832] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 689.724989][ T3687] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 689.876641][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 689.904992][T12832] usb 2-1: string descriptor 0 read error: -22 [ 689.911243][T12832] usb 2-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 689.920623][T12832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.967771][T12832] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 689.974886][ T3687] usb 5-1: Using ep0 maxpacket: 32 [ 689.995113][ T3689] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 690.005143][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.016088][ T3689] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 690.026054][ T3689] usb 3-1: config 1 interface 0 has no altsetting 0 [ 690.095212][ T3687] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 690.104178][ T3687] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 690.114933][ T3687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.171055][T12832] usb 2-1: USB disconnect, device number 31 [ 690.194977][ T3689] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.204075][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.212263][ T14] usb 4-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 690.221465][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.229871][ T3689] usb 3-1: Product: з [ 690.233991][ T3689] usb 3-1: Manufacturer: 摥 [ 690.238631][ T14] usb 4-1: Product: syz [ 690.242800][ T14] usb 4-1: Manufacturer: syz [ 690.247434][ T3689] usb 3-1: SerialNumber: 䀁 [ 690.252578][ T14] usb 4-1: SerialNumber: syz [ 690.274991][ T3687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.284678][T28925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 690.292931][T28925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 690.300465][ T3687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.309415][ T3687] usb 5-1: Product: syz [ 690.313771][ T3687] usb 5-1: Manufacturer: syz [ 690.318549][ T3687] usb 5-1: SerialNumber: syz [ 690.545289][ T14] usbhid 4-1:1.0: can't add hid device: -22 [ 690.551305][ T14] usbhid: probe of 4-1:1.0 failed with error -22 [ 690.565345][ T14] usb 4-1: USB disconnect, device number 14 00:11:30 executing program 1: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@ncm={0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000e00), 0x101, 0x58041) 00:11:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x6504, 0x0, 0x400000) 00:11:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000008c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)='M'}) [ 690.634976][ T3687] usb 5-1: 0:2 : does not exist [ 690.645339][ T3687] usb 5-1: USB disconnect, device number 17 00:11:30 executing program 5: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}, [{}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf"}}]}) [ 690.795040][ T3689] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 690.807890][ T3689] usb 3-1: USB disconnect, device number 24 00:11:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x9301, 0x0, 0x400000) 00:11:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) [ 690.965058][T13987] usb 2-1: new high-speed USB device number 32 using dummy_hcd 00:11:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/103) 00:11:31 executing program 2: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000003c0)=""/75) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1}}}}]}}]}}, 0x0) 00:11:31 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:11:31 executing program 3: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x0, 0x1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83, 0x7f}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x401}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x0, 0x3f}}}}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x401) 00:11:31 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a}}]}}, 0x0) [ 691.334980][T13987] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:11:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xa601, 0x0, 0x400000) [ 691.505115][T13987] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.515110][ T3687] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 691.524528][T13987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.534425][T13987] usb 2-1: Product: syz [ 691.539150][T14069] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 691.547048][T10426] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 691.555017][T13987] usb 2-1: Manufacturer: syz [ 691.559841][T13987] usb 2-1: SerialNumber: syz [ 691.585181][T28940] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.754861][ T3687] usb 5-1: Using ep0 maxpacket: 32 [ 691.795080][T14069] usb 4-1: Using ep0 maxpacket: 32 [ 691.825639][T13987] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 691.875235][ T3687] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 691.884247][ T3687] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 691.895136][ T3687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.915002][T10426] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 691.928338][T14069] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.938798][T14069] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.029728][T13987] usb 2-1: USB disconnect, device number 32 [ 692.054975][ T3687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.064274][ T3687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.072974][ T3687] usb 5-1: Product: syz [ 692.077462][ T3687] usb 5-1: Manufacturer: syz [ 692.082214][ T3687] usb 5-1: SerialNumber: syz [ 692.105018][T10426] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 692.114423][T14069] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.126563][T14069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.134726][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.143440][T14069] usb 4-1: Product: syz [ 692.147901][T10426] usb 3-1: Product: syz [ 692.152169][T10426] usb 3-1: Manufacturer: syz [ 692.156954][T14069] usb 4-1: Manufacturer: syz [ 692.161667][T14069] usb 4-1: SerialNumber: syz [ 692.166508][T10426] usb 3-1: SerialNumber: syz [ 692.405273][ T3687] usb 5-1: 0:2 : does not exist [ 692.421767][ T3687] usb 5-1: USB disconnect, device number 18 [ 692.445784][T10426] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 692.459786][T10426] usb 3-1: USB disconnect, device number 25 00:11:32 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x20, 0x9442b3760e01a7d9}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9b}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x8, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xd7d2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x14}, &(0x7f0000000840)={0x40, 0xb, 0x2, "8554"}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "29e6"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xff}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000bc0)={0x14, &(0x7f0000000b40)={0x0, 0xa, 0x24, {0x24, 0x7, "0d4b848765a80682eb93f907f3741ed41075ee8fd91e337fa00ca0535b627c4e1ae8"}}, &(0x7f0000000b80)={0x0, 0x3, 0x6, @string={0x6, 0x3, "195cd10a"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c00)={0x40, 0x15, 0x58, "937eb5d4f6a6621d1cb5f950bba6cfeee43ce6cca2bac7d2b598920d0ed809a938485e199219b1877baf66247565b5f9920dfaac2ab12dfcf5f43f92fa12dd3affc55d642cfcf623be78e8e3c3ca336f964521c26bfbb719"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x35}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d00)={0x20, 0x81, 0x2, '13'}, &(0x7f0000000d40)={0x20, 0x82, 0x3, "f6401e"}, &(0x7f0000000d80)={0x20, 0x83, 0x2, "91cf"}, &(0x7f0000000dc0)={0x20, 0x84, 0x3, "fd6bae"}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "55d5e3"}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001080)={0x24, &(0x7f0000000ec0)={0x40, 0x23, 0xec, {0xec, 0xc, "a9953252f112ed09d8d4c317f310d4b40b0786c02272468423385d8a05105b4757a2388ea5730cd5d08469e053a13e36a85cc82a31215b6d98f70df1785e27e1578d207cae0bf8d0fb337e6480979c7da90b5e016f04655d4e889cdb4fdf976306bb693be0517da3fc895bdde7f0abdf6d486c1d074716d8f39d73c6fd4bb8ae21f5771d083d28f0a54a352a0c351f451d568037fdbce7d5008d9b279f7417e92b679d673e38d60def3659200c1327eb8ec7a5c1d28e05320889f440600699a3f18001537daca0d3a81bff658254600243997018fec7bf617229cb411dbddcfce25b19a9b36af443e2c1"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000001000)={0x0, 0x22, 0x26, {[@main=@item_012={0x2, 0x0, 0xa, "53e7"}, @main=@item_4={0x3, 0x0, 0xc, "e69a947b"}, @local=@item_4={0x3, 0x2, 0x2, "af5abafd"}, @global, @global=@item_012={0x1, 0x1, 0x9, '5'}, @local=@item_4={0x3, 0x2, 0x5, "d8b1164b"}, @local=@item_012={0x1, 0x2, 0x8, "d1"}, @local=@item_4={0x3, 0x2, 0xd, "887a6fae"}, @local=@item_4={0x3, 0x2, 0x0, "0c57cae7"}, @global=@item_4={0x3, 0x1, 0x8, 'j@3>'}]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x523}}}}, &(0x7f00000012c0)={0x2c, &(0x7f00000010c0)={0x0, 0xe, 0xd, "be96e307f62771a790b1ea8985"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001180)={0x20, 0x1, 0xd1, "99d1ac5c918bea83bb3b9da06eeb2e17b276440744c0f57d785ef4174470c1e21ace6b5889120e6155b54a0bf07a18f79b06e87ef3ff958d647db8f47f24786bcfead9f1d79baba4c5482e43a71f5c780ade03432b9e23753b509c58a217e3bee255ff1253e00b9ba560e428678de63536f4e45ae2da71b01ce6f38dfe3a74db12d6ac99512762ade0b38b9d14f6060c26e35b5f4a64c87d2a30fdf821a27a314ab9b69762d5636620ed9f4649b73532077c639a21d36604015d614e33c6e98c551bbdd575dd337e9d4e0a83eab6602220"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0xe1}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000002380)={0x14, &(0x7f0000002240)={0x0, 0xb, 0x17, {0x17, 0x23, "55c18ff262402458e6026796f2a9aeaed9dc58c011"}}, &(0x7f0000002280)={0x0, 0x3, 0xde, @string={0xde, 0x3, "6c9fc89355a3627494918034de163e8d4c72eed476fb07d6f583de305e3159979e6004ed8f9be8e96fc19a7163c0f6e947e91f9bd9b39697fc7a5b0c4ac5332b28f436cde02c7c97ea30121f938b77450ebd5f58204175cd2a070ade5fbd337039a8a440a6adc43191c13a9eb66e4a92cc7d9e09a64b0f2780d8a166b7dbdefe3ddec72bee95855d40e6ef29153c8596c318e8f0f323672549e242ec3e34cc119b75b16c23f37582e683e92890589c504b714879874d152f575fb08740e6a42ba2f4ec03c858eae35535de1a2cccfbffae7771505d83e53510d8a70b"}}}, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x60, 0x15, 0xa2, "84b1eb27f7e34acfc3657d5e743297cb07047986d58543612d5d310f4cc49fa3af19f0c367871ba8cb348ae11bd10c303ed2dc39ade2e08f29dd73f6bed0b62fb58f78263b7e93915195d90ed1e6fa6e993873f5ab79fe8d2cde85c056b276f788245d815a06059a59cacf29cb1cdfa575546a68a52012cda14ea0cfd1f038cac21fa7cac5dae8dd0f77197566669d2761d0f98a31efacbd539a098bf42aae708fb1"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0xa4}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002500)={0x20, 0x81, 0x2, "d4b8"}, &(0x7f0000002540)={0x20, 0x82, 0x2, "95a5"}, &(0x7f0000002580)={0x20, 0x83, 0x1, "e3"}, &(0x7f00000025c0)={0x20, 0x84, 0x3, "92dede"}, &(0x7f0000002600)={0x20, 0x85, 0x3, "885e3f"}}) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0xff, 0x80, 0xad, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, '_Vg'}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8001, 0x1, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3c}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000002c80)={0xa, &(0x7f0000002740)={0xa, 0x6, 0xcb45738625d71c6d, 0x6, 0x3f, 0x2d, 0x20, 0x5}, 0x1f9, &(0x7f0000002780)={0x5, 0xf, 0x1f9, 0x6, [@generic={0x8c, 0x10, 0xa, "d700c1a0bed6d386c400438117bb30ea89b841b2d23b25df9eb40cc30779e92ab00c63e1f933ac952cb55ae4e28a33c78622de5bc090223c83cc0fe2381c6d47f1c6f53176935bddae370e61f5a614305ad665ee8b5399340c62620f7ce86da0a3a20837e03389caefe224203aa7e09e0d92ca5a4d9e394bb1912ce4203bf23c0b606806a9d00cf3fa"}, @generic={0xd0, 0x10, 0x1, "732eff4acc5fb7f2b873786351711786d1eecd6a4cb6e9ed157a27fff4c03d0ffea9bc12a91c7692c30dd3dbd3f5657517c464dff2bd74d126af35266328ce5854feebb5f1c4fd40aef8ad1dcda99be0ababcc48c95b02e0427371d7ebb75db8e582f6ae0fec7fca43777945245291ceacd48ef40f1c2ba2232a4f4528f9b1e1a80df2de90b30d33a7e0d2aaf42e26a8596f706762b34c1a1c489e159d52f7fc9706d17a31a7a140a5b3e711c110f41d3999d5e4e5eea3978ad1aa3b02ec97130ea59ba6cbfec482ce4adc0244"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc0, 0x7f, 0x2, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x98, 0x6, 0x1, 0x8}, @generic={0x7b, 0x10, 0x3, "595d99d13088f619087bf5c7835c1ee021d618df5efb57d2f4762f84997da8329e20ca0d05726ab263c91916d4b5a1ba14482b2548c9d098e63e4b334e6570424b1245d91355636abc11d3b13e1911e658a7b1dd26adf91028b333455be4bcd9bbda29f2634199a785131e6350b94fa392210021d1ba2eb5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x4d1}]}, 0x8, [{0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0xc0f5}}, {0x57, &(0x7f00000029c0)=@string={0x57, 0x3, "c3c4c6506197322ed09d43fde26ad68a991906aa52b9081eb2ef6aeb3963454658c956c3716ca79b388e719300cc0b3a2e8c5db9a40c9f6ea8b1fb6542b15ea6f90bd51466412cb1161c69f64f367c449991b09513"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x3b}}, {0xa5, &(0x7f0000002a80)=@string={0xa5, 0x3, "a7888892dda9bd196d88aa0c431b92c5308290ec9f27793e911ae941ae6f915193a48d44d3006d1acc3be399c12d210afdc41d211bcfbcf835005a543b55572afa20d25afa2bba03cf3a74eafa89cd058d294a0ac0c3af962fab4fa29868fdd0546c73613c6e41679062ae197fd7fc5e7e0ea289c364513b442c54e72e08ba90729ae9641dec2232f2f0a84cd2049e5a2412a4fd97729f1e77c2aedc8e49ee13bcaa6b"}}, {0x68, &(0x7f0000002b40)=@string={0x68, 0x3, "87856aa599fb55c659d7290cb465451e23a5b562a4bfef0c001a49f63c666b0ae787fe7d3dd4327d9bb971274778e6baafd2b85e08f5a7f83681b656960c0db02229c855b116aa8811b3612b98a7fa32e13e80dbf1b5073c915f94cdd7b5a11a3b202d0ad7c5"}}, {0x4, &(0x7f0000002bc0)=@lang_id={0x4, 0x3, 0x3452}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000031c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x5f7, 0x5, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003200)={0xa, 0x6, 0x110, 0xe2, 0x71, 0x6, 0x40, 0x2e}, 0x35, &(0x7f0000003240)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x1e961b9, 0xf00f, 0x40, [0xff00c0, 0xc00f, 0x3f, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "be2d138d31639ad00bcdf4fb7ecd2bce"}]}, 0x8, [{0xcb, &(0x7f0000003280)=@string={0xcb, 0x3, "242e48ec3c478be5d0f3330de4c6a8ae8e9097b9558aabba9b75a2a794429f1e3a86cba1cdb66063c98a36dbe67bf75cc42c60732a01bb3cdf5a109656a4d08261629f048345082ee4749ec1a442eaa1d428203bf797def8c9b2a0f40cd1daf852726b72d538ea17e1aa0133f43215e551792ac4f713a6c606bf704cbd3754270fa3d345f726ecf0e82a7a47b9f749d14ff669fc1e967c64128a07a6941bd0a0a87fdd91e9f6aecb83cc3ac9d0b672781430e7d70088d21020cd6239b42bcd22221dfc59cf59b4ca15"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x457}}, {0x2, &(0x7f00000033c0)=@string={0x2}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000003440)=@lang_id={0x4, 0x3, 0x42c}}, {0x7b, &(0x7f0000003480)=@string={0x7b, 0x3, "fb33a1015a0d32c59da7e7f5f86d70bbec736ff5c16d7996488ac165cf05e84b56184971c96a222e0db3907fc2176251e465efb85dc7454b146adf8a780f110e26fcb8d77f414238e893423fee9e012d865ce20a2fc7fad2ddbb5de1a1e4ee65e4133148013b79d6c93912338fe01632f2327ad18c60b6ed91"}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x3052}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x446}}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x21b8, &(0x7f00000042c0)={[{0xe0, 0x4e00, "594208e755240b7925eaf71d462f43992fd3675f234f98a7fd694c9491cad5c2450218619bc04336ce7d99d7506d6379bceba341205f8a04f8fa4576d14a2a050f4a35b6d316af91ca183c72be3b6c269407f14db2f1a63512b420d558cd10250c5ab5f0396903a9b73085e77b65a855548a5e6b348725839e080f3cf83c4f4ccb02f0353418b7335e3efb0c663f8c6aca556f410362a4075f7b1150441b185e3a3acccd9516b8db9c1958b20e6fe521ae375a11075b899ff3ef55549b93c97e3ffca7bc915b76bc161daefb97d4a08410dd5b0584e3a5016dd899ce1db90460"}, {0x1000, 0x4e00, "0d163741d0cb63ffc6572909628dab8dbcd342657db576ef84756617a76118afc718197980952534a5c5263f320f18a2cc65c19f9435d05bdacb66862976872387870ceb0032e22286277955a0ba83525713388cbcd4aa6522c2301bb253a408ebc6ef00eb42022c32624a77835c3219e435a4d5a6dd0e5d9ac832432397db98deeee63183b8cd52872a4ff7d85684fd388a2724d31bb89314781db5a583978be5045f600529de907e7fe63d13ed193e89a5e1adbf809f5f6c5346fca68309170753314f85758b44bfe17ada611701b316fe66d917e797f373c9fbffebd6645190b0e728e4b66f296484015e2500acb4a555705c647aff0aab9b97fcadf9668bee659b02c8f043aaca134b24afca0e617b337bed42f77828516fdcb9bed5e96e2d16ebfa49afe9fca32f7143579e6b3d68a410f5705aad217ea5d61959431efd6af6246429637d92d974710042cc7f0660932deb041812c49a265f1f1a53a253213ee2edccc2c38773896b59052571fa0aece184e342cb2ba0c8868e58dd9f3a003959b04fccc7067ae1f875dd536a43f7013d7fd8812219e719f424ba1d599c5ed44b6a5aa298526b65e5802f616e3bcc0564ea65fe2424074fc9114322374ef45dbc903f8a99dcd22b8fb3223a8afb65ba44d7859729ab1a18af8bff6d71b6a34f676983cf171cdaef2ea3553f60c2bcc5380cab83be7e665dc050abf0039ce9da6e278fc2b9fb1712da2467784fd5ccf1c7400a276b55fb0e2e6382ea05da2e114a34c9df10d1db5fdfc1db6c0d44803571749a3c9f3e503ec33bc1969a13fafa0086b286775b1c157a779e6a217902eedaca66963b1661f72d756118578c1c97d4fdb76817d81cc42fc1adc5e15e2764a360a242b147fcdaa012ba1dd438132466611a087771f1c707b99e707f6ca0c2d9ede61f27a1d2e16821ec6476f2ca04ed3eb2bba4a841606e94df3d6fb0af9661073f0407ba149c8098d4d46a5901bb05502d682b578751c74d6e753b1b849933626e4ee834a5056eb34afed368e94bebc89053eab1d5690f87e1846baa41cb733b843c622c94f8a4d327eccb45c71c253d368a143cfd4d9ad43dc42f8c42ca872ea82f22254f5d0f80a7718f5629fd414cb5956c2a3675e98f7a849d1bd995eb621b60d3839ad65fca973fbe9df5675d562a096603c2529ce83b6d4a40696a566401b29123f6b312287104f50fdf9df1a2baa941062aac1bdd406f79d3c0988517f42f916848f87eee9797340f75125eec108b3e54776e1df8b1265a3ddd231ad6bcc72af517c8e061fcbc6ee962c426025063b2001643e1abee6b6bd686f7f0f256c47f3ecfa07f89e8819191ee92842dca028c7a4480f685bd46ce7545e240e893f894cb200de01f2a0eaf3c55dd4a822f355462169d7b4b06b541ca6a27cbc449b26dd1cbc98ec9a53a20c97f8d36cedd1c8ece917a78d4359528974b2b078b3c5baf1b8cc75eddf6751324e9ff5bc6b8420bf450de1031bb316cf5106ed5c7e4df418642e500e8fdec3a416b41fe6e31337cae72c97ab40af8027a622d7409d9e987cd6182a348d93e0a331ad792e527baada836d1d87aa0c0dac100a6defbca25fe3c15580f9ec7454aa8e40bcc4ef604016cc828b9595ba4dbb544e687f829afca8f933aa9de8e4b395537deaacc5d3323470b913f7ecc1d3670d83d8f8d998c7a13f744b842c345f8886e5af5a75a6e9d9c03ff622d4fc9e0b8f592f3266f7b4a8955e592b1a2927ee199ac445af10a69859228c77e90aa7a50fe2ecb30a256d727447ebf67b07da70ccf58657d7fed5bae313a5e6e0715ebd060e19575d3e4d7a26b11124da89fee2953517b34f367b3366d5314cc53329198be1d61c914a077b0f9bf925a308e9a5641fc36651ace9116f0526de26d68977c0cdf7c83ab945f11a6179ca1a1d53ec997886bab94ed25851afb56e00d08cb4dfea1063b144adffc0545517feb301703bf42f29390365034b2fee88a226560233dd06de8aeca889b4227f251991942d01da23db20190b38ce23023e54cd98ca3bf8d43ac7fef571afb1dbab083c22c150ec9e04936da93a4bf1321f8b23d19b921f372e9d7ecd7e69481edf9c483d955cb537f03b2aed0c1f873dd44d7fdcf5c05b38201211c00814d738ac33bfe93dd1525311c935457ed6a262aadd31c532e04bf4bbc41ff2c2a4fb1c346f098a6da63e40e5f775f5f1c226196d0937614340c933a0e2d8832d3444d733fda036fe775089f90ff69038d4e740a990f7258057d0cc0801787a05ce07e1c121d8d32170942ad5a9f3962f08c1febd236c96d89f59f14a7074309b24c78d94d56202db54c5a68be7e203e30db16770cb1582527729409d773d1bc921ab3e7e5775da7cc653c3f9e1b2b78fb64bddbfd4a9b94a4fe92ab169b895d140f8578fc23560da77b52736b662c978debd3975a705d842dbbecc5ab6f3417a8fccfb1e93efce6fdc5ed4269eed8589f0e4edb499da0391e3c524ca9b37c3e63fca1516c901152063aaf80e03544630b128cf256e1726f6c1aa4b2cba80d684f312369edf2cca4c288f967a62adf9b2f2ab1de1210d0519b6d560b7edac1e8b501b51239621258aee051ee2b19970dc5fc0bcc03e955536e15403841e7d690480c0ddcbb16b77e285ee28a3f6e7236d2963fed2328095e93f89eb7803f77dbce019f6c947125f2c0da71d3080eba7a760561452c80e7b9ebd2ae237c5ff5d138ef6e70a79a4bae6623a9fa23a604e8ace58895554e0fd9b3ace2bfea337b3d1f12015e7dd288652b2d693d3f04c10e771066658504efa30b48818d88b546299dd23d52838b8760436fae8056e1bf69c9a7e45ad44f9f1f24ce32d6f03377749bc7019f7462df7156c079044d39660920931f879e451cb412947d5bffcf8c5e5e28cc3d75190d887d35fbeee8a63bb12863531c1b2b0b85c6b6fae33f9202c530b118aaa396e9251cefec59be2cab83e028dff9ea36316f5d6263520f4819185b3886cf08027d326893475ccb963fc3fa6e36bab0d76ae582e7a99fcb3f9b9d85835a85ddbccee3c17807fd2ee09f93fe2f986f000b8659ff54157f0190418dbfc478a1202fefce2ef3713e23e663831fadfa07801af3512b73e42911ab4661c92b019bb3e28027e3f65a3c5f23966bc93efed3944640125aca411044830d735bf0eab4bca631a4f066b1400ca9f47704b44a4903dbb1afd3d87986f3289e52847c8fc9d231f66b85610dd1f21cac72d958a3fee910f6846fe86c909fd6967b19a50c1baaf553c32f6408e9c22b67194a32c027add29d3b4469fba65d1dbde4adf8143d5a1712094bb4f863d218eba1d37e8c614843cf08626e3b950c3a6a0e7f827a4b89fb8938a90de2438754ab242be82bddb07a71e94d0c461205d9fe8ef51dd724ad7c7c2c6e7c4e4fc9abdbcbc737626c95ad0d6a50178385d8f0c95495b342d1d21363353950424198989e068aca907c8a75835de46e2cb226f976ab8f2d8ab51e38981baf0efd249884e118f8081825c3bc41131f82addb7bd7ff646d68ab9345b93800edcb9e491ffffe8478bd351634a35f1d769e8a2e9f017a2c667224f2e44f8918d37cd29d2cf8114b370c12e417e10ba9186720f7046d59cb85dbb620d1727522b2d926ac9461e50e8c7f0b912099995f0cb0f2909e095505ec878443b33533e0abf2ea51881d87868c9252e88cf93736d77d8ae997498c8669d51e00c328b426c9db7389cf73448aa29f091891a6b09ccd2768e11313b30a4df825a0f6be02ee1f48fa2fb8408a26f1493af34fb80242e269608ee1cb700b7ce0e105037fd3295a3d7142b18373aa7c74ad2c080482c0979ca25289b2b1f93f1099987e08a8ebf02ccbf84965bd7119c5e73a8c891d1b0359adc9633321679c528ef6e192a0028b277fdcbb1a6bfd9306d8ac9ecc133754024b9fda608cbd48f15e564623728d11e7ddad1403859ada607aa50cd8a1b58bb7a5e4487359da7739a8c5c79808efa072a3801b9ad9220a84af4b661184d0edf4ea6b30a2d441fe7633c737523e89c5bef1ff39928059b936d1881f64e506b92479de79266f0c031b5b241a8265bc97e44f7c0543bc66df0cd40810baad240f356b135f66ef5d2fafbbb40de56adf00d5102b0d7a2dfe3c0e1fd37393f946581aee584c7625381e0686940b62c24df6dbcd32a6cc6d448908412a48d287359896d37e7d1c92f32df6c03728923c2cce79e029a634d7dce16aee4a13eff1f5f8363ed0d147f4b28ff1ea94b708b68c9752a877743efee99efebf23a4eefdf11a0fac58cd846f00b1d6d8abbf01014c889743e43878671787d86ee8cbca8057fc3d9a03a68aae14c7641599dda4f450c389db3e692a8c51e3905e6b8108ac28714d4d1f581afe478bb517f4059f12729c8b3d096a2e264dfe348d676b9670b4274fec9000b4bee7ccde28b5d7a97cb8828bc1a5d68a72a71915007306262c7d24b8dc54ea5e0f4241962ca57a86dc5ffd35e2ff7445747bdd3b40dc4ea6447790f366af34627f1a85c152d309a774a439426c7675d4fdb1ca71ef128d43999acb80c4647c3353d619a7090552fcf950100c1fa2f2c1a73592370f52ded82e0a54365bf33d5a3f25d4060be40816de113df366f7115c6ee6fbc9e5394dba4a99f5f7e08a42e5497bc98003c2a37718572e8c515edb402feb745e02e1af41c298e92ae9cc97ea71a7272171edf173b57183c735e36963fbc8daae9fa222fbc0f7a970523e728b9228a471863ffe210a384ff12a083ac317924d6462b5c118d76774e82b176af7eb6e3f5c8ad48bdd24819c04fc0094864e99474783348e785e0870287009193065e9e0c1dbc70c0e15ccefc739f7eec48119c6f0e193b7ff57c953e7a112a1488672f21002782f8c2f093581f2a041b4bc385056497137eeae2dc9b221e59de4e000cd26960a95f200307f1afdc9a8399933e3edaf19bfff2108867c1f7f08e21ed7e44eeb1c3748b72fdf6462696d6b587c33f4da7f78025c372c2c4bb26d36948ded825df09c10084174c22a8657b029d3830baa4b952aadb0ed010ace7b6e335ce235952b73ec6d9011c95490016ec65312156c85dde269aea8c298062b5e168bbac44356abd987574a52e7c67d7174302763952a2dfb122547fb49f78da9c3c868260f21b6c2655ffeb8cc6490d10e7346ad45569e0b3520be3607a38a439b15fd5de161d983c921914b67d934a58149793e2c5ccfb836861a3ce79111ed0b0dcfdde5e732c971f35591f10b41c79685a77f786d0e9f4156592112f354009c8917790c211ab4a731b98a58f7700f8cf916cd9a9c30c16f24e95b6fe828b77bdbc910932aa09c5f1e3d687b93c47c5dfc12252a3ac27cbf4823451496cced85de3d86c8e326eca7967a98a3c0876ae85ffedc94eb3335aad3c23826a7b9ab87437b8c11fd488e7bbdbc0da3fd9022a3c693f1877403a2f6c1c76dbd92eb41949b5a1dfa759bbbf4a6a10eb9a962994412549ffe9110f6727c4f2adc2aabc7ec3eb12a2538a2455241b1995a2538bc9538266b07bf62795a4f89e884634e01783695b89a36ca547db8e8f41a7107860b75c49c00045c997b7392e38ad964c6ce25bb007e2b7edaf0867744452154298059713193a6ff0930e5db80a95b032d36d5e13153034b3320dd5b5521a679a399e3d09aae9b9a78bc175a2a947127d6f86cbbf194a6aa458d5fec23535daca9d041cbaba34a29f766b306df7b1ddc4bef4f0c159d59c7f285f5c9"}, {0x1000, 0x4e00, "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"}, {0x62, 0x4e00, "6381b22033f1ecd8a4f3c68fe0784db0f940b0e235636d8f70029ee9f474b91503e7ae8da35530cac53a9ebcf1cf7976855f139ad91c97194388c53ff31c3bcd11d1871cbf89043064c66081bafa940e274b6aa0fe21a09aba40849ca3172b51981d"}, {0x60, 0x4e00, "fda372f08f109be54087a5520d127038ff3fd22bf715a19dfe4911f35260f9863dee35b2f1f01a9680c0e7ae8db8c0b139d3a8c70a5b81e382a35bd4868afb035eae78630192e52be6f070404a27a99632dc095fba2abef5c00ca6985e872d4e"}]}) syz_usb_connect$uac1(0x1, 0xe7, &(0x7f0000007440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x40, 0x20, 0x2e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x5, 0x8, 0x7a83, 0xc3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x8, 0xd4, "56244d60ed6e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xcf, 0x3, 0xd, 0x3f, "7ad8f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x40, 0x1f, 'j', "3ee156"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x20, 0x5, 0x28, "83bea4cd81"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x2, 0xb7, "b349b6a2d11f34"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x0, 0xb7, {0x7, 0x25, 0x1, 0x43, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x3, "e0"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x6, 0x5}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x1, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x80, "0290e1f2647e07"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x4, 0x6, {0x7, 0x25, 0x1, 0x2, 0x8, 0x1}}}}}}}]}}, &(0x7f0000007740)={0xa, &(0x7f0000007540)={0xa, 0x6, 0x250, 0x9, 0x2, 0x0, 0x40, 0x3}, 0x22, &(0x7f0000007580)={0x5, 0xf, 0x22, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "48be8f553ede9beeda396aa63eb1637d"}]}, 0x3, [{0xd0, &(0x7f00000075c0)=@string={0xd0, 0x3, "8d45c1396609e8c933d20b08d8f1892c0289232cc2e5967bf0834fd47ce453f54f775468c4fe821c8e9474e4737fbee8afd22a2fed42df56e2f7e8725ccad81e3e52f3f4dd0d7d0cc6e86969d22198dd8c3264ee9e9250130a63e7486a4a965531ef7d4b414c7d177f12025eeec1046f6126e5ca869cae7a28709d3237398992dd75ac3c69f35531ba76314193781273121475b9fdd367fa09d1a6708c28c41e86cb1785887f69117c93a85d3db6fdfb928930c7c921dfd8a5c08bf886f16aa1ed8ab45550f482b51390e8dae850"}}, {0x4, &(0x7f00000076c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000007700)=@lang_id={0x4, 0x3, 0x4ff}}]}) 00:11:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xb601, 0x0, 0x400000) 00:11:32 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) [ 692.495698][T14069] usb 4-1: 0:2 : does not exist [ 692.510231][T14069] usb 4-1: USB disconnect, device number 15 00:11:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xb901, 0x0, 0x400000) 00:11:32 executing program 4: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 692.844881][ T3689] usb 2-1: new full-speed USB device number 33 using dummy_hcd 00:11:32 executing program 2: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000003c0)=""/75) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1}}}}]}}]}}, 0x0) 00:11:32 executing program 3: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x0, 0x1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83, 0x7f}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x401}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x0, 0x3f}}}}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x401) 00:11:33 executing program 5: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/215) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0xfe, 0x9, 0x2, 0xffffff78, "7c4cdc16bea728b0df4fe52890d312064f8647a31b86d35b37cdbc61fb0ab802"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/254) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/5) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/117) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000380)={0x7ff, 0xf84, 0xb42, 0x9, 0xb01a, 0x4}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/75) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x10100) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000580)=""/77) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000600)=0x3150) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xaa, {0xaa, 0x22, "56421d0150d19e5c7bbe1b95b67cd9fd86c010c6bb07d1d4e2f9841a2f28501cf2c0fb7ce34c3e8c3c9065bac5e4dee5c20a94787d2be7f825af694e843b27b3841db11e70d010f308815c9335eaf2d38f593800e8de9597b7a3c168145e582b8543e16943f2bb405e28787edf2af20b5c88c1d4fc7c4644bb40d4d17c2e9d0748816a9a7837d318e04e6f9456df8ac289d32cf4f619d3117e61dbb9727bd6aa0594c7c01ce776f7"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x0, 0x16, 0x54, "e267d3d05981590116d126d09f2d5072903672c28db29ea41615caef269e306e228d4755050986e23c63070c6718caaab46f72b2d06af623f790dca1809f46db8032fcfa751f37caf93a0d8fb00a1674591a6173"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x20}}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000ec0)=0x8) 00:11:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xda01, 0x0, 0x400000) [ 693.154930][T14069] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 693.224873][T10426] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 693.232670][ T3687] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 693.245019][ T3689] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 693.257159][ T3689] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.270435][ T3689] usb 2-1: config 1 interface 0 has no altsetting 0 [ 693.394849][T14069] usb 5-1: Using ep0 maxpacket: 32 [ 693.435090][ T3689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.444244][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.452287][ T3689] usb 2-1: Product: ; [ 693.456321][ T3689] usb 2-1: Manufacturer: 쓃僆靡⸲鷐﵃櫢論ᦙꨆ륒Ḉ挹䙅쥘썖汱鮧踸鍱찀㨋谮륝ತ溟놨旻녂Ꙟ௹ᓕ䅦넬ᰖ㙏䑼醙閰 [ 693.472467][ T3689] usb 2-1: SerialNumber: 袧銈꧝ᦽ衭ಪᭃ얒舰➟㹹᪑䇩澮冑꒓䒍Óᩭ㯌駣ⷁਡ쓽ℝ켛5呚唻⩗⃺嫒⯺κ㫏觺׍⦍੊쏀隯꬯ꉏ梘탽汔慳渼杁抐᦮흿廼๾覢擃㭑ⱄ࠮邺驲擩㈢䲨Ӓ媞ሤﶤ犗ẟ쉷䦎Ꮾꪼ [ 693.477380][T10426] usb 4-1: Using ep0 maxpacket: 32 [ 693.514985][T14069] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 693.515299][T28968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.540411][T14069] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 693.551349][T14069] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 00:11:33 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xa2, &(0x7f0000000180)=@string={0xa2, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db"}}]}) [ 693.595027][ T3687] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 693.625148][T10426] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 00:11:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xe501, 0x0, 0x400000) [ 693.640098][T10426] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.725091][T14069] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.734610][T14069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.743110][T14069] usb 5-1: Product: syz [ 693.749045][T14069] usb 5-1: Manufacturer: syz [ 693.754004][T14069] usb 5-1: SerialNumber: syz [ 693.765503][ T3687] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.768311][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.784214][ T3687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.792873][ T3687] usb 3-1: Product: syz [ 693.801991][ T3687] usb 3-1: Manufacturer: syz [ 693.807016][T10426] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.817703][ T3687] usb 3-1: SerialNumber: syz [ 693.822547][T10426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.831934][T10426] usb 4-1: Product: syz [ 693.839920][T10426] usb 4-1: Manufacturer: syz [ 693.844880][T10426] usb 4-1: SerialNumber: syz [ 693.850351][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.869804][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.881154][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.892482][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.903956][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.024944][ T3689] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 694.036048][ T3689] usb 2-1: USB disconnect, device number 33 [ 694.075338][T14069] usb 5-1: 0:2 : does not exist 00:11:34 executing program 5: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000600)) syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_open_dev$evdev(&(0x7f0000000e00), 0x101, 0x58041) [ 694.115502][ T3687] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 694.134565][T14069] usb 5-1: USB disconnect, device number 19 [ 694.173946][ T3687] usb 3-1: USB disconnect, device number 26 [ 694.195069][T10426] usb 4-1: 0:2 : does not exist [ 694.249399][T10426] usb 4-1: USB disconnect, device number 16 00:11:34 executing program 1: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/215) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0xfe, 0x9, 0x2, 0xffffff78, "7c4cdc16bea728b0df4fe52890d312064f8647a31b86d35b37cdbc61fb0ab802"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/254) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/54) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/117) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000380)={0x7ff, 0xf84, 0xb42, 0x9, 0xb01a, 0x4}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/75) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x10100) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000480)=""/239) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000580)=""/77) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000600)=0x3150) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000640)=""/64) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xaa, {0xaa, 0x22, "56421d0150d19e5c7bbe1b95b67cd9fd86c010c6bb07d1d4e2f9841a2f28501cf2c0fb7ce34c3e8c3c9065bac5e4dee5c20a94787d2be7f825af694e843b27b3841db11e70d010f308815c9335eaf2d38f593800e8de9597b7a3c168145e582b8543e16943f2bb405e28787edf2af20b5c88c1d4fc7c4644bb40d4d17c2e9d0748816a9a7837d318e04e6f9456df8ac289d32cf4f619d3117e61dbb9727bd6aa0594c7c01ce776f7"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x0, 0x16, 0x54, "e267d3d05981590116d126d09f2d5072903672c28db29ea41615caef269e306e228d4755050986e23c63070c6718caaab46f72b2d06af623f790dca1809f46db8032fcfa751f37caf93a0d8fb00a1674591a6173"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x20}}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e40)=""/78) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000ec0)=0x8) write$hidraw(0xffffffffffffffff, &(0x7f0000000f00)="0a81277487c6a083c25916e1fd2e0007b028da0f6ad1ebe541efcf0cb484947567f5e0cd6a9d822dc6196e20d4df5373002b8f135a5e8e229b1cce", 0x3b) 00:11:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xf001, 0x0, 0x400000) 00:11:34 executing program 3: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001900)=""/4096) syz_usb_ep_read(0xffffffffffffffff, 0x80, 0x1000, &(0x7f0000000900)=""/4096) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0x1000, 0x80005) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x6c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x20, 0x23}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x9, 0x79}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x20, 0x0, 0xff, 0x1}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x6, 0x3, 0xa22, 0x1}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x380a}}, {0xe7, &(0x7f0000000180)=@string={0xe7, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf1148e33c61e72508950085a89e6be27e2e0253e442ae380f347dba9045f7feabe19c2ed2b6f196d4a17c45a9ea8d2211bbe6d70f3e99a05d1512833514165555e50055"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x6402}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x16, &(0x7f0000000300)=@string={0x16, 0x3, "de2dcdf8391802057ba06dc6e79ad0c00597cf8a"}}]}) 00:11:34 executing program 5: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/215) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0xfe, 0x9, 0x2, 0xffffff78, "7c4cdc16bea728b0df4fe52890d312064f8647a31b86d35b37cdbc61fb0ab802"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/254) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/54) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/117) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000380)={0x7ff, 0xf84, 0xb42, 0x9, 0xb01a, 0x4}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/75) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x10100) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000480)=""/239) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000580)=""/77) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000600)=0x3150) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000640)=""/64) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xaa, {0xaa, 0x22, "56421d0150d19e5c7bbe1b95b67cd9fd86c010c6bb07d1d4e2f9841a2f28501cf2c0fb7ce34c3e8c3c9065bac5e4dee5c20a94787d2be7f825af694e843b27b3841db11e70d010f308815c9335eaf2d38f593800e8de9597b7a3c168145e582b8543e16943f2bb405e28787edf2af20b5c88c1d4fc7c4644bb40d4d17c2e9d0748816a9a7837d318e04e6f9456df8ac289d32cf4f619d3117e61dbb9727bd6aa0594c7c01ce776f7"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x0, 0x16, 0x54, "e267d3d05981590116d126d09f2d5072903672c28db29ea41615caef269e306e228d4755050986e23c63070c6718caaab46f72b2d06af623f790dca1809f46db8032fcfa751f37caf93a0d8fb00a1674591a6173"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x20}}) r3 = syz_open_dev$evdev(&(0x7f0000000e00), 0x101, 0x58041) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000e40)=""/78) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000ec0)=0x8) write$hidraw(0xffffffffffffffff, &(0x7f0000000f00)="0a81277487c6a083c25916e1fd2e0007b028da0f6ad1ebe541efcf0cb484947567f5e0cd6a9d822dc6196e20d4df5373002b8f135a5e8e229b1cce", 0x3b) 00:11:34 executing program 2: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}, [{}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) 00:11:34 executing program 4: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 694.724856][ T3689] usb 2-1: new high-speed USB device number 34 using dummy_hcd 00:11:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xf501, 0x0, 0x400000) [ 695.034942][ T14] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 695.034946][T10426] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 695.035021][T12832] usb 4-1: new full-speed USB device number 17 using dummy_hcd 00:11:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x400000, 0x0, 0x400000) [ 695.135308][ T3689] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 695.147986][ T3689] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 695.158424][ T3689] usb 2-1: config 1 interface 0 has no altsetting 0 00:11:35 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) [ 695.275013][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 695.335685][ T3689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.345151][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.353267][ T3689] usb 2-1: Product: з [ 695.357482][ T3689] usb 2-1: Manufacturer: 摥 [ 695.362103][ T3689] usb 2-1: SerialNumber: 䀁 [ 695.385343][T28994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.393369][T28994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.405106][ T14] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 695.418052][ T14] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 695.429093][T12832] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 695.444142][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.454908][T10426] usb 3-1: not running at top speed; connect to a high speed hub 00:11:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1000000, 0x0, 0x400000) [ 695.535209][T10426] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 695.547835][T10426] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.614999][T12832] usb 4-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 695.624151][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.633679][T12832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.642112][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.650249][T12832] usb 4-1: Product: 搂 [ 695.654434][ T14] usb 5-1: Product: syz [ 695.658669][T12832] usb 4-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜䠑㳣ࠥ•ꢅ殞绢Ȯ깂༸紴邺꯾鳡툮풖粡ꥅ跪ᄢ࿗餾嶠ሕ㖃ᘔ啕å [ 695.691928][ T14] usb 5-1: Manufacturer: syz [ 695.699250][ T14] usb 5-1: SerialNumber: syz [ 695.711733][T12832] usb 4-1: SerialNumber: ࠔ [ 695.725210][T10426] usb 3-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 695.740346][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.755327][T29002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 00:11:35 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 695.765686][T10426] usb 3-1: Product: syz [ 695.770155][T10426] usb 3-1: Manufacturer: syz [ 695.775080][T10426] usb 3-1: SerialNumber: syz [ 695.805229][T29003] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 695.894961][ T3689] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 695.921115][ T3689] usb 2-1: USB disconnect, device number 34 00:11:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2000000, 0x0, 0x400000) [ 696.026323][T12832] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 696.033807][ T14] usb 5-1: 0:2 : does not exist [ 696.047230][ T14] usb 5-1: USB disconnect, device number 20 [ 696.056984][T12832] usb 4-1: USB disconnect, device number 17 [ 696.065233][T10426] usbhid 3-1:1.0: can't add hid device: -22 [ 696.091624][T10426] usbhid: probe of 3-1:1.0 failed with error -22 [ 696.109792][ T8293] udevd[8293]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.158768][T10426] usb 3-1: USB disconnect, device number 27 00:11:36 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@ncm={0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, 0x0) 00:11:36 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0x0, 0x0) 00:11:36 executing program 3: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf"}}]}) 00:11:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x6000000, 0x0, 0x400000) 00:11:36 executing program 2: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001900)=""/4096) syz_usb_ep_read(0xffffffffffffffff, 0x80, 0x1000, &(0x7f0000000900)=""/4096) syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x47, &(0x7f0000000000)="30bb17bea76c062ea2c2fd03638259c077b47c3003554d772b135aa43ed56f91d9f639eb261210e8d7b05c077edc4c88fd8cd1a99a3831d99753b1c90f6a642b6910e2e7d99428") syz_open_dev$evdev(&(0x7f00000008c0), 0x1000, 0x80005) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x81, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x6}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf"}}]}) 00:11:36 executing program 4: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) [ 696.654847][ T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 696.774845][T12832] usb 4-1: new full-speed USB device number 18 using dummy_hcd 00:11:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x7000000, 0x0, 0x400000) 00:11:36 executing program 5: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 696.834893][ T3689] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 696.995334][ T3684] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 697.035084][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:11:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x8000000, 0x0, 0x400000) [ 697.207122][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.216520][T12832] usb 4-1: not running at top speed; connect to a high speed hub [ 697.225118][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.233424][ T14] usb 2-1: Product: syz [ 697.238298][ T14] usb 2-1: Manufacturer: syz [ 697.243083][ T14] usb 2-1: SerialNumber: syz [ 697.254911][ T3689] usb 3-1: not running at top speed; connect to a high speed hub [ 697.265268][T29023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 697.285718][ T14] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 697.305027][T12832] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 697.320827][T12832] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.333870][T12832] usb 4-1: config 1 interface 0 has no altsetting 0 00:11:37 executing program 5: syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x141000) 00:11:37 executing program 5: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) [ 697.354997][ T3689] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 697.365923][ T3689] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.378951][ T3689] usb 3-1: config 1 interface 0 has no altsetting 0 [ 697.394938][ T3684] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 697.493398][T10426] usb 2-1: USB disconnect, device number 35 [ 697.505059][T12832] usb 4-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 697.519118][T12832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.528785][T12832] usb 4-1: Product: syz [ 697.533011][T12832] usb 4-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜 [ 697.558068][ T3689] usb 3-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 697.567761][T12832] usb 4-1: SerialNumber: syz [ 697.572401][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.584146][ T3689] usb 3-1: Product: syz [ 697.588671][ T3689] usb 3-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜 [ 697.613739][ T3684] usb 5-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 697.613940][T29025] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 697.634404][ T3689] usb 3-1: SerialNumber: syz [ 697.641675][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.651217][ T3684] usb 5-1: Product: syz [ 697.655561][ T3684] usb 5-1: Manufacturer: syz [ 697.660241][ T3684] usb 5-1: SerialNumber: syz [ 697.665464][T29029] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 00:11:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xc000000, 0x0, 0x400000) [ 697.695440][T29032] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 697.716424][ T3684] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 697.919837][T10426] usb 5-1: USB disconnect, device number 21 [ 697.935237][T12832] usbhid 4-1:1.0: can't add hid device: -22 [ 697.942678][T12832] usbhid: probe of 4-1:1.0 failed with error -22 [ 697.950700][T12832] usb 4-1: USB disconnect, device number 18 00:11:38 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) 00:11:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001700)=""/119) [ 697.975066][ T3689] usbhid 3-1:1.0: can't add hid device: -22 [ 697.981053][ T3689] usbhid: probe of 3-1:1.0 failed with error -22 [ 697.998469][ T3689] usb 3-1: USB disconnect, device number 28 00:11:38 executing program 5: syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x20100) 00:11:38 executing program 3: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf"}}]}) [ 698.334849][ T3687] usb 2-1: new high-speed USB device number 36 using dummy_hcd 00:11:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x12000000, 0x0, 0x400000) 00:11:38 executing program 4: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 00:11:38 executing program 2: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x380a}}, {0xe7, &(0x7f0000000180)=@string={0xe7, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf1148e33c61e72508950085a89e6be27e2e0253e442ae380f347dba9045f7feabe19c2ed2b6f196d4a17c45a9ea8d2211bbe6d70f3e99a05d1512833514165555e50055"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x6402}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x16, &(0x7f0000000300)=@string={0x16, 0x3, "de2dcdf8391802057ba06dc6e79ad0c00597cf8a"}}]}) 00:11:38 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 698.574929][ T3687] usb 2-1: Using ep0 maxpacket: 32 [ 698.644838][ T3689] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 698.695205][ T3687] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.715028][T10426] usb 3-1: new full-speed USB device number 29 using dummy_hcd 00:11:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x18000000, 0x0, 0x400000) [ 698.745020][T14069] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 698.864993][ T3687] usb 2-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 698.874642][ T3687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.883417][ T3687] usb 2-1: Product: syz [ 698.888164][ T3687] usb 2-1: Manufacturer: syz [ 698.893125][ T3687] usb 2-1: SerialNumber: syz 00:11:38 executing program 5: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/215) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0xfe, 0x9, 0x2, 0xffffff78, "7c4cdc16bea728b0df4fe52890d312064f8647a31b86d35b37cdbc61fb0ab802"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/254) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/54) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x5, 0x1abc40) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/117) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000380)={0x7ff, 0xf84, 0xb42, 0x9, 0xb01a, 0x4}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/75) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x10100) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000480)=""/239) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000580)=""/77) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000600)=0x3150) r2 = syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0xd0, 0xb2, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf59af67"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1c4, 0x1ff, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x14}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xe5, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xff, 0x5, 0xf2, 0x20, 0x4}, 0xa0, &(0x7f0000000740)={0x5, 0xf, 0xa0, 0x3, [@ptm_cap={0x3}, @generic={0x88, 0x10, 0x3, "b06c17077497186adcb807e2957ceb5b4745852d8bdadec28c3542b1dca5ec65c252efa33691e21aab7ccc84b19b314ddb6490ca7853d4ef3cf00da92cd3da5da99b43678b6ea8412d3c320ec73a0274662214618de2bf011f65ba3154c69db59b3328185f960b153d7d52eebe2ba266e74bcf6bec9267aaf232e4df2f8e145d1b1f862c91"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf00, 0x4000, [0x3f00]}]}, 0x7, [{0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "16e4143a546ca13984d5104782c0b45e8bbb5a35c9d90f954d52033703f30e41a478f75ab1a03d83239c55e089af1f4d755644897d4edc8fb522281c0c00f9646bb21544278abda4ec139ea22a1bdaeaa31f56524d750d06ef7396c25ada81b05c94b47bf7044cc47789eba56079038a1944d7aa6d3fd93d3f109180f3be506b33f5707b7a95d1488100d10d9f8b5c214e4baafa829da808c9d9a67d0e1244ff22a049b030710df8c495e21963caf1161ee14f5f888564765616"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x6465}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}, {0xd0, &(0x7f0000000980)=@string={0xd0, 0x3, "27abc6ed67f1f5a2f5b56068a4a2cd3e5de247dedfdbf9fa76520ee9e46e5ba9d0f420cfb076e8d26ed427e4394a29fa648f8a61d108491aad3255233ea08bd4f48fbc8ceb777f00d877a99145e71e2a24351442000a8308f72f3e5dc90bb1fb9cbb37b06a9f00fbe757036d0738462e417669829b5b96c16fb1282686971165afb20bcc600cbae6b2a574a677fa14de30d0dc4a3fb4891f76752f61aa2cd53a55e9126d65294dd28b4ca1490e7a4bf9703a540ca51b30261fe082a974dd9716cc4896f57f5304a13d8f2c739957"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xaa, {0xaa, 0x22, "56421d0150d19e5c7bbe1b95b67cd9fd86c010c6bb07d1d4e2f9841a2f28501cf2c0fb7ce34c3e8c3c9065bac5e4dee5c20a94787d2be7f825af694e843b27b3841db11e70d010f308815c9335eaf2d38f593800e8de9597b7a3c168145e582b8543e16943f2bb405e28787edf2af20b5c88c1d4fc7c4644bb40d4d17c2e9d0748816a9a7837d318e04e6f9456df8ac289d32cf4f619d3117e61dbb9727bd6aa0594c7c01ce776f7"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000cc0)={0x0, 0x16, 0x54, "e267d3d05981590116d126d09f2d5072903672c28db29ea41615caef269e306e228d4755050986e23c63070c6718caaab46f72b2d06af623f790dca1809f46db8032fcfa751f37caf93a0d8fb00a1674591a6173"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x20}}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e40)=""/78) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000ec0)=0x8) 00:11:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1d020000, 0x0, 0x400000) [ 699.074952][T10426] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 699.095003][ T3689] usb 4-1: not running at top speed; connect to a high speed hub [ 699.105012][T14069] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 699.185632][ T3687] usbhid 2-1:1.0: can't add hid device: -22 [ 699.194620][ T3687] usbhid: probe of 2-1:1.0 failed with error -22 [ 699.194995][ T3689] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 699.215228][ T3689] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.231941][ T3687] usb 2-1: USB disconnect, device number 36 [ 699.241016][ T3689] usb 4-1: config 1 interface 0 has no altsetting 0 [ 699.255045][T10426] usb 3-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 699.273289][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.282035][T14069] usb 5-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 699.295155][T14069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.310619][T10426] usb 3-1: Product: 搂 [ 699.315178][T14069] usb 5-1: Product: syz [ 699.319636][T10426] usb 3-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜䠑㳣ࠥ•ꢅ殞绢Ȯ깂༸紴邺꯾鳡툮풖粡ꥅ跪ᄢ࿗餾嶠ሕ㖃ᘔ啕å [ 699.353741][T14069] usb 5-1: Manufacturer: syz [ 699.360454][T14069] usb 5-1: SerialNumber: syz [ 699.366035][T10426] usb 3-1: SerialNumber: ࠔ [ 699.385074][T29063] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 699.396656][T29061] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 699.406084][T14069] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 699.421179][T10426] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 699.435429][ T3689] usb 4-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 699.454864][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.463061][ T3689] usb 4-1: Product: syz 00:11:39 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) [ 699.472540][ T3689] usb 4-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜 [ 699.497508][ T3689] usb 4-1: SerialNumber: syz [ 699.525161][T29055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 00:11:39 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) [ 699.639632][ T3687] usb 3-1: USB disconnect, device number 29 00:11:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e000000, 0x0, 0x400000) [ 699.701744][ T3684] usb 5-1: USB disconnect, device number 22 [ 699.825105][ T3689] usbhid 4-1:1.0: can't add hid device: -22 [ 699.833244][ T3689] usbhid: probe of 4-1:1.0 failed with error -22 [ 699.843274][ T3689] usb 4-1: USB disconnect, device number 19 00:11:40 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 699.984857][T12832] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 700.225033][T12832] usb 2-1: Using ep0 maxpacket: 32 00:11:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) 00:11:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e020000, 0x0, 0x400000) 00:11:40 executing program 2: syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}, [{{0x9, 0x5, 0x2, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x380a}}, {0xe7, &(0x7f0000000180)=@string={0xe7, 0x3, "a21cd5bf89ae1e7b94a21e4399cc26131d3fb5d700a16a2eea852bec6a570f676a8f44d3046a781c0b63d45a43f87f03c76ee547f273acf9a31eef1a058b19098f5ece994ec08fa079979d698908b20acabeb6255cb6a46c73d9fa6c6ed916cd969aef5ed295386c8b9109b7c4e176ac08b9e2ef9b99f1cbf783afafa847e7acfa309405a02166143a4d8ff00d0d576ddf054244169f32fab06ff3d390e563db1cdf1148e33c61e72508950085a89e6be27e2e0253e442ae380f347dba9045f7feabe19c2ed2b6f196d4a17c45a9ea8d2211bbe6d70f3e99a05d1512833514165555e50055"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x6402}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x16, &(0x7f0000000300)=@string={0x16, 0x3, "de2dcdf8391802057ba06dc6e79ad0c00597cf8a"}}]}) 00:11:40 executing program 4: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@ncm={0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$evdev(0x0, 0x101, 0x0) 00:11:40 executing program 3: bpf$PROG_LOAD_XDP(0x1c, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:40 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000180)=""/247, 0x32, 0xf7, 0x1}, 0x20) [ 700.345103][T12832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:11:40 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0x2000ff00) 00:11:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000580)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x0, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 700.535024][T12832] usb 2-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 700.564925][ T3684] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 700.572537][ T3689] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 700.592393][T12832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.608915][T12832] usb 2-1: Product: syz [ 700.627029][T12832] usb 2-1: Manufacturer: syz [ 700.631749][T12832] usb 2-1: SerialNumber: syz [ 700.905199][T12832] usbhid 2-1:1.0: can't add hid device: -22 [ 700.911189][T12832] usbhid: probe of 2-1:1.0 failed with error -22 [ 700.922659][T12832] usb 2-1: USB disconnect, device number 37 [ 700.955242][ T3689] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 700.968409][ T3684] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 701.135050][ T3684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.144132][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.152289][ T3689] usb 3-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 701.161387][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.169439][ T3689] usb 3-1: Product: 搂 [ 701.173612][ T3689] usb 3-1: Manufacturer: Ტ뿕꺉笞ꊔ䌞척ጦ㼝ힵꄀ⹪藪坪朏轪퍄樄ᱸ挋嫔Ϳ滇䟥珲怜ả᫯謅ङ序駎쁎ꂏ靹榝ࢉલ뻊▶뙜沤泺촖骖廯闒永醋뜉걶뤈馛쯱菷꾯䞨곧ヺ֔↠ᑦ䴺഍浗ן䑂鼖免澰폳󨼜䠑㳣ࠥ•ꢅ殞绢Ȯ깂༸紴邺꯾鳡툮풖粡ꥅ跪ᄢ࿗餾嶠ሕ㖃ᘔ啕å [ 701.209753][ T3684] usb 5-1: Product: syz [ 701.214043][ T3684] usb 5-1: Manufacturer: syz [ 701.218691][ T3684] usb 5-1: SerialNumber: syz [ 701.223828][ T3689] usb 3-1: SerialNumber: ࠔ [ 701.245188][T29085] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 701.247307][T29084] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 701.266963][ T3689] usbhid 3-1:1.0: couldn't find an input interrupt endpoint 00:11:41 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x7) 00:11:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1f000000, 0x0, 0x400000) 00:11:41 executing program 5: syz_clone(0xb1008400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="83") 00:11:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000002240), 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000100)="192c2cbf5af651903d506b86abbbc8b1df277e19ac810018404dbab770b3dd34202cd4e160b57eec7d17ea179043006719b67d4e9405a486aacbc1183edfc80243228fd63ff1a7318379f5fe203eb6d262dba096a49a49dd2ecaf9fa45596b5c", &(0x7f0000000180)=""/4096, &(0x7f0000001180)="e5c25dc4b23f3a8212a62711abb0597f5e26d4e83911838b812c134f30468369a7e8d0509f0a1bfe65b35d588565a86d43ab846ca977197b512a41c6a985470f7eb3a2eecec16e346ad79e943fc7ece664ceaae5d9af11daa0e80c0a3e1d8ab27cc9458cc9cb805da7541ad0df6f50480d292537f81d43091308dda9dac0a9ffe6802480d0f7e6671c903c314615b29012e439e902077f081a3338b3aed253bf5f3433f90d291c3e15df1156915c96d36efefae0f0ce776ba7de7d", &(0x7f0000001240)="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", 0x8, 0xffffffffffffffff, 0x4}, 0x38) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000002580), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002540)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x2, &(0x7f0000002600)=ANY=[@ANYBLOB="184400000600000000000000000000009dcfacc12740fedab6247c88b6d48b60b6380fd2195e49564817a9fcb9659f3db29fff9415daee5a2797d186ece468e27e34018f243a71dae06f2f1b1c756b891c3b1f241525d50252a58a0729a762de269bf4724083bee2c6285ad1f7d506b6293b5f9d9117c6f2ee1309255794de554281be07339936df65f825ec8248ab8cc105be1688be6e7fdbe20853afd70f4f9c9a06"], &(0x7f0000004100)='GPL\x00', 0x20, 0x12, &(0x7f0000004140)=""/18, 0x1e00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000041c0)={0x3, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, r2, r2, 0x1]}, 0x80) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x2, &(0x7f00000040c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000004100)='GPL\x00', 0x20, 0x12, &(0x7f0000004140)=""/18, 0x1e00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000041c0)={0x3, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, r3, r3, 0x1]}, 0x80) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x2, &(0x7f00000040c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000004100)='GPL\x00', 0x20, 0x12, &(0x7f0000004140)=""/18, 0x1e00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000041c0)={0x3, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r4, r4, r4, 0x1]}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000002700)={r5}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000025c0)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000024c0)={0x6, 0x2, &(0x7f0000002280)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f00000022c0)='GPL\x00', 0x800, 0xf8, &(0x7f0000002300)=""/248, 0x41100, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000002400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002440)={0x0, 0x2, 0x2, 0x14000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002480)=[0xffffffffffffffff, r3, 0x1]}, 0x80) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x2, &(0x7f00000040c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}], &(0x7f0000004100)='GPL\x00', 0x20, 0x12, &(0x7f0000004140)=""/18, 0x1e00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000041c0)={0x3, 0x2, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000042c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r6}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002740)=r6, 0x4) openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) 00:11:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 701.486029][ T3684] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 701.521864][ T3687] usb 3-1: USB disconnect, device number 30 [ 701.688827][T10426] usb 5-1: USB disconnect, device number 23 00:11:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) 00:11:42 executing program 4: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0xbb2, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@ncm={0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$evdev(0x0, 0x101, 0x0) 00:11:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) 00:11:42 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x5008000, &(0x7f0000000240), 0x0, &(0x7f0000000040), 0x0, 0x0) syz_clone(0xb1008400, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="8305b971dc") 00:11:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) 00:11:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x20000000, 0x0, 0x400000) 00:11:42 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000800)='GPL\x00', 0x2, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) 00:11:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x202000, 0x0) 00:11:42 executing program 5: syz_clone(0xb1008400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x3, &(0x7f00000018c0)=@framed, &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002980), 0x10}, 0x80) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002bc0), 0x2, 0x0) socketpair(0x25, 0x0, 0x0, &(0x7f0000002f00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002f40)) 00:11:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f0000000540)=[@txtime={{0x18}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0x0) [ 702.595007][T10426] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 702.954882][T10426] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 703.125072][T10426] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.134361][T10426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.142746][T10426] usb 5-1: Product: syz [ 703.147143][T10426] usb 5-1: Manufacturer: syz [ 703.151952][T10426] usb 5-1: SerialNumber: syz [ 703.175148][T29127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 703.417128][T10426] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 703.631837][ T3689] usb 5-1: USB disconnect, device number 24 00:11:44 executing program 4: socketpair(0xa, 0x0, 0x6000000, &(0x7f0000000000)) 00:11:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 00:11:44 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x401c5820, &(0x7f0000000040)) 00:11:44 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x801c581f, 0x0) 00:11:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000400)='(', 0x1}], 0x2}, 0x0) 00:11:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x22070000, 0x0, 0x400000) 00:11:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0}, 0x80) 00:11:44 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) 00:11:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0x2}, @var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000013c0)=""/148, 0x3f, 0x94, 0x1}, 0x20) 00:11:44 executing program 2: socketpair(0x10, 0x3, 0xfff, &(0x7f0000001480)) 00:11:44 executing program 4: bpf$BPF_LINK_CREATE_XDP(0x1c, 0xfffffffffffffffe, 0x0) 00:11:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19}, 0x48) 00:11:44 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x40049409, 0x0) 00:11:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) 00:11:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:44 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000002f00)) 00:11:44 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000002f40)) 00:11:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x24000000, 0x0, 0x400000) 00:11:44 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 00:11:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40107446, 0x2000ff00) 00:11:44 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)={&(0x7f0000001b80)='.\x00', 0x0, 0x8}, 0x10) 00:11:44 executing program 1: syz_clone(0x42008000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)="637fa47f7f809da488a33125a4734100f4578dba11c95d586b981cc6f4d14f37564d5df000a535f0dd0f93cf8b3ed4a4aa394ab8feb21ec2c65cdb5d42") syz_open_procfs$namespace(0x0, 0x0) 00:11:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 00:11:44 executing program 4: socketpair(0x2, 0x805, 0x0, &(0x7f0000000680)) 00:11:44 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x9, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:45 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x4}, 0x0) 00:11:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x3}, 0x48) 00:11:45 executing program 5: socketpair(0x1, 0x0, 0xfffffff7, &(0x7f0000000040)) 00:11:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 00:11:45 executing program 3: bpf$PROG_LOAD_XDP(0x13, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x26020000, 0x0, 0x400000) 00:11:45 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') 00:11:45 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x40010042) 00:11:45 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:11:45 executing program 4: bpf$PROG_LOAD_XDP(0xf, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="fe", 0x1}, {0x0}], 0x2}, 0x0) 00:11:45 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x12, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:45 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)="e7"}, 0x48) 00:11:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 00:11:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='cpuacct.usage_user\x00', 0x0, 0x0) 00:11:45 executing program 3: mkdir(&(0x7f0000001e80)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004940)={&(0x7f0000004900)='./file0\x00'}, 0x10) 00:11:46 executing program 1: bpf$PROG_LOAD_XDP(0xb, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x0, 0x0) 00:11:46 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, 0x0}, 0x20) 00:11:46 executing program 2: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001f40)={0x0}, 0x10) 00:11:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 00:11:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2a000000, 0x0, 0x400000) 00:11:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0xc020660b, 0x0) 00:11:46 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000001b80)=""/4107, 0x100b}, {&(0x7f0000001400)=""/222, 0x1c}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/13, 0xd}, {&(0x7f0000001600)=""/150, 0xfffffffffffffd92}], 0xa}, 0x0) 00:11:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) socketpair(0x2, 0x805, 0x1, &(0x7f0000000680)) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004940)={&(0x7f0000004900)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ec0)={0x0, 0x3, &(0x7f00000049c0)=@framed, &(0x7f0000004a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}, 0x0) 00:11:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0xc0189436, &(0x7f0000000040)) 00:11:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$tipc(r1, 0x0, 0x0) 00:11:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x9, 0x0, 0x0, 0x0, 0x402}, 0x48) 00:11:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 00:11:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x40000022) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x5, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xffff000}, [@alu={0x7, 0x1}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff}]}, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00)={0x0, 0x8, 0x4}, 0x10}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) 00:11:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 00:11:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2e040000, 0x0, 0x400000) 00:11:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 00:11:46 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r1}) 00:11:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0) 00:11:46 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x15, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x18}}, @mark={{0x14}}], 0x30}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00), 0x10}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ec0)={0x11, 0x5, &(0x7f00000049c0)=@framed={{}, [@cb_func]}, &(0x7f0000004a00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004dc0), 0x10}, 0x80) 00:11:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40002001) 00:11:46 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002f40)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000003400)=""/4096, 0x1000}], 0x1}, 0x0) 00:11:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0xc0045878, 0x0) 00:11:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4}]}]}}, &(0x7f00000001c0)=""/157, 0x32, 0x9d, 0x1}, 0x20) 00:11:46 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:11:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 00:11:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2f000000, 0x0, 0x400000) 00:11:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0xde, &(0x7f0000001bc0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0xc0045878, 0x0) 00:11:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 00:11:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f00000003c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0xb7, &(0x7f0000000440)=""/183, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:47 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) mkdir(&(0x7f0000001e80)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004940)={&(0x7f0000004900)='./file0\x00'}, 0x10) 00:11:47 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)="b0e9a7b8d327ef985b661887a6e08e1e") 00:11:47 executing program 3: socketpair(0x2, 0x2, 0x2, &(0x7f0000000000)) 00:11:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x30000000, 0x0, 0x400000) 00:11:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000480)=@raw=[@kfunc], &(0x7f00000004c0)='GPL\x00', 0x2, 0xa7, &(0x7f0000000500)=""/167, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:47 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff}, 0xc) 00:11:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x0, 0x0, 0xff}, 0x48) 00:11:47 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x22c2, 0x0) 00:11:47 executing program 5: socketpair(0x22, 0x0, 0xfffffffb, &(0x7f0000000040)) 00:11:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0xde, &(0x7f0000001bc0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0x8, 0x10, &(0x7f0000001d00), 0x10}, 0x80) 00:11:47 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x400002, 0x0) 00:11:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:47 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002980)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)="c8", 0x1}], 0x1}, 0x0) 00:11:47 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80086601, 0x0) 00:11:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @ptr={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/247, 0x3f, 0xf7, 0x1}, 0x20) 00:11:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x32060000, 0x0, 0x400000) 00:11:48 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x700) 00:11:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x80000001, 0x1, 0x80}, 0x48) 00:11:48 executing program 4: bpf$PROG_LOAD_XDP(0x4, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:48 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 00:11:48 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8010743f, 0x2000ff00) 00:11:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4, 0x3}]}]}}, &(0x7f00000001c0)=""/157, 0x32, 0x9d, 0x1}, 0x20) 00:11:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='I', 0x1}], 0x1}, 0x4000881) sendmsg$kcm(r0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[], 0x1048}, 0x80) 00:11:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)) 00:11:48 executing program 1: syz_clone(0xc111452c7480c5d1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') 00:11:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000022) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x4, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@jmp]}, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00), 0x10}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 00:11:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x61) 00:11:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x35070000, 0x0, 0x400000) 00:11:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0x8, 0x10, 0x0}, 0x80) 00:11:48 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000540)=@raw=[@func], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 00:11:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001640)=""/244, 0x2b, 0xf4, 0x1}, 0x20) 00:11:48 executing program 1: syz_clone(0xc111452c7480c5d1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') 00:11:48 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000022) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x4, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}, [@jmp]}, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00), 0x10}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 00:11:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:11:48 executing program 3: syz_clone(0x5008000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x102) 00:11:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "bd"}]}}, &(0x7f0000001640)=""/244, 0x2a, 0xf4, 0x1}, 0x20) 00:11:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x19, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}, 0x0) 00:11:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x36000000, 0x0, 0x400000) 00:11:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x40086602, &(0x7f0000000040)) 00:11:49 executing program 2: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:11:49 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000480)) 00:11:49 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000004980), 0x8) 00:11:49 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x478}, 0x0) 00:11:49 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0x10) 00:11:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/157, 0x29, 0x9d, 0x1}, 0x20) 00:11:49 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) 00:11:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0xc0189436, 0x0) 00:11:49 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x8}, 0x14) 00:11:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/18, 0x12}], 0x1}, 0x0) 00:11:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3c000000, 0x0, 0x400000) 00:11:49 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x2000ff00) 00:11:49 executing program 3: socketpair(0x18, 0x0, 0x80000001, &(0x7f0000000000)) 00:11:49 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) 00:11:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x20) 00:11:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000001c0)=""/157, 0x26, 0x9d, 0x1}, 0x20) 00:11:49 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) 00:11:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x28, 0x0, 0x0, "9c7dabd898f83b7eb64c11048d4466afcb"}], 0x28}, 0x0) 00:11:49 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x1c, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:49 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) 00:11:49 executing program 5: mkdir(&(0x7f0000001e80)='./file0\x00', 0x0) 00:11:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x3, 0x1008}, 0x48) 00:11:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3f000000, 0x0, 0x400000) 00:11:50 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000017c0)={@cgroup, 0xffffffffffffffff, 0x0, 0xa}, 0x14) 00:11:50 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001c00)="c2", 0x1}], 0x1, &(0x7f0000002e40)=ANY=[], 0x1048}, 0x80) 00:11:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xd}]}]}}, &(0x7f00000001c0)=""/157, 0x32, 0x9d, 0x1}, 0x20) 00:11:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000440)=@ethernet, 0x80, 0x0}, 0x0) 00:11:50 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x18}, 0x10) 00:11:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 00:11:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @ptr]}}, &(0x7f0000000180)=""/247, 0x3e, 0xf7, 0x1}, 0x20) 00:11:50 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="fe", 0x1}, {0x0}], 0x2, &(0x7f0000000500)=[{0x18, 0x0, 0x0, "9c"}, {0x10}], 0x28}, 0x0) 00:11:50 executing program 3: socketpair(0xa, 0x0, 0x4000, &(0x7f0000000000)) 00:11:50 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="01", 0x1}], 0x1, &(0x7f0000000b40)=ANY=[], 0x478}, 0x0) 00:11:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x40000000, 0x0, 0x400000) 00:11:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x402) 00:11:51 executing program 4: socketpair(0xa, 0x0, 0x4c00, &(0x7f0000000000)) 00:11:51 executing program 2: syz_clone(0x4000080, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xd}]}]}}, &(0x7f00000001c0)=""/157, 0x32, 0x9d, 0x1}, 0x20) 00:11:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:11:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x0, 0x0, "9c"}, {0x10}], 0x28}, 0x0) 00:11:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x40070000, 0x0, 0x400000) 00:11:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r0}, 0x10) 00:11:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000001c0)=""/157, 0x32, 0x9d, 0x1}, 0x20) 00:11:51 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:11:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 00:11:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10040) 00:11:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) 00:11:51 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/79, 0x4f}], 0x1}, 0x40) 00:11:51 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_clone(0xc111452c7480c5d1, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 00:11:51 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x942c2, 0x0) 00:11:51 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) 00:11:51 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000040) 00:11:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x41070000, 0x0, 0x400000) 00:11:52 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socketpair(0x25, 0x0, 0x0, &(0x7f0000002f00)) 00:11:52 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x4020940d, 0x0) 00:11:52 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x94}, 0x10040) 00:11:52 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001780)='syz1\x00', 0x1ff) 00:11:52 executing program 3: socketpair(0x2c, 0x3, 0x7, &(0x7f0000000040)) 00:11:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002f40)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) 00:11:52 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 00:11:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x42000000, 0x0, 0x400000) 00:11:52 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:11:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001b80)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) 00:11:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 00:11:52 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0xff99, &(0x7f0000000400)=[{&(0x7f0000000080)="9edc530b14bf79bfcdb6552f580914a6b70c7f5a107475f14946bebc9017a1426e71b6297c70557591bb064ef6598042eab8546cea1465c18abc2bbf1584bfdec9ceae0a844a886487c11ae97de4d1f9377414570ffde406a68a82c36588a33bab4656098e5d80dda0615324d0281464a32594f82cec6c88845f00aa98c69766cb416891acfe1c14d8fb42f1724cf7e044ba4036983d2c998453aa7ee55db094889ec8cf91b5b6623ad9bdc7c9515d6373a477f4b6da84a6bcc6938b6aa4c0aec38aeefb5a3f98d0189eade1ca3534af8749aef2a76546a8c18ac3cb450bc5a9", 0xe0}, {&(0x7f0000000180)="f0a19d", 0xfffffde3}, {&(0x7f00000004c0)="1206439cc9422b311637d88379214cf037d6c296d758d9c13b3f09f5d3d9adbac4801d9e9b9d44f2b11462b7584ace1c6ad6844caab172113fc7a036f2be4b602564ca68020d6db49c69b0e0b4a721c4343971c156e4441662bc3c78b63b28aa97762069f68e92d5cbcaa962", 0x6c}, {&(0x7f0000000240)="488d43b3decddf8af98f55c9769e800b9c7313bd25541543ee2afb0d8ac206f676a8b3b4b00181d3ec0e3f8155d4aaa94f1a3743e8808f7a84debdbd349bd66bc268f139285ff922d5b4df151a26beb7f5d3ec8c7d91d56f55f4c6878a4ae8bb98ff759393c16c6c566b0241b497be4f7931fd9eecbddadad0e5b7ace178a9eb45afb496cc92add8152ce991537c6cdeb1048a598cae85224babaeb97d39b1117947b8db03e57a9266518b4be8c157e90b603615", 0xb4}, {&(0x7f0000000540)="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", 0xff}], 0x5}, 0x20048811) 00:11:52 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000000740)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000800)='GPL\x00', 0x2, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x13040) 00:11:52 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[], &(0x7f0000000580)=""/214, 0x39, 0xd6, 0x1}, 0x20) 00:11:52 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) 00:11:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 00:11:52 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) 00:11:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x42070000, 0x0, 0x400000) 00:11:53 executing program 3: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x5008000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_clone(0xb1008400, &(0x7f0000000100)="82ed28e6c22871ff5794920e21556fe6d712adb1ca63ee9890dc791109500f1166b5300647", 0x25, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="8305b9") 00:11:53 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000580)=""/214, 0x39, 0xd6, 0x1}, 0x20) 00:11:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000013c0)=""/148, 0x2f, 0x94, 0x1}, 0x20) 00:11:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001e80)='./file0\x00', 0x0) 00:11:53 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x0) 00:11:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x200000c0) 00:11:53 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x48) 00:11:53 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x1e, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:53 executing program 3: bpf$PROG_LOAD_XDP(0x2, &(0x7f0000004240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe0) 00:11:53 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) 00:11:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x43070000, 0x0, 0x400000) 00:11:53 executing program 2: socketpair(0x2b, 0x1, 0xee, &(0x7f0000001540)) 00:11:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10}, 0x48) 00:11:53 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) 00:11:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 00:11:53 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0) 00:11:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a00)={0x6, 0x3, &(0x7f00000018c0)=@framed, &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 00:11:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 00:11:53 executing program 3: socketpair(0xa, 0x0, 0x700, &(0x7f0000000000)) 00:11:53 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000}}, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0xde, &(0x7f0000001bc0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x44070000, 0x0, 0x400000) 00:11:54 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000002040)='syz0\x00', 0x200002, 0x0) 00:11:54 executing program 5: socketpair(0xa, 0x3, 0x40, &(0x7f0000000000)) 00:11:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00), 0x10}, 0x80) 00:11:54 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8940, 0x0) 00:11:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x18}}, @mark={{0x14}}], 0x30}, 0x0) 00:11:54 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 00:11:54 executing program 4: socketpair(0x29, 0x2, 0xfffffffe, &(0x7f0000000000)) 00:11:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0}, 0x10) 00:11:54 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000000740)=@framed={{}, [@generic]}, &(0x7f0000000800)='GPL\x00', 0x2, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 00:11:54 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000180)=""/247, 0x26, 0xf7, 0x1}, 0x20) 00:11:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x46070000, 0x0, 0x400000) 00:11:54 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb1008400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x1, &(0x7f0000000880)=@raw=[@generic], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:54 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x8, 0x1f3c, &(0x7f00000040c0), &(0x7f0000004100)='GPL\x00', 0x0, 0x12, &(0x7f0000004140)=""/18, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180), 0x8, 0x10, &(0x7f00000041c0), 0xd, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:11:54 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="91", &(0x7f0000000580)}, 0x48) 00:11:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x9}, 0x48) 00:11:54 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0xde, &(0x7f0000001bc0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:54 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x40086602, 0x0) 00:11:54 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_fd], &(0x7f00000004c0)='GPL\x00', 0x2, 0xa7, &(0x7f0000000500)=""/167, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:54 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb1008400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:54 executing program 2: socketpair(0x11, 0xa, 0x8000, &(0x7f0000000000)) 00:11:54 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:11:55 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8940, &(0x7f0000000040)) 00:11:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 00:11:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) 00:11:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) 00:11:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x49070000, 0x0, 0x400000) 00:11:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x80000001, 0x0, 0x80}, 0x48) 00:11:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:11:55 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 00:11:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002f40)) 00:11:55 executing program 3: socketpair(0x10, 0x3, 0x5, &(0x7f0000000040)) 00:11:55 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 00:11:55 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:11:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) 00:11:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000028c0)={&(0x7f0000002480), 0xc, 0x0}, 0x0) 00:11:55 executing program 2: syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:11:55 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@generic={0x0, "ebc878a466a59fe260d5079808430096c1697a5ca260eeb68c971307b7daa6d5c049b1503a207513103edec8be70fe3ff2ae27a17fe9844f2d6f518b697757f56b047dc75e22dca41691c36f8f5595b689bb317b25ecbb9059baee6f9bcbab0977eafacf95b5a7a4e57e1c58768f77bb8f97fb1d197e30b0b062f4f1ad19"}, 0xfffffffffffffe90, &(0x7f0000000400), 0x5}, 0x0) 00:11:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4a070000, 0x0, 0x400000) 00:11:55 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) 00:11:55 executing program 3: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x5008000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:55 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8904, &(0x7f0000000040)) 00:11:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/97) 00:11:55 executing program 4: syz_clone(0x74d20080, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:55 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x18b, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 00:11:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x4b47, 0x0) 00:11:55 executing program 1: syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) 00:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x128, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x10c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x104, 0x3, "acd8b56c515f23a6105ea6f713d25633b4e8a74430c13f72bc89e381fdc835d7fd2c94e587dac30a425ea2bb887052cec448c6da7d6c91415c197847b9f068729399d628857c13946cba379d784b82d56d5ee160dab617b166ddc597ec3491403b80c300ce28610f6527061d58fa33ef0a7c88b67562d99b9cf5717622e4bf4cfcdc4c285f9d568168f7d090c1e759fd53b2ec7eb53fe2b62b2463f2e9d89dbeb01025da5af89e9c69727fef617ce43facfdd7311db142493c32e435284d2f56d671f671925c88b799f1f23968a82d7c929245854f602172885c8544c21eccc101df24d8c5631970952cdd3d2635bcb79c81cf56b1cde9dbb6288cfde34250cd"}]}]}, 0x128}}, 0x0) 00:11:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'sit0\x00', 0x0}) 00:11:55 executing program 1: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0) 00:11:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4e070000, 0x0, 0x400000) 00:11:56 executing program 1: bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 00:11:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 00:11:56 executing program 2: socketpair(0x18, 0x0, 0x8001, &(0x7f0000000180)) 00:11:56 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 00:11:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, &(0x7f00000000c0)) 00:11:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40049409, &(0x7f0000000140)=""/97) 00:11:56 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 00:11:56 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_clone(0x40020000, &(0x7f00000028c0)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="9afe3f2f9f67ad360df382ea0f33d4783c63ef661c28e32b290be44396b8ff5078917cb66fb573c3f341f2ee79fd086bb996f1365f10119b78003d9e7e92bfcfbf94df1fd3f436c359871146936ae6fd457cb81f02a94f3600405c25bb92505b5b") rt_tgsigqueueinfo(r0, r1, 0x14, &(0x7f0000000100)={0x15, 0x2df0, 0x4}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x0}) 00:11:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0xffffffc0) 00:11:56 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000940)) 00:11:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, &(0x7f0000000140)=""/97) [ 716.574954][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 716.854881][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 716.985047][ T14] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 716.997180][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 00:11:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x54070000, 0x0, 0x400000) 00:11:57 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f0000000140)) 00:11:57 executing program 5: syz_clone(0x40020000, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:57 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 00:11:57 executing program 3: pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 00:11:57 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 717.174936][ T14] usb 3-1: New USB device found, idVendor=05c6, idProduct=9053, bcdDevice=75.71 [ 717.184594][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.192743][ T14] usb 3-1: Product: syz [ 717.197159][ T14] usb 3-1: Manufacturer: syz [ 717.201883][ T14] usb 3-1: SerialNumber: syz 00:11:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8906, 0x0) [ 717.222252][ T14] usb 3-1: config 0 descriptor?? [ 717.490161][ T3687] usb 3-1: USB disconnect, device number 31 00:11:58 executing program 4: r0 = gettid() process_vm_readv(r0, &(0x7f0000000680)=[{0x0, 0x2}, {&(0x7f0000001780)=""/75, 0x4b}, {&(0x7f0000000340)=""/86, 0x56}], 0x3, &(0x7f0000000600)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1, 0x0) 00:11:58 executing program 1: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) 00:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:11:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x5b070000, 0x0, 0x400000) 00:11:58 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 00:11:58 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x5, &(0x7f0000000080)) 00:11:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) 00:11:58 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) io_setup(0x10000, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) 00:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x300, 0x0, 0x9effffff00000000}, 0x0) 00:11:58 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002300)='net/arp\x00') 00:11:58 executing program 2: rt_sigaction(0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 00:11:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80044501, &(0x7f0000000140)=""/97) 00:11:58 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001340)=0x2, 0x4) mmap$xdp(&(0x7f0000f2d000/0x1000)=nil, 0x1000, 0xf0ff1f, 0x12, r0, 0x0) 00:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x14}, 0x14}, 0x300}, 0x0) 00:11:58 executing program 1: socketpair(0x11, 0xa, 0x300, &(0x7f0000000180)) 00:11:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x5d070000, 0x0, 0x400000) 00:11:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8915, 0x0) 00:11:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 00:11:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x0, 0x100, 0x7}, 0x20) 00:11:58 executing program 1: getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)) 00:11:58 executing program 5: clock_adjtime(0x0, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x1ff, 0x81, 0x9}) 00:11:58 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 00:11:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/49) 00:11:58 executing program 5: socket(0x1, 0x2, 0xa926) 00:11:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) 00:11:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000540)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}], 0x78}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x4, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xffff000}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0xde, &(0x7f0000001bc0)=""/222, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x7}, 0x8, 0x10, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0xc7fe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) mkdir(&(0x7f0000001e80)='./file0\x00', 0xe0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001f40)={0x0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ec0)={0x11, 0x3, &(0x7f00000049c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5a6}}, 0x0, 0x3, 0x3e, &(0x7f0000004a40)=""/62, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004d80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004dc0)={0x1, 0x0, 0x0, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004e80)=[0xffffffffffffffff]}, 0x80) 00:11:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48840204}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xae9929a54f856df7}, 0x14}}, 0x0) 00:11:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x65040000, 0x0, 0x400000) 00:11:59 executing program 1: pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000580)={0x14}, 0x14) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18}, 0x18) 00:11:59 executing program 2: r0 = gettid() syz_open_procfs$namespace(0x0, 0x0) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1c1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) 00:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}}, 0x0) 00:11:59 executing program 3: syz_clone(0x282200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x81, 0x0, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x65, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0xa, "fbf782e44af14a58"}, {0x0, 0xa, "f53e4afe904930c9"}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@empty}, {@private}]}]}}}}}) 00:11:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2002) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 00:11:59 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000002480), 0xffffffffffffffff) 00:11:59 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000200)) 00:11:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {@wo_ht={{}, {}, @device_a, @broadcast, @random="5b6d4e7fc8ee"}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x74}}, 0x0) 00:11:59 executing program 4: syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x40480) 00:11:59 executing program 1: rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000000)={0x0, 0x0, 0xca9e}) 00:11:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x93010000, 0x0, 0x400000) 00:11:59 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x212, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0xe}], 0x1, 0x0) 00:11:59 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)) 00:11:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 00:11:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044590, &(0x7f0000000140)=""/97) 00:11:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0xe84, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd5a3, 0x73}}}}, [@NL80211_ATTR_NAN_FUNC={0xe60, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x20}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd34, 0xe, 0x0, 0x1, [{0x4}, {0x41, 0x0, "ad7a399b3d2d486dd638df144eaf9adc891b67811154166798d54d952c0f3581b825010e3852c0e7840c8bdbad710e2f19e0f8a7ab4a666fa01ac2592e"}, {0xce8, 0x0, "41a2aa2e43a75c534420a516808136decf103bf31f3f5eaf29bb4caf11fd675e9e77c2669e87ac8df1ce1bdca0d4dff7fb310cc9aabf00ee76f1de30042ee29bdd168bc87858ea2b08dd4207f24f30269cf4b54be44c86bdb548bec206d7e9e72dbda9667dad5879240936a6054e17e0071d04e9b22d723f5625393095fd64bd1fcb7980b6ae4b06756320140096a47b9aac1a98826b2ecd86399787caefaaa3413e3048a9daaa912fb942135d5d0b0545166a92bdca420a67c85383c461c0560c18f3a814c59b6f78c253ff9b72b6168ef6529dae4c792fdcd2e0a7c86083ca463f8f07dabda287b5ad3fc7aa71516fdddd1322a52f79b49cf6a993e1e69d7e8d4737b149b364971e84665f048e4a9aba4885a72e88bb5eb0d84fdbc774b89f6f3aaccd427c5f21ed1af7f5ef52b884ac8958e557f18a7488c736018b2b2e5239af8052ca8e1b64d05b124f935b50a33cf841aff68db814411f1557135d8ad141aff419af23fa0a47ac717fb817fa685534431f674436f0c1779c5122d168cfd3cf5e90ed69e23ef7239485b633e463c76e15abf3f3fcaeea9b08283afa2a31865bc00c83f70f5a980ee467077fc6ccb0376ab4558473785cb894332e72c74bd13f32bf20b68c70ffcc5c2f7fd3681d5eb724196890d4a838abeea72ac9f728ad7db00b3df1c670e77a844091e682e637c4cede6546c0df0b3d052c4b61799853d444869d355a3bd77c45560e1a81daabd6b40dea28c7b347b860f07a6b105ceed0b01e7c7b1de76ee5590800c983f1f1302231dace580d93fb4a11d6e8f964cf12f8f8001a4ab97d7df4fe567a21ba9969a2632a87abbf9d1d81d9691adf9146e626845653e1fd35e63695d8493b5ae17ca314580ed324c5945b827d1f7699e0179be2a613d228bedc533c2601c86401df980850ed575930d55498b498cfc27953368e03dd1e058b2ca3fa786a21c6253ba7a5580ab4c5a357d0ea3ef167f48a5a9ee861aefd9782935f9a814652cf69d529e5ec92f6e39639fcf22ce39088e8d837dbc8b4964a0b58c0ee3dce4592d5c81632776bbf4caa7f014f303c8ac325680d78b810d8f0984d51628a5767bfafbe670151df40c1032b000ab7ce718ef39f7ec8d386983f769ab8fc6330829e53406e5f6af6aafaba4e8d22688393c9308038fcee7d560ebad2c2f5822857d742e2359e2879cee6af2610d5e4f3f8af01d01beb168f1eca43037c8667b4b49adacb8d540c11b191d584c2fd0a91e8ab948d4ae591b830c03fbd894bd535a4222339fcf2d331885af0f5ddde6855540114813262976c5228b44225e7f3043c0cbaba022d1bbbf25f25a083b657023b63751a5457c85314fc7214d78902395abc29cd7a052c989ebe0f1ee5816bea15269ec765164ecfd1ee062abeb326114658f6fe832bcec56280e51381fae968ffcbee95d59a2a87c6575b8ee709cef7083bfb901c63fc2c8835a92d807fd551a338fee17d87b8dd503f8e605a7fde20eccf4518b9e658a72ed0eb6541e2c55a59301c034cac50316692743f8f1f09eb6acb8eff5e9d43ae5c614bbfff0e56fcc0aaac8669d2d382b4a563f57d1eef65cea485b5de0614de426583a4f3f6f27810a36b8bea0acf2af91f772f8dc2c68d82dadbb7be24b3e9c5c3bc89ce6033cf9a74351b32fd0d1eeb05d8e4f334598a0fed6bb6e55cea432bef45361c8e01d39682f2e03f5981fcb927465b365cff935c1ddf182eac659c78da90ce9754a978d23ad3c4b02119fec05d9b625a0b83344e170536d0b504a62801c45ac3724cf5d3c0ac2d8c8708edcaedac880ef9640b2f2506953b2da4de4c69af2c7925fa35eb93959a787d11fac30ac808c802c528210c0d27c66a19afc1e6798a5387626fa8d4a87df3819beef23929ab547fb10aed2ff83336c4180f7d1012758ebf5b93af8f349b7717ae1b9ff4ae9d228966bdbb6f681387bab21444b8d1630035ed60f4c143047eb18cad1db9003ba05627741763e4d9eb55007a24b46e0451f5465a56b35a13b3ada10af87f967e7e51888aa7dc566bba5a76db059a2ce9b9d728513910be87a2fbeb090d6ff3c1bc8342b66d714e80344c6b328d8eac085840ede83ef1aa2afec064965db7971a196c8a4d9af673d0b78352a159b1527941c260d83662993799682156cedd44e941b77789018d7bae5ba742fb4def8e303f65fba06ea43f5bec0481b9dbbf7e86b57c5f54f21561109fa415b0b9d228ad8a33ecdb4ebfd3733e1539eb9dc710383e7999a9c79ed32ca8c246fd6fd84caaa53de7b1d6dbc5cdcd604bde67d99ff97f5cb664ceaa1f50ff7443365048222f1cf7db09f5b951e69b40980254d2182ce3de55da3039dafcebd759ba7e091e411e66b181a5336631863c86670d98f3fd235ae1b126e5b3b9b1f65cfe6b443e968dd44d49355362c03e8ddd2b816890aa08a93df6f6bfc69d8db6d92e6e9113e6b8aefc535ad9fd398a0476645204be39cb1fce70c21aa8694eb2aa295a1941667b4d3c24c1d011a6cdc4a13da7319546ad9a4d6fc5a1197e9484ab4d4614136078438b0e0cf46dba07dca4fc23934bc48d3ef958bd4ebd6e0752a0fa936c8e15da5ef4328fc5da1131b8a2d60e543583b90e683bf253f6a42943bb62ec6222d4ab8a6f6c6a73cb5fb3b1af11ea1c605aa40a4816d6dd7000fb713f97481605191e7a92a2f7644498ce106e07401951ea31e21ffc1503e11850b4ef59e8cd5d6cb3454efdafd9b6cd7e86c64bf3a7b472c1cf719fb09d679df59e4c03771f0e81bc7eee90405a812bd16012fbf319e16120f39208b99e66ea7af0a222e352cc91dff60932b839c3444e1964f7e76eccb43de02313b73eb2e88e8b7f9a19c009102f127a24241d2e5b17f0bca2a9f197c0b703d8e300183bcc0043a0a6d8d41a4f1dd6ec86808429bb7a7f8db9bc39d6cfe4bbf9f97f5b75a206720f328bd09ca4047b2638496878bc2e6ce9fdb22a86a88265ac8f2803959294845afc8760ce764619e69e9e8b8b900c4b9a8a3f314c648b221471fae5222607f6acfc01784da0c09fabb7bb16385d047d2b1a57c79dbb957ece84b75874e43ce4c127da69c7dc1e1ebd6dbce976202d899f8d21f9059be54cef169c82055e8fc48335233f525ab0a881477a756a34fd407db3dd17188ede72e3bd3b60aa809f159662441549fe58fbfc87c20a84012a13f2f6f4fc7eaf7035d03a6b9236af1ba8d3e20006b0eb1bef62c8471e70392514f28c330dbd2c6a10c3a009d7d6e05273ee27e6e8872595054d0e3662d8795ade6f210f697e22f85bcde2454622b67254aefb4ad0208e7ee00e53d27d94ffa67cd76136490a68c3d2ebe953f1d2c66ed8964317f39101f5be896d5f3aa9635636c2012d1da77c119389ac3fb7091f14b798e09e5291c4a816312065689f2902acf2cf904c3ddadeb9f86805798440b0a577be86e5dc771989b05e4a9269a69ddfbacf7c0fed80eb865ab0c1b38d9f63e9eb8cef44cdb12654b9598967e2b8103fd66e51849af665f9bf5724eb7666a63cd8c6cae33037087115da217ff878910e1dd77b96ff7ae077f8128aa423d4b6196cdbc4526832f5be327f132160b435e1f4c78ab57971bb8c8f1365aebb66d771186aab428f7aab59a004fa8b02a840646ee141c749a718270e06ac9c4c536afc005274dbfa5e18028d851b098b71d0d64b956a17845e6fa1f3c5928566228b2617f1224059397b3df70f06814de9b72b7b3f34afb44905cea189869b06a9a7f7dd9ad5486cc452fd1909316973839fa27154197422767fa110b17cda0aa69c11de7d9f2df0425505f241d17d35b3ac99a329e90d8d5eddc519d861e024fe2af7db42304a86339ad124f83c4c449aeafe742bbe3ba859d43bc6b33fac8ee9aebc3bd7e79e245a9610b07b6d5c497ae3d156308d679ec6b5d7f6cd339664355d5235f74143721e999ee5b4fb01c4515e56a78ed4caee4e7fe4d4ce011880ef78b9171707dd10291a3cd40988d0e3b8a75425f582c4d06eed8e16db64a50ba1bed7c7b3f78ac5a1a315aed111319e77665df2f54ff38a6a93e83cf91851b8a719a4b84c9b1b02a04ed1693be302be8b377db24bfee06cc44a3ede01e7dd629f5ca5536128bcd4494e52dcd8ec5f1560881619ed04546a65201fe05f50531fe5d74d9dbb243a03a0578df5e22e10dab123747315c7a995b31541ee4532a344a48c42dcba1d7a0f831d663379120a437b35ecf9095fd7c697c7247e64b0456c585282de137e50005070055b2b1bdfd69196a08ccc23247803148f79b5f4f29cf9205a8fdd166adfb84f6535405f9c3c01151721b2062ec35ea4f34fa66889a0283a4ae397d2a27b15a2383e5e36e3d1902e4e27689ca1d47623da94f8f5ff3689f47f1aefd9b2fbd8df0268385b5d1e9cafdbae4349f705a6199b27397534065491d338b747b7258028c568501b7806ee880d6b4302148dbd2cdde5cfe99e6995fc4fe85e8e8d5a171deb43d98ce985a204cb8795287164ed705d58887539b27f5c88698dc8ffb28368aea5fc69dbc4f0bb23e308d2a99873424a538767943365d73b65955520e310f10c51f4c7808dfbd007821169d1c31451bef0ba1418b4eb721287cf51cc9c1995e12eafcd23c90cfac3"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x110, 0xe, 0x0, 0x1, [{0x4}, {0x99, 0x0, "2acf302ad3a44fd48ca246c3dd6767e968c6194beae341e098bcc39bbd289e519f385ceb6b61528eee977824acac1f38d02e22d9c3faf7c39e47b7925c045ff45636f07cab40ed36b47b0c8cb8473a56831196ad15619f6bdba68f5574e959ed59d55d2e595fd75732f2bae066c3413ddca5fbdf6d0b7760776a6576bac372717e47ba86cd6761b56d2982f73bc7e46e9da0cccfe1"}, {0x6c, 0x0, "7aeec0209d1aa73a535533df2bd1db9ce708a4c18a928ada3c9d0218b7cdc4838a468fcd9396fbb9e4cde2ad738a94010d8de70a01f55879c0e4dea0e0bd7f36f707e5cf8157399ceda9bd0b306b5e4af0f528cf26016c5b4647c5f3f35321e1d7069d156702a13a"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0xe84}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 00:11:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x121a42) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x0, 0x8}], 0x18) 00:11:59 executing program 4: syz_clone(0xf038a480, 0x0, 0x5a593baf5daa38a0, 0x0, 0x0, 0x0) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) 00:11:59 executing program 2: pipe2(&(0x7f0000002300), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup/syz0\x00', 0x200002, 0x0) 00:11:59 executing program 3: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) 00:11:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x6, &(0x7f0000000080)="0fe20724", 0x4) 00:11:59 executing program 3: unshare(0x10000000) 00:12:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xa6010000, 0x0, 0x400000) 00:12:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) 00:12:00 executing program 3: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000440)={0x0, 0x0, 0xff}) 00:12:00 executing program 1: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000300)) delete_module(0x0, 0x0) 00:12:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x1e, 0x1}, 0x24}}, 0x0) 00:12:00 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 00:12:00 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 00:12:00 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5460, 0x0) 00:12:00 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xca9e}) 00:12:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x40c, 0x1}, 0x48) [ 720.290195][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 720.324694][T29890] binder: 29879:29890 ioctl 400c620e 20000440 returned -22 00:12:00 executing program 3: pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:12:00 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 00:12:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xb6010000, 0x0, 0x400000) 00:12:01 executing program 4: futex(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 00:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000002900)={0x1e84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x54, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x48, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5, 0xa, "b4"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x168, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x138, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x118, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x19, 0x0, "8101c1daff0d22e43c9e74397d96f3b0ceb585c5e9"}, @NL80211_BAND_2GHZ={0xdd, 0x0, "4e65a484a9960ad3d4ecf69375fd63aa7258b1d0a4a727b2ad8d17100a936076737276993fc2a63f6b962f7ac358c359e76017885be0c7502c9c15a291f602187a23ef03306f4d4e0436ec9d362edeb454b6d8b413f49392df6fca48b1b248ca646bf1fb460746c23907c78b6a6fc1bc22c70a301f39f219ae055e272a00b985109e2084482560ffb1301314fe94853724f2c38381f9eae418ed0b383a2c81ea329dc04f1133e9eaaf2fdd9c01283a6cf50b776f8af31b0cf6ee04a6a602c56a4310fcef72b65cfcef36f7cb36df35cb2342ba6ea868a913a0"}, @NL80211_BAND_5GHZ={0x15, 0x1, "e617c03c65629301c8f2396e57bdd6cd03"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1cac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1c9c, 0x4, 0x0, 0x1, [{0x1c98, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xf1, 0x1, "ca15255bfdd5de40aa476d93ae5d93f4a7c7e76ac04849a5aa069261c8251f40db4cdbeb836ccbcf6cba8ba775dc186b2c97c451a90b8a5dd9ecab92d898484eb37f8e69a0e942e0b1c517085e2a9e5863764a4fddc38ccca50558a7fea52c82f094eb85d033f276abffa2f933f9152e34d6ac15a952306a3626f36eeb2ddb558b474534f1b73375ad53fc311e090c2cc0a88d4af6950bdeb22fb527e20c422b5a71b0b245720270ddd27e147343d5b3b379f7223abaa588c936ce36a1e2f2e1ce7b0c35c262280ce190bb5fd0ccfd56517a3e47668a24dee5fd73ec07c895e467cf3e1137f716c7279878985f"}, @NL80211_PKTPAT_PATTERN={0x1001, 0x2, "6f403b9305a5f89061622978af9a97f59e358f0caa7c79ee681fb1a414327ee2117db5e4c403865f2c487a6cb085efd3d23b0d83e2e1c76da9c9d6e51fb0d77a0040ccd064fdff27adbd12534a72dfc11b94f03a631e044e31881159bef900cf640638751fff6976b3f9382ac777ebf2661ec2a81ed3cbeea85df23ee2f0bcbdd129a58ab3f6af0cad2922c8698c84739ae11c7ef057d9dc29225cd1097e3cb8439de56f0f1ff9293a2b65b2c23b4f55bd36df6bb4c5c602918a51bb7161e258870005630aa30636c756ac9d5d0f0f46f2e0b54b2100d361310314b765bb659fff29341bfcb06a483b884a6c8735366a30cae1aa67b6fd03b8079bc3cb2e482fc34ca65d639cdb1a845bad88f8dc4e5994c39fd5b3188b0f509dc78b0bb163892e0d8d4ce2777fa8849b846ea550d2c93feeec012c3a24d92bff4b16e32c2ac7118af3b1af9d5392463a7be564d2a6b1ea9d079033394aa47b8afbdcde95a4fcd053d494743905223efc9d36b5bccedf0f0e4da608ce5cfd6a5ac11f9588bf34971024550ae7f8ea2e84a9ce29665d878d3ee4313129d3c777dac0e71913970ed074cec810c8ef222bdca2ea3ba9687e98f563fc786e4998819da2b0019fffdc22633b3713b26af285821e3d404195d5cf33ffa75c3d9c1c64fb2d59b3066240b12806a8b90c2dafb7bd4b5aec56739814ad7c314d1bba7674fb30d7b67ecb4148e3fa96d149c3402f12794b7610a04a9fa11f2572d6dfb1cd37d4a5ab3297f3e15efa6d0b55fa7df11e18d4c1cd138b960f9d48abb3437dfed616c3b50bdaf6a824eb5fee3402b9bd93ce89281b24418f39226c4a0fb307d8251fb7cb977e15f126310c362bcaab06a402ab77758a433260607f10ed276e41f0a0b268339ee05cc5f312aa8e2d8846e4c671a5845c9270a5940736d154a1b30469c97e01e05dc85a0e482e305181848a2e0a59f8d4b2a3c1af31e6151721aa3c3661e43b78cc85d16a83fce1e4fd91bac86a27ed9265fae40b590adea1135077c0012dfdfe66ff75bdb39e0b494a4586c397e53779fd21cda7f7ff92e957d1138e54d9290eb736f91c8c504644f4a2daaef21305d48977284fae5b984c54cb81cdeaac5969284ba50529c8780ca70779d531b4ba7889d397a91b6ddfb72c8106d67d8f266d13b5ca2b9af916fb7f0549429df9eb750bc08acf5316ec38bac158579ab7704ae88d359785082529386285ae179419f112d990fbe524c13b1b48ce300e5cdaffb951bfad43f69095ac09c65e46033afddecf48c6204ccf68588891fbaa9ed04c6e1d635743a58a649adc2feace9c24b2cafbcfea428279d4cc0b7f660c9ffef5a5067756236bec37551d4872ec1db31a88dbd277735158df4f5752da5df3e7222a761f3a154002c9cf97fa45ea678a848ca4e3a6eedd72d3c124066edcaa7c464a72ef96b8c0eeb4153473fdcafe41a8a7ac9af694fb9adec691458baf9213e2f6ecb35f6261c68ad1d7eabe0e2b422e395b4b4d6167649571a235d3883717fa29b2d93f63289b8e6ee9cc60c3d403bf81c032fc78b5b48d707b3620f81cc52cbeeeba20a19dd92c67cd3aa4cdaa58bbea89ad5a095ce8d6f66f372a59492b0dd371d4fd073a1f3e2c3961a2f1dc706695c9ef0859f63a0e9482208a1351de30a503bba8b5544e8925ec571b23c5c311dba83fd0a15258913cc0fbe6b5651a3aa4f02ddc216d4d24da710d2bde822a42270566f66711935a7846bdfadb1fbc94774dcee422027ee125341ec47fe2507a92d00a2670e695a47cd301c4c3eb47e84de6b22cd51e2ef3584b5210c7d57f2fea0c21217cced7105f526ad5e106770d2d78171ef276e09770805ab0b39c2579dcdaf80d6a4102d9db4898ebeb0c2aa82dae18ffeb6db0afdaf866ccb8c0b1141cf75ad13ef612f26081782139ece3baf67bdcbf4dbffaa92f4b292934fef04ea4e63d697c39ea2ef8e89b2451271480078f8ed72382698fde704568df14c2b4e06a1af06be6f24bc03210de321849831b60f589026ff2ba13ddc5bd83ffc6e9f12fd30fbfa18c094a7e43f1d3930fab9f103fc5d8c67c91f4c26e127bcf572c1334ec1200e2a9686da8a11c87b881e494e7b2a9edf7a740643fa403fe161c9a63c014ee31f16ad76ab72fc863502ebe97f6274ecbfb4b2f80acbed060e89e12e31dd1f4af4ef3fbffd8b25eb0c6ca24356162458c69052d2da7c556f2952000e800f08a704b552fefc35ab7a39abf4feffb140d4d6c0ad270d58e82527690b64d115506dc5e4172d3e06643773506fc860b8d13912dab2726d47f42207a948a67907271bae79ec03b75d6d9bb48e0e63b5746a0cb42c4bb06e2a6aa5093554ddc52dcf03e8718da321343cda0f60fec67baa97e18067560358d93d3b335d7cb434e5d6e3fb6fc63354afebdda482c85d8ac5074ac99cef4d68422119b2b4ffa354c6b4922c19d72012becc85ca6dc2a9de732f44d2021d6a2ce4b92f8f71f17ad83ef0ca028063cc384c9b855dc46c29e1e69ca43807a90c3c1d2528e27620966d6c6c9a1248d87ef7c9374367a22420310f9f262fc73ce6c0d0390e0db08f22a9c58c9561fc47e73eba2a076af29984db7e5138dee2d7b640d88da99f415511ff92185f4e21187a67299526e9a5ede9d003d2b250b5299bd26f12e18f764f108a82d0ae1683d0a7991a961499788c1037eae64e79a7f0f4195258a76e0c1bcc13364b0e1ce1b9f049ecd92b67b3c83fcf451c85def37f2d398e0fc8d520b2be4c18be8742af9d6e2adaeccbf96f0cd461f0daa2d3a5f2caf5f7333bbca97d06b1616ccae96c7c6dd72a97338b0ac5689c3238ecc8b507be34694ccdd1e5abc94b8d79ddb3f6be109b2ad7daa417a3b78a20df27b93e2191988424cb71cc638f2712d286ccf89c50e07b2a5e69dd2011aa69c9f8f1db581495e8e0e438da73677ef23fad40c64e0770e298a4862bf9cd9dd4546c1fe5f29bd18eea0b693498c5862a61605f7c6973293d6eb2bc7b2ac484748ed803f1292336442f93a0dad41fc6ef5ec7a190751716f85a2f4e31b9a536aedb974e7966ab23ee89cf66a9771c1f4091fb03dca6fd29c4cc9253530b1b8d540b21deca08c75922020084731899451fb2e269e610bd339db5831944f923771d51c151f5220aa62f0cf465320585eb891c792ccfa9aa186382f7b9bb0d228b1b6e20f7252cda8831cfa078efd88a966b36216e466828f271335c3ec0ac2773d37f0a350a0a06e9c8660b3820dbd89d5104da878f6186418451c95e3a19fe543e6dac13ac3604a31194ed13598074e85f0be602d90b6ad3627eab420b7451ea9e4701af6e206aec2a02181687a6d20c9e9e66ec73a22ad87d0447dfd56e8abc12ce99680878a5805e564128dd019830f10e9110ec6020ec6d878745d4fb052f56058e8ede7745e7400667dfdd54636ab3444d838650a5654df5f4b1f02e528a707960eddb92e7c5b77e6bd3a874faada5b35952e7346fe0ee58fbb6725cf8ad27d213978381f31c567f44f9685573b647cb785532acbb254c33967ce1524d60d1d786211dc3b2fc710ae103d5871058d6198b02a12566c7616d2754312fa7dfb2f11524ed7391b7023a188cf17ef840225ab1b9d27834e1d6845f6a35053dd96803e8708a4a578d74b01e62db30db5fc1094718901a0d2f4a551fe7d8c22cb7114bc4ab1a873fc420304090fdd4bfef546bfb086d7ecb95b3f4b63fca3f20f2dbb647951e154aaf0d487604336495ad8ea98b8204596920baacb02e58eeac020afa006c68f10619dd51b051b93c6a075ef35644dcd5e8287fe49c93c9aaf237bf2f6433861232244f495f295ac5b47cfbd0d8dd475ecc25346a2ad70e7cf97f3c7dc74a8c1a7ab41081f9c68a9213d7fbef73a41caa98fb7685cd76b30d9c2281df09e1cbedc0a9bf0baa3ff40d718e02ccdb62d80afd77c9135e440ee114746407e8551b787e88c971f19a7cda74c792955b0b359ab73f6c85535d7614e60591f3bcb6dbdd2e63fecaf9917fbaf0c6e5e120b81a2462cb006c79d97ffdcbe6cde1f06c357aa24efeeace0fc0635887fd42ba1b034389b1077c6f114d1548835e6ea10512746883fbcf2ce70ba2cc8207a64dd706a456cf00c696a01e31c8c40b3abd37c808fc7ab597b019aeddc70b0de0fcd967d3d468888893bbc61b17084e60a2b47547b2023a980b143aaba790d6261bd7d5a0faaf2897293487d571c74b8548d155fcef1a7b759307e896bdfa7dcd9ea3baad06e83b97d7deb18fb179dd8a7e422b5281d8f1de559adb16685f76df62804261431e9fa3cdaa6e4687e20763aab705cfd0a4e624f6f6b9099eca27bd6adf898b696cd1c52863f765779c99a63cee8d38a71dbeb17ebbb2f9db2dd11a58ef6397026aa78537eae3cd2bc2ae7c123e7bdd20e3c5f1605f508056a20058f4a1819c3213bc163eff2f68431b790267979ea4fa8beb1009508035557ade0018837d57564f185b2961fc497c3485f016c8116e21db8f1f3961e0e98189cd42435d41d53836cfd57f98ebcb84e856d29c1760a797f498d919818075fa7b643969003340dd7606f0c7c5436b9e83472dbb29fd105ff7e7ae9b5ca91d730070c7174d2abf1d99b73ba3fbf694a8b8e47e29f7a4b0b6e439fbe9910b2b97007d23df4b18137af1cd8e722f35dd5e277edb02e8a284859267fecd186012c373c2e040f205c1e5150f10fbf573b278cb37ff07e6fa043f79fedb8bb2f61b3d738c0d5a498926242d937c3821b94f1c5d0cdafc14cd2430b17641c52be8655b3e9f79eeea496944e9f714457f307504caa9f8ae001a00250b85adb0abd9a42fd5a0d41dad2245e467014e6d7f75764af76e9ac6f4609bbb450a11eca92ced006215a6a830fc74293237f8e8b96fbcd05f7bbdbe88c7f42427218dd5400c4453723b00fd9f5aea589f6107ea66a6d90948da153e8b74abd4d93533d7d3781ffda62984f4c1de53df50ce8e4eb98e61e18e3b2dfeef462729c321775542c9cdafa6a9e15791cb79294f6cddb7afac1223d5611fd85482da15a599d8a2accaed6e244d8ab2d8899d33be29813354fdd1ea0f090bb196eee4dc609aa218e49c21acf688c692b28400fc6b01c6aa4d32b7950b0dfa4f859c1b0f25fbe9170338219e933c6f6b4e760042d05533ec2372705762924a30e4ba2a0e3b0efe1afe78df3f3c7804d8378b836d06c0ae11b8015140b98bddc29ad5d953a3187ffa206940a41c01c77a2a9b630652da41fcd06658bfbeee27e5240e1d57ef23a8484939b65ee0a8605f30150a07d04d508d04a84f5fdc84a2a88c44457643af7a687a9c0c43e748f298bbd2daeaed246e95d41ce4447396405d062ff02f5e6007f03fa31febaec08e7b40b48e6df998a100311e5eb5f68935f8c839636dc218866f4825969d981eda101b9560502ca651adf6186960b541f8b4aff8d9952b5cb4dddc7270e25ad62058ec460c8e939c3eae0f7934ea9174b2ce47734ae52656fb67b578d9c8023edd456799171cccb46e185ce086490d6e3f480dc30ba2aadf225c5c3635f41a42e33c46a69f4f1d4c0ae38ea0f19a772b7febd23bcafd6be25c5117d34ed4ccb6e6175bc0f9f6f72f4091b36f85ada0f70ddc374ecc147ca49f7de535b1874f38cd123e8d53075f03692788be4e70f8e9467079404a058d8e0e0c66b8d824f0a0924fdac238bc77821ce9ede0e6f3b2721ff6f9478e2ff50f0107c2b12d566a2a3e81498a4922575748b15fe"}, @NL80211_PKTPAT_PATTERN={0xb99, 0x2, "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"}]}]}]}]}, 0x1e84}}, 0x0) 00:12:01 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000001780)=""/75, 0x4b}, {&(0x7f0000000340)=""/86, 0x56}], 0x3, &(0x7f0000000600)=[{&(0x7f0000000700)=""/122, 0x7a}], 0x1, 0x0) 00:12:01 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 00:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x10, 0x10}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) 00:12:01 executing program 3: futex(0x0, 0xa, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x1) 00:12:01 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 00:12:01 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x2}}, {}]}}]}}]}}, 0x0) 00:12:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:12:01 executing program 1: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x9}, {&(0x7f0000000240)='U', 0x1}], 0x0, 0x0) 00:12:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x65, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0xa, "fbf782e44af14a58"}, {0x0, 0xa, "f53e4afe904930c9"}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@empty}, {@private}]}]}}}}}) 00:12:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xb9010000, 0x0, 0x400000) 00:12:01 executing program 2: socket(0x0, 0x8000b, 0x0) 00:12:01 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 00:12:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:12:01 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000c00)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 00:12:01 executing program 2: socketpair(0x10, 0x0, 0xffff, &(0x7f0000000000)) 00:12:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002900)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x54, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x48, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x5, 0xa, "b4"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5e1}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x168, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x1, 0x6}}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x138, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x118, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1b, 0x0, "8101c1daff0d22e43c9e74397d96f3b0ceb585c5e99e84"}, @NL80211_BAND_2GHZ={0xdf, 0x0, "4e65a484a9960ad3d4ecf69375fd63aa7258b1d0a4a727b2ad8d17100a936076737276993fc2a63f6b962f7ac358c359e76017885be0c7502c9c15a291f602187a23ef03306f4d4e0436ec9d362edeb454b6d8b413f49392df6fca48b1b248ca646bf1fb460746c23907c78b6a6fc1bc22c70a301f39f219ae055e272a00b985109e2084482560ffb1301314fe94853724f2c38381f9eae418ed0b383a2c81ea329dc04f1133e9eaaf2fdd9c01283a6cf50b776f8af31b0cf6ee04a6a602c56a4310fcef72b65cfcef36f7cb36df35cb2342ba6ea868a913a06826"}, @NL80211_BAND_5GHZ={0x17, 0x1, "e617c03c65629301c8f2396e57bdd6cd032f96"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x84}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xcac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xc9c, 0x4, 0x0, 0x1, [{0xc98, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xf4, 0x1, "ca15255bfdd5de40aa476d93ae5d93f4a7c7e76ac04849a5aa069261c8251f40db4cdbeb836ccbcf6cba8ba775dc186b2c97c451a90b8a5dd9ecab92d898484eb37f8e69a0e942e0b1c517085e2a9e5863764a4fddc38ccca50558a7fea52c82f094eb85d033f276abffa2f933f9152e34d6ac15a952306a3626f36eeb2ddb558b474534f1b73375ad53fc311e090c2cc0a88d4af6950bdeb22fb527e20c422b5a71b0b245720270ddd27e147343d5b3b379f7223abaa588c936ce36a1e2f2e1ce7b0c35c262280ce190bb5fd0ccfd56517a3e47668a24dee5fd73ec07c895e467cf3e1137f716c7279878985f15b345"}, @NL80211_PKTPAT_PATTERN={0xb9e, 0x2, "6f403b9305a5f89061622978af9a97f59e358f0caa7c79ee681fb1a414327ee2117db5e4c403865f2c487a6cb085efd3d23b0d83e2e1c76da9c9d6e51fb0d77a0040ccd064fdff27adbd12534a72dfc11b94f03a631e044e31881159bef900cf640638751fff6976b3f9382ac777ebf2661ec2a81ed3cbeea85df23ee2f0bcbdd129a58ab3f6af0cad2922c8698c84739ae11c7ef057d9dc29225cd1097e3cb8439de56f0f1ff9293a2b65b2c23b4f55bd36df6bb4c5c602918a51bb7161e258870005630aa30636c756ac9d5d0f0f46f2e0b54b2100d361310314b765bb659fff29341bfcb06a483b884a6c8735366a30cae1aa67b6fd03b8079bc3cb2e482fc34ca65d639cdb1a845bad88f8dc4e5994c39fd5b3188b0f509dc78b0bb163892e0d8d4ce2777fa8849b846ea550d2c93feeec012c3a24d92bff4b16e32c2ac7118af3b1af9d5392463a7be564d2a6b1ea9d079033394aa47b8afbdcde95a4fcd053d494743905223efc9d36b5bccedf0f0e4da608ce5cfd6a5ac11f9588bf34971024550ae7f8ea2e84a9ce29665d878d3ee4313129d3c777dac0e71913970ed074cec810c8ef222bdca2ea3ba9687e98f563fc786e4998819da2b0019fffdc22633b3713b26af285821e3d404195d5cf33ffa75c3d9c1c64fb2d59b3066240b12806a8b90c2dafb7bd4b5aec56739814ad7c314d1bba7674fb30d7b67ecb4148e3fa96d149c3402f12794b7610a04a9fa11f2572d6dfb1cd37d4a5ab3297f3e15efa6d0b55fa7df11e18d4c1cd138b960f9d48abb3437dfed616c3b50bdaf6a824eb5fee3402b9bd93ce89281b24418f39226c4a0fb307d8251fb7cb977e15f126310c362bcaab06a402ab77758a433260607f10ed276e41f0a0b268339ee05cc5f312aa8e2d8846e4c671a5845c9270a5940736d154a1b30469c97e01e05dc85a0e482e305181848a2e0a59f8d4b2a3c1af31e6151721aa3c3661e43b78cc85d16a83fce1e4fd91bac86a27ed9265fae40b590adea1135077c0012dfdfe66ff75bdb39e0b494a4586c397e53779fd21cda7f7ff92e957d1138e54d9290eb736f91c8c504644f4a2daaef21305d48977284fae5b984c54cb81cdeaac5969284ba50529c8780ca70779d531b4ba7889d397a91b6ddfb72c8106d67d8f266d13b5ca2b9af916fb7f0549429df9eb750bc08acf5316ec38bac158579ab7704ae88d359785082529386285ae179419f112d990fbe524c13b1b48ce300e5cdaffb951bfad43f69095ac09c65e46033afddecf48c6204ccf68588891fbaa9ed04c6e1d635743a58a649adc2feace9c24b2cafbcfea428279d4cc0b7f660c9ffef5a5067756236bec37551d4872ec1db31a88dbd277735158df4f5752da5df3e7222a761f3a154002c9cf97fa45ea678a848ca4e3a6eedd72d3c124066edcaa7c464a72ef96b8c0eeb4153473fdcafe41a8a7ac9af694fb9adec691458baf9213e2f6ecb35f6261c68ad1d7eabe0e2b422e395b4b4d6167649571a235d3883717fa29b2d93f63289b8e6ee9cc60c3d403bf81c032fc78b5b48d707b3620f81cc52cbeeeba20a19dd92c67cd3aa4cdaa58bbea89ad5a095ce8d6f66f372a59492b0dd371d4fd073a1f3e2c3961a2f1dc706695c9ef0859f63a0e9482208a1351de30a503bba8b5544e8925ec571b23c5c311dba83fd0a15258913cc0fbe6b5651a3aa4f02ddc216d4d24da710d2bde822a42270566f66711935a7846bdfadb1fbc94774dcee422027ee125341ec47fe2507a92d00a2670e695a47cd301c4c3eb47e84de6b22cd51e2ef3584b5210c7d57f2fea0c21217cced7105f526ad5e106770d2d78171ef276e09770805ab0b39c2579dcdaf80d6a4102d9db4898ebeb0c2aa82dae18ffeb6db0afdaf866ccb8c0b1141cf75ad13ef612f26081782139ece3baf67bdcbf4dbffaa92f4b292934fef04ea4e63d697c39ea2ef8e89b2451271480078f8ed72382698fde704568df14c2b4e06a1af06be6f24bc03210de321849831b60f589026ff2ba13ddc5bd83ffc6e9f12fd30fbfa18c094a7e43f1d3930fab9f103fc5d8c67c91f4c26e127bcf572c1334ec1200e2a9686da8a11c87b881e494e7b2a9edf7a740643fa403fe161c9a63c014ee31f16ad76ab72fc863502ebe97f6274ecbfb4b2f80acbed060e89e12e31dd1f4af4ef3fbffd8b25eb0c6ca24356162458c69052d2da7c556f2952000e800f08a704b552fefc35ab7a39abf4feffb140d4d6c0ad270d58e82527690b64d115506dc5e4172d3e06643773506fc860b8d13912dab2726d47f42207a948a67907271bae79ec03b75d6d9bb48e0e63b5746a0cb42c4bb06e2a6aa5093554ddc52dcf03e8718da321343cda0f60fec67baa97e18067560358d93d3b335d7cb434e5d6e3fb6fc63354afebdda482c85d8ac5074ac99cef4d68422119b2b4ffa354c6b4922c19d72012becc85ca6dc2a9de732f44d2021d6a2ce4b92f8f71f17ad83ef0ca028063cc384c9b855dc46c29e1e69ca43807a90c3c1d2528e27620966d6c6c9a1248d87ef7c9374367a22420310f9f262fc73ce6c0d0390e0db08f22a9c58c9561fc47e73eba2a076af29984db7e5138dee2d7b640d88da99f415511ff92185f4e21187a67299526e9a5ede9d003d2b250b5299bd26f12e18f764f108a82d0ae1683d0a7991a961499788c1037eae64e79a7f0f4195258a76e0c1bcc13364b0e1ce1b9f049ecd92b67b3c83fcf451c85def37f2d398e0fc8d520b2be4c18be8742af9d6e2adaeccbf96f0cd461f0daa2d3a5f2caf5f7333bbca97d06b1616ccae96c7c6dd72a97338b0ac5689c3238ecc8b507be34694ccdd1e5abc94b8d79ddb3f6be109b2ad7daa417a3b78a20df27b93e2191988424cb71cc638f2712d286ccf89c50e07b2a5e69dd2011aa69c9f8f1db581495e8e0e438da73677ef23fad40c64e0770e298a4862bf9cd9dd4546c1fe5f29bd18eea0b693498c5862a61605f7c6973293d6eb2bc7b2ac484748ed803f1292336442f93a0dad41fc6ef5ec7a190751716f85a2f4e31b9a536aedb974e7966ab23ee89cf66a9771c1f4091fb03dca6fd29c4cc9253530b1b8d540b21deca08c75922020084731899451fb2e269e610bd339db5831944f923771d51c151f5220aa62f0cf465320585eb891c792ccfa9aa186382f7b9bb0d228b1b6e20f7252cda8831cfa078efd88a966b36216e466828f271335c3ec0ac2773d37f0a350a0a06e9c8660b3820dbd89d5104da878f6186418451c95e3a19fe543e6dac13ac3604a31194ed13598074e85f0be602d90b6ad3627eab420b7451ea9e4701af6e206aec2a02181687a6d20c9e9e66ec73a22ad87d0447dfd56e8abc12ce99680878a5805e564128dd019830f10e9110ec6020ec6d878745d4fb052f56058e8ede7745e7400667dfdd54636ab3444d838650a5654df5f4b1f02e528a707960eddb92e7c5b77e6bd3a874faada5b35952e7346fe0ee58fbb6725cf8ad27d213978381f31c567f44f9685573b647cb785532acbb254c33967ce1524d60d1d786211dc3b2fc710ae103d5871058d6198b02a12566c7616d2754312fa7dfb2f11524ed7391b7023a188cf17ef840225ab1b9d27834e1d6845f6a35053dd96803e8708a4a578d74b01e62db30db5fc1094718901a0d2f4a551fe7d8c22cb7114bc4ab1a873fc420304090fdd4bfef546bfb086d7ecb95b3f4b63fca3f20f2dbb647951e154aaf0d487604336495ad8ea98b8204596920baacb02e58eeac020afa006c68f10619dd51b051b93c6a075ef35644dcd5e8287fe49c93c9aaf237bf2f6433861232244f495f295ac5b47cfbd0d8dd475ecc25346a2ad70e7cf97f3c7dc74a8c1a7ab41081f9c68a9213d7fbef73a41caa98fb7685cd76b30d9c2281df09e1cbedc0a9bf0baa3ff40d718e02ccdb62d80afd77c9135e440ee114746407e8551b787e88c971f19a7cda74c792955b0b359ab73f6c85535d7614e60591f3bcb6dbdd2e63fecaf9917fbaf0c6e5e120b81a2462cb006c79d97ffdcbe6cde1f06c357aa24efeeace0fc0635887fd42ba1b034389b1077c6f114d1548835e6ea10512746883fbcf2ce70ba2cc8207a64dd706a456cf00c696a01e31c8c40b3abd37c808fc7ab597b019aeddc70b0de0fcd967d3d468888"}]}]}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x90}, 0x240048c0) 00:12:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 00:12:01 executing program 5: r0 = gettid() syz_open_procfs$namespace(0x0, 0x0) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1c1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x17c, 0x0) 00:12:01 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xb704, 0x0) 00:12:01 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) 00:12:01 executing program 1: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)="cfb50c083c57b2fafd4199e062893165d517ac977c9d768e958e42e2b61a9d3b24f946d964f468f27849dcbf1cf08911020170eac87514e388439ad07d9b15a97b0a6f62679637879f845f9eb1849ba81cdec00df9a6daf11fccf29450f0e6a46ba769d0936a9cecb1f6a8c7885f659f3c196d44f92ab744a9278d3647fd4395c5d5aaa25f061817efa7c104cc6ac395a862d9cca4190e0fc573f8fe3bfcde534aab7d0357a033ecd73eb145f7025f7a126649cbd650c31de8d0a683080ae002ddd4d2772db571ef821628e82b8000d0bf9e65b9123b0e76c1da6ffa7842cba32c78f1800007ec29b90ed9d0536fe5e0c993", 0xffffff14) 00:12:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xda010000, 0x0, 0x400000) 00:12:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 00:12:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)) 00:12:02 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:12:02 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:12:02 executing program 5: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xca9e}) 00:12:02 executing program 1: futex(&(0x7f0000000000), 0xa, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x1) 00:12:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:02 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x18b, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x10, r1, 0x0) 00:12:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00000000c0), 0x0) 00:12:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 00:12:02 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 722.714885][T14069] usb 3-1: new high-speed USB device number 32 using dummy_hcd 00:12:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xe5010000, 0x0, 0x400000) 00:12:02 executing program 1: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 00:12:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 00:12:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 00:12:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 00:12:02 executing program 4: r0 = socket(0xa, 0x3, 0x6) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) 00:12:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/164) 00:12:02 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) 00:12:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0189436, 0x0) 00:12:02 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891a, 0x0) 00:12:02 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x18b, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0xffffffffffffffff) [ 722.955383][T14069] usb 3-1: Using ep0 maxpacket: 8 [ 723.075028][T14069] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 723.334975][T14069] usb 3-1: string descriptor 0 read error: -22 [ 723.341532][T14069] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.351218][T14069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.395596][T14069] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 723.601237][ T14] usb 3-1: USB disconnect, device number 32 00:12:04 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 00:12:04 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000100)) 00:12:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80084503, 0x0) 00:12:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x9, 0x2}, 0xe) 00:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xf0010000, 0x0, 0x400000) 00:12:04 executing program 1: r0 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) 00:12:04 executing program 3: sigaltstack(&(0x7f0000000080)={0x0, 0x3}, 0x0) 00:12:04 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 00:12:04 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0), 0x7ff, 0x1d1040) 00:12:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x200040, &(0x7f0000000140)=ANY=[]) syz_mount_image$f2fs(0x0, 0x0, 0x4, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000100)="8fa2", 0x2, 0x9}, {&(0x7f0000000240)="55e700e8c8bf0b39d5f39af0b3f5a6205893f2a0f38a2e7f9a2a1b827bea2c1ba9962c7fb0b0e0d57a5f62395a9d4288107a67d31c57667b19456238352ac3ca6f13b30d8c2c958dc4a37a8eee87b79e", 0x50}], 0x2000400, &(0x7f0000000300)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 00:12:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 00:12:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x5, &(0x7f0000000500)=[{0x5}, {}, {0x8}, {}, {}]}) 00:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x10, 0x10, 0x0, 0x3f}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) 00:12:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x10000, 0xffffff72, 0x7280000}, 0x1c) 00:12:04 executing program 4: socketpair(0x28, 0x0, 0x80, &(0x7f0000000000)) [ 724.262467][T30026] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 00:12:04 executing program 3: clock_adjtime(0x0, &(0x7f00000002c0)={0x5}) [ 724.304915][T30026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 724.324983][T30026] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.371967][T30026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 00:12:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xf5010000, 0x0, 0x400000) 00:12:04 executing program 4: getresgid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)) 00:12:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, 0x0) 00:12:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 00:12:04 executing program 5: syz_clone(0x40020000, &(0x7f00000028c0)="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", 0xeeb, 0x0, 0x0, 0x0) 00:12:04 executing program 1: socket$inet(0x2, 0x1, 0x887) 00:12:04 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0xc0189436, &(0x7f0000000140)=""/68) 00:12:04 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 00:12:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 00:12:04 executing program 4: syz_clone(0xf038a480, 0x0, 0x5a593baf5daa38a0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) 00:12:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f00000000c0)) 00:12:04 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) [ 724.954859][T14069] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 725.124841][ T14] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 725.214951][T14069] usb 4-1: Using ep0 maxpacket: 8 00:12:05 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0) 00:12:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40084503, 0x0) 00:12:05 executing program 4: syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) [ 725.338006][T14069] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 725.348624][T14069] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 725.362299][T14069] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.372674][T14069] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 725.374857][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 725.505053][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 725.515663][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 725.526988][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.556524][T14069] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.566231][T14069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.574599][T14069] usb 4-1: Product: syz [ 725.581863][T14069] usb 4-1: Manufacturer: syz [ 725.587023][T14069] usb 4-1: SerialNumber: syz [ 725.625897][T14069] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 725.704897][ T14] usb 3-1: New USB device found, idVendor=05c6, idProduct=9053, bcdDevice=75.71 [ 725.713981][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.722036][ T14] usb 3-1: Product: syz [ 725.726340][ T14] usb 3-1: Manufacturer: syz [ 725.730955][ T14] usb 3-1: SerialNumber: syz [ 725.742463][ T14] usb 3-1: config 0 descriptor?? [ 725.829918][ T14] usb 4-1: USB disconnect, device number 20 [ 725.989358][ T3684] usb 3-1: USB disconnect, device number 33 00:12:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) 00:12:06 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0) 00:12:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x40000000000000, 0x0, 0x400000) 00:12:06 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 00:12:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') 00:12:06 executing program 4: syz_clone(0x42008000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)="637fa47f7f809da488a33125a4734100f4578dba11c95d586b981cc6f4d1") 00:12:06 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0) 00:12:06 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89e1, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:12:06 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) 00:12:06 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0) 00:12:06 executing program 3: socketpair(0xf, 0x3, 0x0, &(0x7f0000000340)) 00:12:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40104593, &(0x7f0000000140)=""/97) 00:12:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x121a42) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0xe}], 0x18) 00:12:06 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 726.814997][T10426] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 727.084889][T10426] usb 3-1: Using ep0 maxpacket: 32 00:12:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x100000000000000, 0x0, 0x400000) 00:12:07 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x165b80) 00:12:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x300}, 0x0) 00:12:07 executing program 1: socketpair(0x0, 0x404, 0x0, 0x0) 00:12:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f00000021c0)=[{0x1}, {0x16}]}) [ 727.204956][T10426] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 727.221291][T10426] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 727.237391][T10426] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 00:12:07 executing program 4: r0 = socket(0x2, 0x3, 0x2) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 727.297197][ T27] audit: type=1326 audit(727.311:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30110 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feba0889279 code=0x0 [ 727.415232][T10426] usb 3-1: New USB device found, idVendor=05c6, idProduct=9053, bcdDevice=75.71 [ 727.451291][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.478258][T10426] usb 3-1: Product: syz [ 727.486897][T10426] usb 3-1: Manufacturer: syz [ 727.491672][T10426] usb 3-1: SerialNumber: syz [ 727.500630][T10426] usb 3-1: config 0 descriptor?? [ 727.778277][T10426] usb 3-1: USB disconnect, device number 34 00:12:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x200000000000000, 0x0, 0x400000) 00:12:08 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) 00:12:08 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, 0x0) 00:12:08 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001}) 00:12:08 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x10) pipe(&(0x7f0000000080)) 00:12:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1355, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:08 executing program 4: rt_sigaction(0x2c, &(0x7f00000000c0)={&(0x7f0000000040)="660f38213ade0d51f5bf92662e3e660f2f9300000000c4a36148cf86c4e231b6b98c0000004b0fae36881480470fef1b43df03c4e2499314a0", 0x0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 00:12:08 executing program 1: process_vm_readv(0x0, &(0x7f0000001980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffd}], 0x9, 0x0, 0x0, 0x0) 00:12:08 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, 0x0) 00:12:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1006}, 0x4) 00:12:08 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 00:12:08 executing program 4: syz_open_dev$usbfs(&(0x7f0000000080), 0x32e, 0x4000) [ 728.664872][T10426] usb 3-1: new high-speed USB device number 35 using dummy_hcd 00:12:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x600000000000000, 0x0, 0x400000) [ 728.906000][T10426] usb 3-1: Using ep0 maxpacket: 32 [ 729.025017][T10426] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 729.035974][T10426] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 729.048918][T10426] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.214960][T10426] usb 3-1: New USB device found, idVendor=05c6, idProduct=9053, bcdDevice=75.71 [ 729.224244][T10426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.232511][T10426] usb 3-1: Product: syz [ 729.237007][T10426] usb 3-1: Manufacturer: syz [ 729.241713][T10426] usb 3-1: SerialNumber: syz [ 729.247694][T10426] usb 3-1: config 0 descriptor?? [ 729.505329][ T3684] usb 3-1: USB disconnect, device number 35 00:12:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x54, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0x8, "16fe97b31b0b"}, {0x0, 0x3, '@'}, {0x0, 0x5, "fbf782"}]}]}}}}}) ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f00000002c0)=[0x0, 0xdd4]) 00:12:10 executing program 1: socketpair(0x1e, 0x0, 0xfffffffc, &(0x7f0000000040)) 00:12:10 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "586148fa8ad2f4"}]}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 00:12:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)) 00:12:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x700000000000000, 0x0, 0x400000) 00:12:10 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6d, 0x57, 0xa5, 0x20, 0x5c6, 0x9053, 0x7571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x39, 0x10, 0x51, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) 00:12:10 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)) 00:12:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 00:12:10 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18}, 0x18) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@dsss={0x3, 0x1}]}]}, 0x24}}, 0x0) 00:12:10 executing program 3: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000040)) socketpair(0x3, 0x80000, 0x0, &(0x7f0000000180)) 00:12:10 executing program 4: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="8f", 0x1}], 0x0, 0x0) 00:12:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000240)={0x35, 0x0, 0x0}) 00:12:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 730.314881][ T3684] usb 3-1: new high-speed USB device number 36 using dummy_hcd 00:12:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x48) 00:12:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)="ba2bc970a2187a641f"}) [ 730.574872][ T3684] usb 3-1: Using ep0 maxpacket: 32 00:12:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x800000000000000, 0x0, 0x400000) [ 730.704908][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 730.721643][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 730.742369][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.924930][ T3684] usb 3-1: New USB device found, idVendor=05c6, idProduct=9053, bcdDevice=75.71 [ 730.934301][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.942372][ T3684] usb 3-1: Product: syz [ 730.946739][ T3684] usb 3-1: Manufacturer: syz [ 730.951535][ T3684] usb 3-1: SerialNumber: syz [ 730.957281][ T3684] usb 3-1: config 0 descriptor?? [ 731.211981][ T3684] usb 3-1: USB disconnect, device number 36 00:12:11 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff]) 00:12:11 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xb702, 0x0) 00:12:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:12:11 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000480)=""/242, 0xf2}], 0x2, &(0x7f0000002a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x0) 00:12:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0xc00000000000000, 0x0, 0x400000) 00:12:11 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000140)=@nl=@proc, 0x80) 00:12:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 00:12:11 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0xc0189436, &(0x7f0000001100)=""/93) 00:12:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000001240)={0x1f, 0x0, @fixed, 0xfff, 0x2}, 0xe) 00:12:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000300)=@string={0x2}}]}) 00:12:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x4, 0x11a}]}, 0x20}}, 0x0) 00:12:11 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="42eb558a817d", @empty, @val={@void}, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x0, 0x6, "6396bf", 0x14, 0x6, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@remote, @broadcast, @val={@void, {0x8100, 0x7}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "217e49d3f6ea3410"}}}}, 0x0) 00:12:11 executing program 4: clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) 00:12:11 executing program 1: pipe2$9p(0x0, 0xc4000) 00:12:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x20) 00:12:12 executing program 1: socket$inet6(0x2c, 0x0, 0x0) [ 731.947279][T30210] netlink: 'syz-executor.2': attribute type 282 has an invalid length. [ 732.134989][ T3689] usb 4-1: new high-speed USB device number 21 using dummy_hcd 00:12:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1200000000000000, 0x0, 0x400000) 00:12:12 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) pipe(&(0x7f0000000080)) 00:12:12 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000180)) 00:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {@with_ht={{{}, {}, @device_b, @device_b}}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x64}}, 0x0) 00:12:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) [ 732.374946][ T3689] usb 4-1: Using ep0 maxpacket: 8 [ 732.494903][ T3689] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 732.546690][ T3689] usb 4-1: language id specifier not provided by device, defaulting to English [ 732.695065][ T3689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.704146][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.712187][ T3689] usb 4-1: Product: syz [ 732.716414][ T3689] usb 4-1: Manufacturer: syz [ 732.721023][ T3689] usb 4-1: SerialNumber: syz [ 732.766911][ T3689] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 732.969711][T14069] usb 4-1: USB disconnect, device number 21 00:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) 00:12:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x5}]]}, 0x38}}, 0x0) 00:12:13 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7628ff", 0x44, 0x2f, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, 0x0) 00:12:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1800000000000000, 0x0, 0x400000) 00:12:13 executing program 4: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:12:13 executing program 2: rt_sigreturn() syz_open_dev$mouse(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:12:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 00:12:13 executing program 1: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="8f", 0x1, 0x9}], 0x0, 0x0) 00:12:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, 0x0) 00:12:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) 00:12:13 executing program 2: syz_clone(0x8028000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'syzkaller0\x00'}) 00:12:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/34) 00:12:13 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 00:12:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:12:13 executing program 2: socket(0x2, 0xa, 0x0) socket(0x2, 0xa, 0x0) 00:12:13 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe2400, 0x0) 00:12:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1d02000000000000, 0x0, 0x400000) 00:12:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x433, @any, 0x7}, 0xe) 00:12:14 executing program 5: getcwd(&(0x7f0000000280)=""/109, 0x6d) 00:12:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x40c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 00:12:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:12:14 executing program 3: setpriority(0x2, 0x0, 0x8000000000000001) 00:12:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_ext_scan_params={{0x2041, 0x3}}}, 0x7) 00:12:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000001240)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 00:12:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8940, 0x0) 00:12:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x3, 0x0, 0x0) 00:12:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, r0) 00:12:14 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000004c0)) 00:12:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e00000000000000, 0x0, 0x400000) 00:12:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "2736355671a3cfca", "94b4ea3e4579d64236913eb138532e47", "09cad38d", "2433e6c31ce1287c"}, 0x28) 00:12:14 executing program 4: r0 = gettid() process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x181, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) 00:12:14 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 00:12:14 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:12:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:12:14 executing program 5: syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x450401) 00:12:14 executing program 5: pipe2(&(0x7f0000002300)={0xffffffffffffffff}, 0x0) getpeername$inet6(r0, 0x0, 0x0) 00:12:14 executing program 2: r0 = gettid() syz_open_procfs$namespace(0x0, 0x0) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/161, 0x7ffff000}], 0x1, 0x0) 00:12:14 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89e0, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:12:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80284504, &(0x7f0000000140)=""/97) 00:12:14 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) syz_clone(0x40020000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x0}) 00:12:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1e02000000000000, 0x0, 0x400000) 00:12:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x5452, &(0x7f0000000140)=""/97) 00:12:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) 00:12:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/58) 00:12:15 executing program 4: syz_mount_image$f2fs(0x0, 0x0, 0x8000000000000000, 0x0, &(0x7f0000000080), 0x200040, &(0x7f0000000140)=ANY=[@ANYBLOB]) syz_mount_image$f2fs(&(0x7f0000000080), 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="55e700e8c8bf0b39d5f39af0b3f5a6205893f2a0f38a2e7f9a2a1b827bea2c1ba9962c7fb0b0e0d57a5f", 0x2a}], 0x0, &(0x7f0000000300)={[{@fsync_mode_strict}], [{@smackfsdef={'smackfsdef', 0x3d, 'f2fs\x00'}}, {@obj_role={'obj_role', 0x3d, '[:\'-(@'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 00:12:15 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89e1, 0x0) 00:12:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000140)) 00:12:15 executing program 5: getgroups(0x1, &(0x7f0000002500)=[0x0]) 00:12:15 executing program 1: syz_clone(0x4021000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 735.244042][T30330] loop4: detected capacity change from 0 to 264192 00:12:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) 00:12:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000200)) 00:12:15 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) syz_clone(0x40020000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x0}) 00:12:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x1f00000000000000, 0x0, 0x400000) 00:12:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000300)={0x7}, 0x7) 00:12:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 00:12:16 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x5452, &(0x7f0000001100)=""/93) 00:12:16 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 00:12:16 executing program 1: rt_sigaction(0x15, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 00:12:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000340)) r1 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) 00:12:16 executing program 4: socket(0xa, 0x2, 0x6) 00:12:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 00:12:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000080)="06"}) 00:12:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, r1, 0x1355, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:12:16 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/107, 0x6b) 00:12:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2000000000000000, 0x0, 0x400000) 00:12:16 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 00:12:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8981, 0x0) 00:12:16 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) syz_clone(0x40020000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x0}) 00:12:16 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, &(0x7f0000000080), 0x10) 00:12:16 executing program 1: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 00:12:16 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8982, 0x0) 00:12:16 executing program 2: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x4, &(0x7f00000013c0)=[{&(0x7f00000000c0)='u', 0x1}, {&(0x7f0000000180)="fa", 0x1}, {&(0x7f00000001c0)='w', 0x1}, {&(0x7f0000000300)='(a', 0x2, 0xffffffffffffffff}], 0x0, 0x0) 00:12:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000480)) 00:12:17 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108907, 0x0) 00:12:17 executing program 1: pkey_mprotect(&(0x7f0000eec000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000d0b000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) [ 736.998743][T30393] loop2: detected capacity change from 0 to 16383 00:12:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) 00:12:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2207000000000000, 0x0, 0x400000) 00:12:17 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8901, 0x0) 00:12:17 executing program 5: r0 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) 00:12:17 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) syz_clone(0x40020000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x0}) 00:12:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2400000000000000, 0x0, 0x400000) 00:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000440)={0x0, 0x1, 0xff}) 00:12:17 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f0000000180)) 00:12:17 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) 00:12:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x4}) 00:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x901, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:12:17 executing program 1: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) pipe2$9p(&(0x7f0000000540), 0x80000) 00:12:17 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="ed", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x7fffef38, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/200, 0xc8}], 0x300, 0x0, 0x2}, 0x0) [ 737.838351][T30423] binder: 30421:30423 ioctl 400c620e 20000440 returned -22 00:12:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, @sadb_lifetime={0x4, 0x3}]}, 0x68}}, 0x0) 00:12:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044581, 0x0) 00:12:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x10, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x28}}, 0x0) 00:12:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0x10000000) ioctl$EVIOCGMTSLOTS(r0, 0x5421, &(0x7f0000001100)=""/93) 00:12:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:12:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0x5, "fbf782"}]}]}}}}}) ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f00000002c0)=[0x0, 0xdd4]) 00:12:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/210) 00:12:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2602000000000000, 0x0, 0x400000) 00:12:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0x5, "fbf782"}]}]}}}}}) ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f00000002c0)=[0x0, 0xdd4]) 00:12:18 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') 00:12:18 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), 0xffffffffffffffff) 00:12:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) 00:12:18 executing program 3: getgroups(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x81, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x21c5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x6, 0x6}, @mdlm={0x15}, @mdlm={0x15}, @mdlm_detail={0x6, 0x24, 0x13, 0x2, "e84e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x12}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfce8442652aad5a5, 0x4}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) setgroups(0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]) 00:12:18 executing program 5: r0 = syz_clone(0x10082100, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) 00:12:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0x5, "fbf782"}]}]}}}}}) ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f00000002c0)=[0x0, 0xdd4]) 00:12:18 executing program 1: clock_adjtime(0x0, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xe}, 0x0) 00:12:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x1c}}, 0x0) 00:12:18 executing program 2: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) [ 739.114849][T14069] usb 4-1: new full-speed USB device number 22 using dummy_hcd 00:12:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2a00000000000000, 0x0, 0x400000) 00:12:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x0, [{0x0, 0xf, "682c2dee1fc0f510e3aac787d5"}, {0x0, 0xe, "c8fdf3d43f30afc8f4a63f6b"}, {0x0, 0xc, "a2e29a4328a8b5ceb971"}, {0x0, 0x7, "3656848e5a"}, {0x0, 0x8, "847124031bc4"}, {0x0, 0x6, "411f7273"}, {0x0, 0xa, "16fe97b31b0b836f"}, {0x0, 0x3, '@'}, {0x0, 0x5, "fbf782"}]}]}}}}}) ioctl$EVIOCSKEYCODE(r0, 0x80104592, &(0x7f00000002c0)=[0x0, 0xdd4]) 00:12:19 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="42eb558a817d", @empty, @val={@void}, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x0, 0x6, "6396bf", 0x14, 0x6, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x0) 00:12:19 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x100010, r0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x6032, 0xffffffffffffffff, 0x0) 00:12:19 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 739.487253][T14069] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 739.510796][T14069] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.527934][T14069] usb 4-1: config 1 interface 0 has no altsetting 0 [ 739.695060][T14069] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.705600][T14069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.713886][T14069] usb 4-1: Product: ࠇ [ 739.735119][T30467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 740.035468][T14069] usb 4-1: bad CDC descriptors [ 740.049658][T14069] usb 4-1: USB disconnect, device number 22 00:12:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000d40)) 00:12:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000001240)={0x1f, 0x3, @fixed}, 0xe) 00:12:20 executing program 2: socketpair(0x6, 0x0, 0x0, &(0x7f0000000040)) 00:12:20 executing program 4: rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000140)) 00:12:20 executing program 3: getgroups(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x81, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x21c5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x6, 0x6}, @mdlm={0x15}, @mdlm={0x15}, @mdlm_detail={0x6, 0x24, 0x13, 0x2, "e84e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x12}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfce8442652aad5a5, 0x4}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) setgroups(0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]) 00:12:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2e04000000000000, 0x0, 0x400000) 00:12:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002400), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000180)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 00:12:20 executing program 4: syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="de") sched_getparam(0x0, &(0x7f00000001c0)) 00:12:20 executing program 5: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa}, 0x48) 00:12:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000001240)={0x1f, 0x3, @fixed, 0x0, 0x2}, 0xe) 00:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xffffffffffffffef, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1]]}, 0x54}}, 0x0) 00:12:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x100010, r0, 0x10000000) 00:12:20 executing program 1: set_mempolicy(0x2, &(0x7f0000000180)=0x5, 0x9) unshare(0x42060480) 00:12:20 executing program 4: socketpair(0x6547ec63961d41dd, 0x0, 0x0, &(0x7f0000000000)) 00:12:20 executing program 5: bpf$MAP_CREATE(0x1000000, 0x0, 0x0) 00:12:20 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x11, r0, 0x8000000) [ 740.816077][T14069] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 741.174935][T14069] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 741.186588][T14069] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.200181][T14069] usb 4-1: config 1 interface 0 has no altsetting 0 [ 741.364928][T14069] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.374498][T14069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.385733][T14069] usb 4-1: Product: ࠇ [ 741.405288][T30499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 741.705488][T14069] usb 4-1: bad CDC descriptors [ 741.712970][T14069] usb 4-1: USB disconnect, device number 23 00:12:22 executing program 3: getgroups(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x81, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x21c5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x6, 0x6}, @mdlm={0x15}, @mdlm={0x15}, @mdlm_detail={0x6, 0x24, 0x13, 0x2, "e84e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x12}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfce8442652aad5a5, 0x4}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) setgroups(0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]) 00:12:22 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 00:12:22 executing program 5: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x3}, &(0x7f0000000140)={0x0, r0+10000000}, 0x0) 00:12:22 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293d0000100109021b000104a80080090400000103000000090587c38837"], 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0003480000004803"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x19, {0x19, 0xb, "113fb2e32a217d6e7f8da2a9b10fe4114b57a7a3af7c86"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x18, 0x30, "e848b4bc8a70acec48c36c8a8a1911d01e08e31dcda442333d4c1270cf46c0fae4ba83e9bf691a06f45ef06f5d0a5937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000001c0)={0x0, 0x8, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:12:22 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ppoll(&(0x7f0000000180)=[{r0}], 0x32, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19}, 0x48) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000006840)={0x1fd, 0x0, 0xf000, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:12:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x2f00000000000000, 0x0, 0x400000) 00:12:22 executing program 4: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 00:12:22 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x0, 0x0}]}) 00:12:22 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x42, &(0x7f0000000540)=@string={0x42, 0x3, "1a53b6071d5f37701e365b85e4eb2764241f4c0fe1fd1041e1b4b3fa846ffbef8c25c7f68debb0c4c662ff04b06d0b0b7b57ecc8d4db238b21677eda1576d61b"}}]}) [ 742.454898][ T3689] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 742.504952][ T14] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 742.565213][ T3687] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 742.765341][T14069] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 742.815042][ T3687] usb 5-1: Using ep0 maxpacket: 32 [ 742.824931][ T3689] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 00:12:22 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19}, 0x48) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 742.883693][ T3689] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 742.896893][ T14] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 00:12:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001340)="e88edf114bb58496b65ad99e86f16b8b862b0c3e6ad3826ab9fd6d5534100c95b73663e7564961c9b9a29a129cc500418ebc2b0578763e0793a412f03bec34bb9c4aa37a830d56ec1710e89f0f1e07a8f5791a5d5ac3fb2821a1d42b73fe66219c034f721224cbabd0", 0x69}], 0x1) [ 742.935042][ T3687] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 742.970611][ T3687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 00:12:23 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) read(r0, &(0x7f0000000000)=""/185, 0xb9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000038b000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$tipc(0x1e, 0x2, 0x0) dup3(r1, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 742.999010][ T14] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10120, setting to 1024 [ 743.025248][ T3689] usb 4-1: config 1 interface 0 has no altsetting 0 [ 743.124947][ T14] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 743.134047][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 743.135169][T14069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.179304][T14069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.189837][ T3687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.207935][ T3687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.217076][ T14] usb 3-1: SerialNumber: syz [ 743.224902][ T3689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.228934][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.247790][ T3687] usb 5-1: Product: syz [ 743.255082][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.260171][ T3687] usb 5-1: Manufacturer: syz [ 743.284753][ T3687] usb 5-1: SerialNumber: syz [ 743.286223][T30532] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 743.307348][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 743.336161][ T3689] usb 4-1: Product: ࠇ [ 743.341328][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 743.370593][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 743.526395][T30523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 743.545001][T14069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.565702][T14069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.566295][ T14] yealink 3-1:4.0: invalid payload size 1024, expected 16 [ 743.595258][T14069] usb 2-1: Product: 匚޶弝瀷㘞蕛搧ἤཌ﷡䄐듡荒澄▌쒰拆ӿ涰ଋ坻죬謣朡瘕ᯖ [ 743.597809][ T14] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.0/input/input12 [ 743.637004][T14069] usb 2-1: Manufacturer: ࠠ [ 743.654502][T14069] usb 2-1: SerialNumber: syz [ 743.795110][ T3687] usb 5-1: cannot find UAC_HEADER [ 743.800769][ T3687] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 743.822863][ T3687] usb 5-1: USB disconnect, device number 25 [ 743.835301][ T3689] usb 4-1: bad CDC descriptors [ 743.860438][ T3689] usb 4-1: USB disconnect, device number 24 [ 743.954977][T14069] cdc_ncm 2-1:1.0: bind() failure [ 743.967862][T14069] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 743.995033][T14069] cdc_ncm 2-1:1.1: bind() failure [ 744.004499][T14069] usb 2-1: USB disconnect, device number 38 00:12:24 executing program 3: getgroups(0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x81, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x21c5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x6, 0x6}, @mdlm={0x15}, @mdlm={0x15}, @mdlm_detail={0x6, 0x24, 0x13, 0x2, "e84e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x12}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0xfce8442652aad5a5, 0x4}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) setgroups(0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]) 00:12:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3000000000000000, 0x0, 0x400000) 00:12:24 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x2, &(0x7f0000000540)=@string={0x2}}]}) [ 744.604997][ T3689] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 744.975090][ T3689] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 744.986052][ T3689] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 744.998981][ T3689] usb 4-1: config 1 interface 0 has no altsetting 0 [ 745.175141][ T3689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.184223][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.192313][ T3689] usb 4-1: Product: ࠇ [ 745.215185][T30554] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 745.515507][ T3689] usb 4-1: bad CDC descriptors [ 745.526333][ T3689] usb 4-1: USB disconnect, device number 25 [ 746.404903][ C0] yealink 3-1:4.0: urb_irq_callback - urb status -71 [ 746.411634][ C0] yealink 3-1:4.0: unexpected response 0 [ 746.586654][T14069] usb 3-1: USB disconnect, device number 37 [ 746.594833][ C0] yealink 3-1:4.0: urb_ctl_callback - urb status -2 [ 746.946194][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.952633][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 00:12:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293d0000100109021b000104a80080090400000103000000090587c38837"], 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0003480000004803"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x19, {0x19, 0xb, "113fb2e32a217d6e7f8da2a9b10fe4114b57a7a3af7c86"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x18, 0x30, "e848b4bc8a70acec48c36c8a8a1911d01e08e31dcda442333d4c1270cf46c0fae4ba83e9bf691a06f45ef06f5d0a5937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000001c0)={0x0, 0x8, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:12:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)) 00:12:27 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x41, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 00:12:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x6, "96729d0059df"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 00:12:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3206000000000000, 0x0, 0x400000) 00:12:27 executing program 3: r0 = msgget(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)) 00:12:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "ec83e547720a8e1ac011f55483adb023"}]}}) [ 747.394931][T14069] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 747.414892][ T3687] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 747.434980][T10426] usb 4-1: new high-speed USB device number 26 using dummy_hcd 00:12:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3507000000000000, 0x0, 0x400000) 00:12:27 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) 00:12:27 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}, {0x0, 0x0}, {0x0, 0x0}]}) [ 747.755020][T14069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.766487][T14069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.776968][ T3687] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 747.790420][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.800489][ T3687] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10120, setting to 1024 [ 747.813861][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 747.824325][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 747.836443][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 747.885626][T10426] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.897026][ T3687] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 747.906798][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 747.915636][T10426] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.926174][ T3687] usb 3-1: SerialNumber: syz 00:12:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) [ 747.931258][T10426] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.942232][T10426] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 747.965905][T30567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 747.991344][T10426] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 748.008639][T10426] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 748.025008][T14069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 00:12:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3}) [ 748.043287][T14069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.053827][T14069] usb 2-1: Product: syz [ 748.060421][T14069] usb 2-1: Manufacturer: syz [ 748.065385][T14069] usb 2-1: SerialNumber: syz [ 748.174949][T10426] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.184213][T10426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.198075][T10426] usb 4-1: Product: syz [ 748.202330][T10426] usb 4-1: Manufacturer: syz [ 748.208424][ T3687] yealink 3-1:4.0: invalid payload size 1024, expected 16 [ 748.215978][T10426] usb 4-1: SerialNumber: syz [ 748.221740][ T3687] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.0/input/input13 [ 748.505067][T10426] cdc_ncm 4-1:1.0: bind() failure [ 748.512469][T10426] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 748.519625][T10426] cdc_ncm 4-1:1.1: bind() failure [ 748.531519][T10426] usb 4-1: USB disconnect, device number 26 [ 748.604984][T14069] cdc_ncm 2-1:1.0: bind() failure [ 748.612353][T14069] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 748.619560][T14069] cdc_ncm 2-1:1.1: bind() failure [ 748.628329][T14069] usb 2-1: USB disconnect, device number 39 [ 751.084845][ C1] yealink 3-1:4.0: urb_irq_callback - urb status -71 [ 751.091575][ C1] yealink 3-1:4.0: unexpected response 0 [ 751.270561][ T3687] usb 3-1: USB disconnect, device number 38 [ 751.284846][ C1] yealink 3-1:4.0: urb_ctl_callback - urb status -2 00:12:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3600000000000000, 0x0, 0x400000) 00:12:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:12:31 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002febb84081aeb0128d3812100000109021b00010000000009040000010dd50800090584"], 0x0) 00:12:31 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "ec83e547720a8e1ac011f55483adb023"}]}}) 00:12:31 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293d0000100109021b000104a80080090400000103000000090587c38837"], 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0003480000004803"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x19, {0x19, 0xb, "113fb2e32a217d6e7f8da2a9b10fe4114b57a7a3af7c86"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x18, 0x30, "e848b4bc8a70acec48c36c8a8a1911d01e08e31dcda442333d4c1270cf46c0fae4ba83e9bf691a06f45ef06f5d0a5937"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000001c0)={0x0, 0x8, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:12:31 executing program 1: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x41, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 00:12:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x88}]}]}, 0x30}}, 0x0) 00:12:32 executing program 4: sendto(0xffffffffffffffff, &(0x7f0000000540)="b7d9915e0c76d1256532e6742e3690f45fb57a2b2a7689f38141c78305c6f4900051c7415508007395d5c1e66ca04eff1872e8c89ec5cd4b9141810634f262c81ada1d386b292faab6ef34000000000000000000000000b7f365a0d982118d4b0c0700000000000000f88a71c9ae6a107c1c72b6f6d010bca71430adc6ae2f03509ef3b47f65f2bc44e2d9e58144a36a7400dad17d9d9dcda3e33304a877610faf33998c4ea12da8df8efcec31fc8d00"/193, 0xc1, 0x4000004, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000200)=0xf2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1e, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x3, @empty}}, 0x0, 0x6, 0x2d, 0x0, "000000000000000000000000000000010000014d1700000000009a000000000000000000000000010400000000000000000000000000000000000000fbe16f66fac112bf00f803bb3e5e0b088a00"}, 0xd8) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000200)=0x5, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x63) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x7fffffdd, 0x1de}, 0x14) shutdown(r1, 0x1) 00:12:32 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, "8b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 752.064934][ T3687] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 752.075002][T14069] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 752.107080][T10426] usb 3-1: new high-speed USB device number 39 using dummy_hcd 00:12:32 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x41, &(0x7f0000000540)=@string={0x41, 0x3, "1a53b6071d5f37701e365b85e4eb2764241f4c0fe1fd1041e1b4b3fa846ffbef8c25c7f68debb0c4c662ff04b06d0b0b7b57ecc8d4db238b21677eda1576d6"}}]}) 00:12:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3c00000000000000, 0x0, 0x400000) [ 752.364850][ T3689] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 752.445287][T14069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.457356][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 752.468031][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 752.478550][T10426] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 752.490156][T14069] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.500387][T10426] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10120, setting to 1024 [ 752.512245][T14069] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 752.529028][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.543972][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.566447][ T3687] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 752.584477][ T3687] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 752.595341][T14069] usb 2-1: language id specifier not provided by device, defaulting to English [ 752.617837][ T3687] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.635071][T10426] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 752.645351][ T3687] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 752.657046][T10426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 752.667700][T10426] usb 3-1: SerialNumber: syz [ 752.695115][T30594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 752.745507][ T3689] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 752.756179][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.766195][ T3689] usb 5-1: config 0 descriptor?? [ 752.825014][ T3687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.836384][ T3687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.846118][ T3687] usb 4-1: Product: syz [ 752.853340][ T3687] usb 4-1: Manufacturer: syz [ 752.861092][ T3687] usb 4-1: SerialNumber: syz 00:12:32 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) 00:12:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x3f00000000000000, 0x0, 0x400000) [ 752.937169][T10426] yealink 3-1:4.0: invalid payload size 1024, expected 16 [ 752.948294][T10426] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.0/input/input14 [ 753.094943][ T3689] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 753.103506][ T3689] [drm:udl_init.cold] *ERROR* Unrecognized vendor firmware descriptor [ 753.148161][ T3689] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 753.155744][ T3689] [drm] Initialized udl on minor 2 [ 753.165579][ T3687] cdc_ncm 4-1:1.0: bind() failure [ 753.181401][ T3687] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 753.188920][ T3687] cdc_ncm 4-1:1.1: bind() failure [ 753.199909][ T3687] usb 4-1: USB disconnect, device number 27 [ 753.324969][T14069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.334680][T14069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:12:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000440)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000180)=@nfc, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x4000000000000000, 0x0, 0x400000) 00:12:33 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x0, 0x0}]}) [ 753.576369][ T3689] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 753.585167][ T3689] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 753.602060][ T3689] usb 5-1: USB disconnect, device number 26 [ 753.618279][ T3689] ================================================================== [ 753.626378][ T3689] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xb0 [ 753.633621][ T3689] Read of size 8 at addr ffff88807b5bfd08 by task kworker/0:8/3689 [ 753.641553][ T3689] [ 753.643893][ T3689] CPU: 0 PID: 3689 Comm: kworker/0:8 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 [ 753.653463][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 753.663544][ T3689] Workqueue: usb_hub_wq hub_event [ 753.668649][ T3689] Call Trace: [ 753.671938][ T3689] [ 753.674878][ T3689] dump_stack_lvl+0xcd/0x134 [ 753.679493][ T3689] print_report.cold+0x2ba/0x719 [ 753.684474][ T3689] ? __list_add_valid+0x93/0xb0 [ 753.689347][ T3689] kasan_report+0xb1/0x1e0 [ 753.693798][ T3689] ? _raw_spin_unlock+0x10/0x40 [ 753.698669][ T3689] ? __list_add_valid+0x93/0xb0 [ 753.703542][ T3689] __list_add_valid+0x93/0xb0 [ 753.708248][ T3689] udl_get_urb_timeout+0x20e/0x550 [ 753.713388][ T3689] ? udl_urb_completion+0x3e0/0x3e0 [ 753.718612][ T3689] ? slab_free_freelist_hook+0x8b/0x1c0 [ 753.724192][ T3689] ? udl_free_urb_list+0x136/0x250 [ 753.729331][ T3689] ? __kmem_cache_free+0xab/0x3b0 [ 753.734386][ T3689] udl_free_urb_list+0x15f/0x250 [ 753.738706][T14069] cdc_ncm 2-1:1.0: bind() failure [ 753.739339][ T3689] udl_drop_usb+0xd0/0x160 [ 753.748805][ T3689] udl_usb_disconnect+0x3f/0x50 [ 753.753685][ T3689] usb_unbind_interface+0x1d8/0x8e0 [ 753.758911][ T3689] ? usb_unbind_device+0x1a0/0x1a0 [ 753.764050][ T3689] device_remove+0x11f/0x170 [ 753.768708][ T3689] device_release_driver_internal+0x4a1/0x700 [ 753.774808][ T3689] ? put_device+0x1b/0x30 [ 753.779148][ T3689] bus_remove_device+0x2e3/0x590 [ 753.784101][ T3689] device_del+0x4f3/0xc80 [ 753.788439][ T3689] ? usb_disconnect.cold+0x43/0x6ed [ 753.793659][ T3689] ? __device_link_del+0x380/0x380 [ 753.798776][ T3689] ? mutex_lock_io_nested+0x1190/0x1190 [ 753.804383][ T3689] ? lock_downgrade+0x6e0/0x6e0 [ 753.809245][ T3689] usb_disable_device+0x356/0x7a0 [ 753.814291][ T3689] ? trace_hardirqs_off+0xe0/0x110 [ 753.819413][ T3689] usb_disconnect.cold+0x259/0x6ed [ 753.824559][ T3689] hub_event+0x1f86/0x4610 [ 753.829002][ T3689] ? hub_port_debounce+0x3b0/0x3b0 [ 753.834124][ T3689] ? perf_trace_irq_matrix_cpu+0x5e1/0x950 [ 753.839951][ T3689] ? lock_acquire+0x480/0x570 [ 753.844731][ T3689] ? lock_release+0x780/0x780 [ 753.849417][ T3689] ? lock_downgrade+0x6e0/0x6e0 [ 753.854282][ T3689] ? do_raw_spin_lock+0x120/0x2a0 [ 753.859319][ T3689] ? read_word_at_a_time+0xe/0x20 [ 753.864375][ T3689] ? strscpy+0xa1/0x2a0 [ 753.868540][ T3689] process_one_work+0x991/0x1610 [ 753.873513][ T3689] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 753.878903][ T3689] ? rwlock_bug.part.0+0x90/0x90 [ 753.883860][ T3689] worker_thread+0x854/0x1080 [ 753.888560][ T3689] ? __kthread_parkme+0x15f/0x220 [ 753.893597][ T3689] ? process_one_work+0x1610/0x1610 [ 753.898821][ T3689] kthread+0x2e4/0x3a0 [ 753.902917][ T3689] ? kthread_complete_and_exit+0x40/0x40 [ 753.908582][ T3689] ret_from_fork+0x1f/0x30 [ 753.913028][ T3689] [ 753.916050][ T3689] [ 753.918371][ T3689] Allocated by task 3689: [ 753.922693][ T3689] kasan_save_stack+0x1e/0x40 [ 753.927428][ T3689] __kasan_kmalloc+0xa9/0xd0 [ 753.932033][ T3689] udl_init+0x736/0xc80 [ 753.936216][ T3689] udl_usb_probe+0x4f/0x100 [ 753.940748][ T3689] usb_probe_interface+0x30b/0x7f0 [ 753.945899][ T3689] really_probe+0x249/0xb90 [ 753.950421][ T3689] __driver_probe_device+0x1df/0x4d0 [ 753.955719][ T3689] driver_probe_device+0x4c/0x1a0 [ 753.960753][ T3689] __device_attach_driver+0x206/0x2e0 [ 753.966156][ T3689] bus_for_each_drv+0x15f/0x1e0 [ 753.971019][ T3689] __device_attach+0x1e4/0x530 [ 753.975795][ T3689] bus_probe_device+0x1e4/0x290 [ 753.980655][ T3689] device_add+0xbd5/0x1e90 [ 753.985079][ T3689] usb_set_configuration+0x1019/0x1900 [ 753.990553][ T3689] usb_generic_driver_probe+0xba/0x100 [ 753.996093][ T3689] usb_probe_device+0xd4/0x2c0 [ 754.000887][ T3689] really_probe+0x249/0xb90 [ 754.005413][ T3689] __driver_probe_device+0x1df/0x4d0 [ 754.010715][ T3689] driver_probe_device+0x4c/0x1a0 [ 754.015757][ T3689] __device_attach_driver+0x206/0x2e0 [ 754.021147][ T3689] bus_for_each_drv+0x15f/0x1e0 [ 754.026020][ T3689] __device_attach+0x1e4/0x530 [ 754.030802][ T3689] bus_probe_device+0x1e4/0x290 [ 754.035673][ T3689] device_add+0xbd5/0x1e90 [ 754.040109][ T3689] usb_new_device.cold+0x685/0x10ad [ 754.045337][ T3689] hub_event+0x26c7/0x4610 [ 754.049766][ T3689] process_one_work+0x991/0x1610 [ 754.054716][ T3689] worker_thread+0x665/0x1080 [ 754.059409][ T3689] kthread+0x2e4/0x3a0 [ 754.063492][ T3689] ret_from_fork+0x1f/0x30 [ 754.067920][ T3689] [ 754.070259][ T3689] Freed by task 3689: [ 754.074235][ T3689] kasan_save_stack+0x1e/0x40 [ 754.078926][ T3689] kasan_set_track+0x21/0x30 [ 754.083543][ T3689] kasan_set_free_info+0x20/0x30 [ 754.088494][ T3689] ____kasan_slab_free+0x166/0x1c0 [ 754.093629][ T3689] slab_free_freelist_hook+0x8b/0x1c0 [ 754.099022][ T3689] __kmem_cache_free+0xab/0x3b0 [ 754.103896][ T3689] udl_free_urb_list+0x136/0x250 [ 754.108864][ T3689] udl_drop_usb+0xd0/0x160 [ 754.113294][ T3689] udl_usb_disconnect+0x3f/0x50 [ 754.118161][ T3689] usb_unbind_interface+0x1d8/0x8e0 [ 754.123378][ T3689] device_remove+0x11f/0x170 [ 754.127998][ T3689] device_release_driver_internal+0x4a1/0x700 [ 754.134094][ T3689] bus_remove_device+0x2e3/0x590 [ 754.139057][ T3689] device_del+0x4f3/0xc80 [ 754.143394][ T3689] usb_disable_device+0x356/0x7a0 [ 754.148436][ T3689] usb_disconnect.cold+0x259/0x6ed [ 754.153551][ T3689] hub_event+0x1f86/0x4610 [ 754.157978][ T3689] process_one_work+0x991/0x1610 [ 754.162932][ T3689] worker_thread+0x854/0x1080 [ 754.167627][ T3689] kthread+0x2e4/0x3a0 [ 754.171707][ T3689] ret_from_fork+0x1f/0x30 [ 754.176136][ T3689] [ 754.178460][ T3689] The buggy address belongs to the object at ffff88807b5bfd00 [ 754.178460][ T3689] which belongs to the cache kmalloc-32 of size 32 [ 754.192353][ T3689] The buggy address is located 8 bytes inside of [ 754.192353][ T3689] 32-byte region [ffff88807b5bfd00, ffff88807b5bfd20) [ 754.205466][ T3689] [ 754.207816][ T3689] The buggy address belongs to the physical page: [ 754.214229][ T3689] page:ffffea0001ed6fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b5bf [ 754.224386][ T3689] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 754.231947][ T3689] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888011841500 [ 754.240623][ T3689] raw: 0000000000000000 0000000000400040 00000001ffffffff 0000000000000000 [ 754.249201][ T3689] page dumped because: kasan: bad access detected [ 754.255608][ T3689] page_owner tracks the page as allocated [ 754.261318][ T3689] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3636, tgid 3636 (syz-executor.4), ts 175141030720, free_ts 175124002032 [ 754.279993][ T3689] get_page_from_freelist+0x109b/0x2ce0 [ 754.285580][ T3689] __alloc_pages+0x1c7/0x510 [ 754.290174][ T3689] alloc_pages+0x1a6/0x270 [ 754.294604][ T3689] allocate_slab+0x228/0x370 [ 754.299226][ T3689] ___slab_alloc+0xad0/0x1440 [ 754.304003][ T3689] __slab_alloc.constprop.0+0x4d/0xa0 [ 754.309479][ T3689] __kmem_cache_alloc_node+0x18a/0x3d0 [ 754.314952][ T3689] kmalloc_trace+0x22/0x60 [ 754.319371][ T3689] ref_tracker_alloc+0x14c/0x550 [ 754.324326][ T3689] ipv6_add_dev+0x43f/0x1390 [ 754.329025][ T3689] addrconf_notify+0x614/0x1b90 [ 754.333877][ T3689] notifier_call_chain+0xb5/0x200 [ 754.338920][ T3689] call_netdevice_notifiers_info+0xb5/0x130 [ 754.344848][ T3689] register_netdevice+0x1127/0x1680 [ 754.350067][ T3689] nsim_create+0x3c3/0x520 [ 754.354522][ T3689] __nsim_dev_port_add+0x2bb/0x880 [ 754.359638][ T3689] page last free stack trace: [ 754.364495][ T3689] free_pcp_prepare+0x5e4/0xd20 [ 754.369362][ T3689] free_unref_page+0x19/0x4d0 [ 754.374056][ T3689] qlist_free_all+0x6a/0x170 [ 754.378649][ T3689] kasan_quarantine_reduce+0x180/0x200 [ 754.384135][ T3689] __kasan_slab_alloc+0xa2/0xc0 [ 754.389004][ T3689] __kmem_cache_alloc_node+0x2d2/0x3d0 [ 754.394495][ T3689] kmalloc_trace+0x22/0x60 [ 754.398922][ T3689] __nsim_dev_port_add+0xdb/0x880 [ 754.403953][ T3689] nsim_drv_probe+0xd80/0x1310 [ 754.408743][ T3689] really_probe+0x249/0xb90 [ 754.413292][ T3689] __driver_probe_device+0x1df/0x4d0 [ 754.418592][ T3689] driver_probe_device+0x4c/0x1a0 [ 754.423628][ T3689] __device_attach_driver+0x206/0x2e0 [ 754.429019][ T3689] bus_for_each_drv+0x15f/0x1e0 [ 754.433883][ T3689] __device_attach+0x1e4/0x530 [ 754.438666][ T3689] bus_probe_device+0x1e4/0x290 [ 754.443527][ T3689] [ 754.445861][ T3689] Memory state around the buggy address: [ 754.451488][ T3689] ffff88807b5bfc00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 754.459551][ T3689] ffff88807b5bfc80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 754.467610][ T3689] >ffff88807b5bfd00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 754.475670][ T3689] ^ [ 754.479992][ T3689] ffff88807b5bfd80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 754.488058][ T3689] ffff88807b5bfe00: 00 00 00 00 fc fc fc fc 00 00 01 fc fc fc fc fc [ 754.496118][ T3689] ================================================================== [ 754.504188][ T3689] Kernel panic - not syncing: panic_on_warn set ... [ 754.510770][ T3689] CPU: 0 PID: 3689 Comm: kworker/0:8 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 [ 754.520316][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 754.530897][ T3689] Workqueue: usb_hub_wq hub_event [ 754.535944][ T3689] Call Trace: [ 754.539264][ T3689] [ 754.542198][ T3689] dump_stack_lvl+0xcd/0x134 [ 754.546817][ T3689] panic+0x2c8/0x622 [ 754.550757][ T3689] ? panic_print_sys_info.part.0+0x110/0x110 [ 754.556763][ T3689] ? print_report.cold+0x4f6/0x719 [ 754.561884][ T3689] ? __list_add_valid+0x93/0xb0 [ 754.566744][ T3689] end_report.part.0+0x3f/0x7c [ 754.571513][ T3689] kasan_report.cold+0xa/0xf [ 754.576115][ T3689] ? _raw_spin_unlock+0x10/0x40 [ 754.581001][ T3689] ? __list_add_valid+0x93/0xb0 [ 754.585860][ T3689] __list_add_valid+0x93/0xb0 [ 754.590540][ T3689] udl_get_urb_timeout+0x20e/0x550 [ 754.595670][ T3689] ? udl_urb_completion+0x3e0/0x3e0 [ 754.600882][ T3689] ? slab_free_freelist_hook+0x8b/0x1c0 [ 754.606456][ T3689] ? udl_free_urb_list+0x136/0x250 [ 754.611657][ T3689] ? __kmem_cache_free+0xab/0x3b0 [ 754.616701][ T3689] udl_free_urb_list+0x15f/0x250 [ 754.621656][ T3689] udl_drop_usb+0xd0/0x160 [ 754.626085][ T3689] udl_usb_disconnect+0x3f/0x50 [ 754.630951][ T3689] usb_unbind_interface+0x1d8/0x8e0 [ 754.636179][ T3689] ? usb_unbind_device+0x1a0/0x1a0 [ 754.641395][ T3689] device_remove+0x11f/0x170 [ 754.646001][ T3689] device_release_driver_internal+0x4a1/0x700 [ 754.652085][ T3689] ? put_device+0x1b/0x30 [ 754.656419][ T3689] bus_remove_device+0x2e3/0x590 [ 754.661466][ T3689] device_del+0x4f3/0xc80 [ 754.665823][ T3689] ? usb_disconnect.cold+0x43/0x6ed [ 754.671028][ T3689] ? __device_link_del+0x380/0x380 [ 754.676148][ T3689] ? mutex_lock_io_nested+0x1190/0x1190 [ 754.681713][ T3689] ? lock_downgrade+0x6e0/0x6e0 [ 754.686575][ T3689] usb_disable_device+0x356/0x7a0 [ 754.691621][ T3689] ? trace_hardirqs_off+0xe0/0x110 [ 754.696760][ T3689] usb_disconnect.cold+0x259/0x6ed [ 754.701897][ T3689] hub_event+0x1f86/0x4610 [ 754.706337][ T3689] ? hub_port_debounce+0x3b0/0x3b0 [ 754.711460][ T3689] ? perf_trace_irq_matrix_cpu+0x5e1/0x950 [ 754.717284][ T3689] ? lock_acquire+0x480/0x570 [ 754.721984][ T3689] ? lock_release+0x780/0x780 [ 754.726675][ T3689] ? lock_downgrade+0x6e0/0x6e0 [ 754.731536][ T3689] ? do_raw_spin_lock+0x120/0x2a0 [ 754.736575][ T3689] ? read_word_at_a_time+0xe/0x20 [ 754.741610][ T3689] ? strscpy+0xa1/0x2a0 [ 754.745778][ T3689] process_one_work+0x991/0x1610 [ 754.750746][ T3689] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 754.756136][ T3689] ? rwlock_bug.part.0+0x90/0x90 [ 754.761100][ T3689] worker_thread+0x854/0x1080 [ 754.765798][ T3689] ? __kthread_parkme+0x15f/0x220 [ 754.770840][ T3689] ? process_one_work+0x1610/0x1610 [ 754.776059][ T3689] kthread+0x2e4/0x3a0 [ 754.780141][ T3689] ? kthread_complete_and_exit+0x40/0x40 [ 754.785789][ T3689] ret_from_fork+0x1f/0x30 [ 754.790228][ T3689] [ 754.793401][ T3689] Kernel Offset: disabled [ 754.797746][ T3689] Rebooting in 86400 seconds..