g$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb230503fef4e92767c535949a4f67df8a8b07f436f0655ebca1c14cb9714bae8fe7"], 0x23, 0x3) getpeername$unix(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x100000001) 15:37:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:40 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000003c0)={0x3, 0x20, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb230503fef4e92767c535949a4f67df8a8b07f436f0655ebca1c14cb9714bae8fe7"], 0x23, 0x3) getpeername$unix(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x100000001) 15:37:40 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000003c0)={0x3, 0x20, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb230503fef4e92767c535949a4f67df8a8b07f436f0655ebca1c14cb9714bae8fe7"], 0x23, 0x3) getpeername$unix(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x100000001) 15:37:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="0f34f1b3485cfef04110f0e1d058e2f8018d5da7177e6243d1741c79fdbd0445388581b25766f3d8ca74e32e812966bd7abb", 0x32}, {&(0x7f0000000340)="d4877355c2bb85d089296dd123bfcc2a58e000b5cb294b79404193402965b419e90b262395604e0a0fac0e4d4ab8aed49e7bad7228f81b77109d7859b2b8b2b16f7ba07dde12fe6ecdb73b6b61a88cfddf20bc3518ad75e585d28fffd962533a0baab585fec38565be64a78bbadff14db981a731b299fea59748c8b1e4d7e1df7c", 0x81}], 0x2}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 15:37:41 executing program 3: mq_getsetattr(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:37:41 executing program 3: mq_getsetattr(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:37:41 executing program 3: mq_getsetattr(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:37:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 15:37:42 executing program 3: mq_getsetattr(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:37:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 15:37:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:45 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000200)) 15:37:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 15:37:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:45 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000200)) 15:37:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) 15:37:45 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000200)) 15:37:45 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:37:46 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000200)) [ 1078.938635][T27548] __nla_validate_parse: 14 callbacks suppressed [ 1078.938683][T27548] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.054374][T27548] gretap0: entered promiscuous mode 15:37:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1079.105023][T27553] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1079.226480][T27553] 0ªX: renamed from gretap0 [ 1079.253194][T27553] 0ªX: left promiscuous mode [ 1079.258224][T27553] 0ªX: entered allmulticast mode [ 1079.358531][T27553] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 15:37:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:50 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:37:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) 15:37:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) [ 1083.793565][T27574] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 15:37:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1083.955300][T27574] 0ªX: entered promiscuous mode [ 1083.960699][T27574] 0ªX: left allmulticast mode [ 1084.060820][T27579] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1084.189640][T27579] 1ªX: renamed from 00ªX [ 1084.278469][T27579] 1ªX: left promiscuous mode [ 1084.284425][T27579] 1ªX: entered allmulticast mode [ 1084.331321][T27579] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 15:37:52 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:37:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1085.696841][T27596] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1085.786364][T27596] 1ªX: entered promiscuous mode [ 1085.799177][T27596] 1ªX: left allmulticast mode [ 1086.018602][T27599] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1086.037720][T27599] 0ªX: renamed from 01ªX [ 1086.338759][T27599] 0ªX: left promiscuous mode [ 1086.385887][T27599] 0ªX: entered allmulticast mode [ 1086.430297][T27599] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 15:37:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:54 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1087.378607][T27615] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1087.561838][T27615] 0ªX: entered promiscuous mode [ 1087.605565][T27615] 0ªX: left allmulticast mode [ 1087.744268][T27616] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1087.818639][T27616] 1ªX: renamed from 00ªX [ 1087.935765][T27616] 1ªX: left promiscuous mode 15:37:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1087.974646][T27616] 1ªX: entered allmulticast mode [ 1088.092355][T27616] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 15:37:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:37:58 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:37:58 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:37:58 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1091.656047][T27644] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.670221][T27644] gretap0: entered promiscuous mode [ 1091.798031][T27657] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1091.815067][T27657] gretap0: entered promiscuous mode [ 1091.870784][T27654] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.035138][T27654] 0ªX: renamed from gretap0 15:37:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1092.362768][T27654] 0ªX: left promiscuous mode [ 1092.368353][T27654] 0ªX: entered allmulticast mode [ 1092.440003][T27654] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 1092.463464][T27660] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.539621][T27660] gretap0: entered promiscuous mode [ 1092.722493][T27652] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.732894][T27652] 0ªX: renamed from gretap0 15:38:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1092.982503][T27652] 0ªX: left promiscuous mode [ 1093.011809][T27652] 0ªX: entered allmulticast mode [ 1093.064747][T27652] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 15:38:00 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:38:00 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) 15:38:00 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1093.304806][T27674] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.429128][T27674] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.472502][T27674] 0ªX: renamed from gretap0 [ 1093.498165][T27674] 0ªX: left promiscuous mode [ 1093.510853][T27674] 0ªX: entered allmulticast mode [ 1093.575986][T27674] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 1093.601311][T27677] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 15:38:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 1093.634564][T27677] 0ªX: entered promiscuous mode [ 1093.640810][T27677] 0ªX: left allmulticast mode [ 1093.706113][T27683] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1093.718617][T27683] 0ªX: entered promiscuous mode [ 1093.784087][T27683] 0ªX: left allmulticast mode [ 1093.977752][T27684] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1094.028274][T27684] 1ªX: renamed from 00ªX [ 1094.199741][T27684] 1ªX: left promiscuous mode [ 1094.214354][T27684] 1ªX: entered allmulticast mode 15:38:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 15:38:01 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1094.330349][T27684] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 1094.350072][T27688] 1ªX: renamed from 00ªX [ 1094.387476][T27688] 1ªX: left promiscuous mode [ 1094.402395][T27688] 1ªX: entered allmulticast mode [ 1094.448776][T27688] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 15:38:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() tkill(r0, 0x7) ptrace$peekuser(0x3, r0, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000001c0)=['^(\x00'], 0x3}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) recvfrom(r1, &(0x7f0000000340)=""/156, 0x9c, 0x40010000, &(0x7f0000000240)=@ethernet={0x306, @random="31b339372b36"}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_open(0x0, 0x0) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x1603bcff, 0xfffffff8}, 0x10}, 0x80) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_pid(r8, &(0x7f0000000100)=0xffffffffffffffff, 0x12) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 1094.689257][T27699] 0ªX: entered promiscuous mode [ 1094.695388][T27699] 0ªX: left allmulticast mode [ 1094.744530][T27699] 1ªX: renamed from 00ªX [ 1094.752876][T27699] 1ªX: left promiscuous mode [ 1094.834773][T27699] 1ªX: entered allmulticast mode 15:38:02 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1094.938721][T27699] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 15:38:02 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'pimreg0\x00', {'bridge0\x00'}, 0x4}) r3 = getpid() r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440)="4eb45f6bbce760641d5d09e10339c5b3880a8b07a4fe7af48d2128553206570c01139abc940927a55089682a4b2ad4f4c686ab2718610bc6d0ed0fd31df8ed9f5fc0ef2f5285c91acc8275d77b8ce7c11a9cb463a56cf9047c4976581dcd", 0x5e, 0x2, 0x1}, 0x20) r5 = dup(0xffffffffffffffff) ptrace$pokeuser(0x6, r3, 0xf5a8, 0x7fffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r6 = socket(0x11, 0x3, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', r7, 0x700, 0x7, 0x6, 0x999, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x65, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xb2, 0x0, 0x7, [0x2, 0x7, 0x2, 0x5, 0x6d8, 0x2, 0x6, 0x2c8b]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x2, [{@remote, 0xeb8}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@loopback}]}]}}}}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='macvlan1\x00'}) [ 1095.172804][T27709] 1ªX: entered promiscuous mode [ 1095.191095][T27709] 1ªX: left allmulticast mode [ 1095.335665][T27712] 0ªX: renamed from 01ªX [ 1095.657551][T27712] 0ªX: left promiscuous mode [ 1095.694574][T27712] 0ªX: entered allmulticast mode [ 1095.708476][T27712] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 1095.751295][T27715] 1ªX: entered promiscuous mode 15:38:02 executing program 3: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") [ 1095.855397][T27715] 1ªX: left allmulticast mode 15:38:03 executing program 0: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3e, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) [ 1096.111883][T27716] 0ªX: renamed from 01ªX 15:38:03 executing program 0: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3e, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) [ 1096.222167][T27716] 0ªX: left promiscuous mode [ 1096.228726][T27716] 0ªX: entered allmulticast mode [ 1096.316782][T27716] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 15:38:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3e, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) 15:38:03 executing program 4: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 15:38:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 15:38:03 executing program 0: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:03 executing program 4: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3e, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) 15:38:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000340)={0x4b}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1a}, 0x0) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141301) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 15:38:03 executing program 3: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 15:38:03 executing program 4: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:04 executing program 2: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty}, 0x20) 15:38:04 executing program 0: pipe2(&(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x26cd, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000001c0), 0x0) io_uring_setup(0x400d, &(0x7f0000000a40)) syz_io_uring_setup(0x4ea8, &(0x7f0000000340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000), 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x200}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x0) io_uring_enter(r0, 0x826, 0x0, 0x0, 0x0, 0x20000000) 15:38:04 executing program 1: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_newneigh={0x54, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x4b}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0xc0}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x27}]}, @NDA_MASTER={0x8, 0x9, 0x1f}]}, 0x54}}, 0x800) 15:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_newneigh={0x54, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x4b}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0xc0}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x27}]}, @NDA_MASTER={0x8, 0x9, 0x1f}]}, 0x54}}, 0x800) [ 1097.237414][T27764] team0: invalid flags given to default FDB implementation 15:38:04 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009080)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="9c8c928e01f0769635ef", 0xa}, {0x0}, {&(0x7f0000000e80)="eadb9c416885e889dadbe13f759bf4fd39121822cd3e0d3df79607897cf7469ad28113e5c1d3b9520bee5d343357d1d9419932a38f4e95c9e72e7af4298d99fd845a6046ed109c14a41e64b8b4066d59b5ab2a2a937f787f31414090f9c4f8cdf4c9ff1d8771c54b2413e2aac3bbf0883dacb03560c07d328d1aac66b5cbe0a8b1f39f5dc210327e99ec419827aaacf261624125d442e2f5872f985ae4d34c155907f1564a2435532202", 0xaa}, {&(0x7f00000012c0)="0757a0f529f2cd7bb115edc7e250baba02719731b81d274c220c3851df586e516598abdc985ae8c04bed860db6b5d616481ad0c458c8c262d66118bfb5605b2d271ec3e67aa108c0f64c34b5710c13610ea1b2cf6920ee7449b6e29e8811477d4212bc855efe5e7760b31c370473b6b0938ad38b0d462cd26fddeb66952d693f673d1405f9dc66f909c3eff71def930963e73b16dcbe5cf4fbe2a2e7ddf22f9a9033e5abe1435cc24626042126b328f55e480da3524b6bbbb1a8", 0xba}, {0x0}], 0x5, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001680)="f7aae4f2fbf5660feac56c3a3afe6ee66d3ddee185fbeef493a1f4e8e5a6162200f98caf03d16f199148c2e40752af789ee0371d01f1408be3d827a12735f42cc7bf3f3e", 0x44}, {&(0x7f0000001700)="3294b5dd7629f0aa61ff9a506af008c550b2c40c1baf044a2cece044dd7aed3b9394dde1de32fed420da23ebb817b30e70321e16dacf3adb0401d3907aa8b1c98e6954865dddd3bd4737bee3dd726d95ba715ce7a2eb3065c0b6fa53e0b32682b677b962ea1f94fc9a", 0x69}, {0x0}, {0x0}], 0x5, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}}, {{&(0x7f0000008000)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000008540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008fc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x40) syz_clone3(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, 0x0) 15:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_newneigh={0x54, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x4b}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0xc0}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x27}]}, @NDA_MASTER={0x8, 0x9, 0x1f}]}, 0x54}}, 0x800) [ 1097.412552][T27766] team0: invalid flags given to default FDB implementation [ 1097.587331][T27774] team0: invalid flags given to default FDB implementation 15:38:04 executing program 2: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:04 executing program 3: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000340)={0x4b}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1a}, 0x0) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141301) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 15:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_newneigh={0x54, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x4b}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0xc0}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x27}]}, @NDA_MASTER={0x8, 0x9, 0x1f}]}, 0x54}}, 0x800) [ 1097.817309][T27781] team0: invalid flags given to default FDB implementation 15:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 15:38:05 executing program 1: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 15:38:05 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009080)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="9c8c928e01f0769635ef", 0xa}, {0x0}, {&(0x7f0000000e80)="eadb9c416885e889dadbe13f759bf4fd39121822cd3e0d3df79607897cf7469ad28113e5c1d3b9520bee5d343357d1d9419932a38f4e95c9e72e7af4298d99fd845a6046ed109c14a41e64b8b4066d59b5ab2a2a937f787f31414090f9c4f8cdf4c9ff1d8771c54b2413e2aac3bbf0883dacb03560c07d328d1aac66b5cbe0a8b1f39f5dc210327e99ec419827aaacf261624125d442e2f5872f985ae4d34c155907f1564a2435532202", 0xaa}, {&(0x7f00000012c0)="0757a0f529f2cd7bb115edc7e250baba02719731b81d274c220c3851df586e516598abdc985ae8c04bed860db6b5d616481ad0c458c8c262d66118bfb5605b2d271ec3e67aa108c0f64c34b5710c13610ea1b2cf6920ee7449b6e29e8811477d4212bc855efe5e7760b31c370473b6b0938ad38b0d462cd26fddeb66952d693f673d1405f9dc66f909c3eff71def930963e73b16dcbe5cf4fbe2a2e7ddf22f9a9033e5abe1435cc24626042126b328f55e480da3524b6bbbb1a8", 0xba}, {0x0}], 0x5, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001680)="f7aae4f2fbf5660feac56c3a3afe6ee66d3ddee185fbeef493a1f4e8e5a6162200f98caf03d16f199148c2e40752af789ee0371d01f1408be3d827a12735f42cc7bf3f3e", 0x44}, {&(0x7f0000001700)="3294b5dd7629f0aa61ff9a506af008c550b2c40c1baf044a2cece044dd7aed3b9394dde1de32fed420da23ebb817b30e70321e16dacf3adb0401d3907aa8b1c98e6954865dddd3bd4737bee3dd726d95ba715ce7a2eb3065c0b6fa53e0b32682b677b962ea1f94fc9a", 0x69}, {0x0}, {0x0}], 0x5, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}}, {{&(0x7f0000008000)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000008540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008fc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x40) syz_clone3(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, 0x0) 15:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 15:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) 15:38:05 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) 15:38:05 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) 15:38:06 executing program 2: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:06 executing program 3: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:06 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) 15:38:06 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009080)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="9c8c928e01f0769635ef", 0xa}, {0x0}, {&(0x7f0000000e80)="eadb9c416885e889dadbe13f759bf4fd39121822cd3e0d3df79607897cf7469ad28113e5c1d3b9520bee5d343357d1d9419932a38f4e95c9e72e7af4298d99fd845a6046ed109c14a41e64b8b4066d59b5ab2a2a937f787f31414090f9c4f8cdf4c9ff1d8771c54b2413e2aac3bbf0883dacb03560c07d328d1aac66b5cbe0a8b1f39f5dc210327e99ec419827aaacf261624125d442e2f5872f985ae4d34c155907f1564a2435532202", 0xaa}, {&(0x7f00000012c0)="0757a0f529f2cd7bb115edc7e250baba02719731b81d274c220c3851df586e516598abdc985ae8c04bed860db6b5d616481ad0c458c8c262d66118bfb5605b2d271ec3e67aa108c0f64c34b5710c13610ea1b2cf6920ee7449b6e29e8811477d4212bc855efe5e7760b31c370473b6b0938ad38b0d462cd26fddeb66952d693f673d1405f9dc66f909c3eff71def930963e73b16dcbe5cf4fbe2a2e7ddf22f9a9033e5abe1435cc24626042126b328f55e480da3524b6bbbb1a8", 0xba}, {0x0}], 0x5, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001680)="f7aae4f2fbf5660feac56c3a3afe6ee66d3ddee185fbeef493a1f4e8e5a6162200f98caf03d16f199148c2e40752af789ee0371d01f1408be3d827a12735f42cc7bf3f3e", 0x44}, {&(0x7f0000001700)="3294b5dd7629f0aa61ff9a506af008c550b2c40c1baf044a2cece044dd7aed3b9394dde1de32fed420da23ebb817b30e70321e16dacf3adb0401d3907aa8b1c98e6954865dddd3bd4737bee3dd726d95ba715ce7a2eb3065c0b6fa53e0b32682b677b962ea1f94fc9a", 0x69}, {0x0}, {0x0}], 0x5, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}}, {{&(0x7f0000008000)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000008540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008fc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x40) syz_clone3(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, 0x0) 15:38:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000340)={0x4b}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1a}, 0x0) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141301) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 15:38:06 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7c0d}, 0x1c) 15:38:06 executing program 1: msgget$private(0x0, 0x10) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/37) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420083, 0x0) socket(0x14, 0x4, 0x3f8) msgget(0x3, 0x2) getgid() syz_clone(0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="83d67d1e32996ffb56e8fc0c167d7bc2e3ffce4dd571a6e417f2d28d89a8") 15:38:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000006400)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="d4", 0x1}], 0x1}}], 0x2, 0x0) 15:38:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000006400)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="d4", 0x1}], 0x1}}], 0x2, 0x0) 15:38:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000006400)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="d4", 0x1}], 0x1}}], 0x2, 0x0) 15:38:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 15:38:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000006400)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="d4", 0x1}], 0x1}}], 0x2, 0x0) 15:38:07 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009080)=[{{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="9c8c928e01f0769635ef", 0xa}, {0x0}, {&(0x7f0000000e80)="eadb9c416885e889dadbe13f759bf4fd39121822cd3e0d3df79607897cf7469ad28113e5c1d3b9520bee5d343357d1d9419932a38f4e95c9e72e7af4298d99fd845a6046ed109c14a41e64b8b4066d59b5ab2a2a937f787f31414090f9c4f8cdf4c9ff1d8771c54b2413e2aac3bbf0883dacb03560c07d328d1aac66b5cbe0a8b1f39f5dc210327e99ec419827aaacf261624125d442e2f5872f985ae4d34c155907f1564a2435532202", 0xaa}, {&(0x7f00000012c0)="0757a0f529f2cd7bb115edc7e250baba02719731b81d274c220c3851df586e516598abdc985ae8c04bed860db6b5d616481ad0c458c8c262d66118bfb5605b2d271ec3e67aa108c0f64c34b5710c13610ea1b2cf6920ee7449b6e29e8811477d4212bc855efe5e7760b31c370473b6b0938ad38b0d462cd26fddeb66952d693f673d1405f9dc66f909c3eff71def930963e73b16dcbe5cf4fbe2a2e7ddf22f9a9033e5abe1435cc24626042126b328f55e480da3524b6bbbb1a8", 0xba}, {0x0}], 0x5, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001680)="f7aae4f2fbf5660feac56c3a3afe6ee66d3ddee185fbeef493a1f4e8e5a6162200f98caf03d16f199148c2e40752af789ee0371d01f1408be3d827a12735f42cc7bf3f3e", 0x44}, {&(0x7f0000001700)="3294b5dd7629f0aa61ff9a506af008c550b2c40c1baf044a2cece044dd7aed3b9394dde1de32fed420da23ebb817b30e70321e16dacf3adb0401d3907aa8b1c98e6954865dddd3bd4737bee3dd726d95ba715ce7a2eb3065c0b6fa53e0b32682b677b962ea1f94fc9a", 0x69}, {0x0}, {0x0}], 0x5, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}}, {{&(0x7f0000008000)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000008540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008fc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r0}}}, @cred={{0x1c}}], 0x78}}], 0x4, 0x40) syz_clone3(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone(0x40900280, 0x0, 0x0, 0x0, 0x0, 0x0) 15:38:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 15:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(0xffffffffffffffff, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x700) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000340)={0x4b}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1a}, 0x0) r6 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141301) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 15:38:11 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 1104.323553][T26527] IPVS: starting estimator thread 0... [ 1104.413932][T27869] IPVS: using max 18 ests per chain, 43200 per kthread 15:38:11 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 15:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(0xffffffffffffffff, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x700) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 15:38:11 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(0xffffffffffffffff, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x700) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:11 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:12 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 15:38:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(0xffffffffffffffff, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x700) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:12 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 15:38:12 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) 15:38:12 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:38:12 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 15:38:12 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 15:38:12 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_monitor_on(r0, &(0x7f0000000040), 0x3) 15:38:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0123000000010000000012"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 15:38:12 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x22}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edd9740bdea829c00497b8ccebcfa406"}]}}) 15:38:12 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) 15:38:12 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 15:38:12 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) 15:38:12 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) 15:38:12 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "d802537c2b968b866f89fbc88930bff936a032855ee7f8d31786dbbf068345b5a7531963ce97e7f17832fa92858ba0766dffa8b656d7b3a7ec5fdcc292000ddd00f4cd2292cd21b756e3c792804a7bd23775ff66154dd32daa22bb35f27dcc8528f087f899cf4640fbb5ecf2455ee3464b8268c86e982f8c4864685cd25e8c7dc91faa6d191b4d3809a07b8f0f44cdec8b66ff98a71ef8c1e181e7b962706649f751db0045af91803a7a3a0525eb99ac8ba2c84f3c1871b73039c4a2fe7f7cc12ac7fdf73665e0dd1d43c2a8aa73d20446ea766d0d0f40a4db38d0af69d77730c558ba7cbbd65724d44cb5a8bf216560c99b0e4fe11c154bf14737b163e42fba9155b1a9b281cab6cc5c94ea691a92fdc88368cf3466f2d2af9aaa4e63dd75d0ce3d85ab13301e8701f64bd64afcf52a11677deb5fec58012e86590ff36baca0a1ed2c58bc09c45966507955c92c2cf60ffa827fc8ffad6403fa3938d83786abcc30da43d6f149e829ce100bbf9074a9b270099a4b72398ae2c4aa0b2003d44e6e1a25621fefed14cab60a75cee0a7c36c0b64050a156924c148bf430e1ef2d5301f55eb800a5e388c48a579493490f7f8213f7a3a4f08bc16c66e1fbd42adb45166fd85e89ccdf2bfde01b0900b8e35f3c0dfda40058188f31b043afcbbc2094cf536734560b620287a22666de306aca750ddb1d7d246c34bf58fa6be3cf6041180a4cbf64602bc9f53f1cc595b58ad8bafe4b6ec009a739cf61ca686da671d8b287309c30ea37482dd2e949010429f7878a20a95fdcb6d839877d5486c35f1a2bc5d74a2ee3f44500be393a7b87a7254b6fd5c0816a54d7755a4f29c266d04f86376ad1553851cedfec2c3699831bc4bffb5382bcec5606f058e178e05451bfdccd4d8323364b2bddc573096c17a414d16d17c39d296d973a7789c75dbbda7b7392ef7d22ccdbf0789db3f8d89f1294b2f866b395437085a487d97f715b9b8e87f19d94a818f047102b9b47ea189f937ba2e6b1d18291657273bd40e1d8858559d2df8f68e3e8a286eab147ec9a74d704b8ede913e2198a2103384d7d42cfdfd835022616953813e85fab59258e982a6dacfe1e367fe33f564f5f04bd61d827588a71b1bccdeb8b75f9fc61959dfad080196811803b27fad528d986c084108f733f55de1ec219fb9394037f6aeccff8db10b3e91b739318b87bd4777d7720cc80560afddd2cc72aa0c3f0e0c2e2436876132ab13082635b6984d26a0de68fff9d0aac9694a56c657badbd814842f57837bb733c48b35923816ec4b9b43611b2e796e8e85fd2bfc29edfc41c8a1d1cda239b9f6f68090d1b941c1b4771334be5a25735c5c823d60d76b543d276bbf6c29f219654b840c72c91c0dd9b852eff7135c1c4e5a0b2cf4cc619d09b4b5e1f464b9a2370e5fb2ffd3e8b1b932719fd7"}, 0x418, 0x4}) 15:38:12 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 15:38:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0123000000010000000012"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 15:38:12 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) 15:38:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}]}}) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}], 0x3) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000440)=""/49, 0x31}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x0, 0x0, 0x7b, 0x0, 0x0, [{0x0, 0x0, 0x6}, {0x0, 0x44}, {}, {0x0, 0x0, 0xaa}, {}, {}, {}, {}, {}, {}, {0x0, 0x40, 0x0, '\x00', 0x3}, {0x0, 0xa0}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {0x0, 0x0, 0x40}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:12 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 15:38:12 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{}, @my=0x1, 0x0, 0x0, 0x20}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x2}, {@any, 0x81}, 0x400, "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"}, 0x418, 0x4}) [ 1105.789656][T12907] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1106.073962][T12907] usb 4-1: Using ep0 maxpacket: 16 [ 1106.304175][T12907] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1106.494031][T12907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1106.506676][T12907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.522003][T12907] usb 4-1: Product: syz [ 1106.526928][T12907] usb 4-1: Manufacturer: syz [ 1106.531644][T12907] usb 4-1: SerialNumber: syz [ 1106.802199][T12907] usb 4-1: USB disconnect, device number 48 15:38:14 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) 15:38:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0123000000010000000012"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 15:38:14 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:14 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a80)={'\x00', 0x0, 0x1, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002a80)) 15:38:14 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x22}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edd9740bdea829c00497b8ccebcfa406"}]}}) 15:38:14 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) 15:38:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0123000000010000000012"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 15:38:14 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:14 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:14 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) 15:38:14 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:14 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:14 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) 15:38:14 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) [ 1107.693827][T12907] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1107.944054][T12907] usb 4-1: Using ep0 maxpacket: 16 15:38:15 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) [ 1108.164159][T12907] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1108.364078][T12907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1108.373167][T12907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.381704][T12907] usb 4-1: Product: syz [ 1108.386418][T12907] usb 4-1: Manufacturer: syz [ 1108.391033][T12907] usb 4-1: SerialNumber: syz [ 1108.664308][T22708] usb 4-1: USB disconnect, device number 49 15:38:16 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x22}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edd9740bdea829c00497b8ccebcfa406"}]}}) 15:38:16 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a80)={'\x00', 0x0, 0x1, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002a80)) 15:38:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x7, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000000340)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:38:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:16 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:16 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x7, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000000340)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:38:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x7, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000000340)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:38:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket(0x1d, 0x1, 0xfff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8048080) r2 = socket(0x1f, 0x6, 0xfffffbff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000004c0)={0x1}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) socketpair(0xa, 0x1, 0x7fffffff, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xe8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xbe, 0x8, "7f262f1efc969caaf482a3b729b845100888ad8a12b4b80d95c37a01c0d9e189c39adabcef475bf73998ed91ae7f19fb0ee86855d8248ea37c383494eac223a0dfbe59785c674fd664cab4042b45e8b138c75489b855afdcac731383216a5e183fe570da1846d2a9252f26f9314b6eda6290fd23618860b75d4beec1228956ec8126ffd3764fddaf876d09937f0e076535722462cce31f0db52f9bf4d58cb9c21085253e6fb07303a16b7a8e69f71cb31711cdb3cc3a29c91522"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x80) socketpair(0x2a, 0x0, 0x7, &(0x7f00000008c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x90, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000a40)={r9, 0x10000, 0x4, "c92997fef98f04c825b0a5e9836606e5aaeae7a12fa5585592aa615586085c6650baf65b5604"}) r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000ac0)={0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x57}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x98}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e41d7ad8fb32"}, @NL80211_ATTR_IE={0x18, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x200}}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0x26}}, @ssid={0x0, 0x7, @random="9e9f7826d0f672"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) socket(0x3, 0x3, 0xaa) 15:38:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x7, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000000340)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:38:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@allocspi={0x110, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@dev}, {@in=@multicast2, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x70bd27}, 0x0, 0x81}, [@sec_ctx={0xc, 0x8, {0x8}}, @lastused={0xc}]}, 0x110}}, 0x0) [ 1109.513940][T27861] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1109.538159][T28004] __nla_validate_parse: 7 callbacks suppressed [ 1109.538177][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.803837][T27861] usb 4-1: Using ep0 maxpacket: 16 [ 1110.033918][T27861] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1110.218937][T27861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1110.228070][T27861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.236491][T27861] usb 4-1: Product: syz [ 1110.240796][T27861] usb 4-1: Manufacturer: syz [ 1110.245937][T27861] usb 4-1: SerialNumber: syz [ 1110.521659][T27861] usb 4-1: USB disconnect, device number 50 15:38:18 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x22}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edd9740bdea829c00497b8ccebcfa406"}]}}) 15:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:18 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a80)={'\x00', 0x0, 0x1, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002a80)) 15:38:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@allocspi={0x110, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@dev}, {@in=@multicast2, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x70bd27}, 0x0, 0x81}, [@sec_ctx={0xc, 0x8, {0x8}}, @lastused={0xc}]}, 0x110}}, 0x0) 15:38:18 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:18 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@allocspi={0x110, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@dev}, {@in=@multicast2, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x70bd27}, 0x0, 0x81}, [@sec_ctx={0xc, 0x8, {0x8}}, @lastused={0xc}]}, 0x110}}, 0x0) [ 1111.078161][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1111.099159][T28011] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. 15:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@allocspi={0x110, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@dev}, {@in=@multicast2, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x70bd27}, 0x0, 0x81}, [@sec_ctx={0xc, 0x8, {0x8}}, @lastused={0xc}]}, 0x110}}, 0x0) [ 1111.210228][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:38:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 1111.303265][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1111.319274][T28021] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.384753][T12907] usb 4-1: new high-speed USB device number 51 using dummy_hcd 15:38:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 1111.433442][T28025] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. 15:38:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 1111.566203][T28027] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.589618][T28029] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1111.672890][T12907] usb 4-1: Using ep0 maxpacket: 16 [ 1111.884012][T12907] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1112.074083][T12907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1112.083291][T12907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.091461][T12907] usb 4-1: Product: syz [ 1112.095725][T12907] usb 4-1: Manufacturer: syz [ 1112.100360][T12907] usb 4-1: SerialNumber: syz [ 1112.368633][T12907] usb 4-1: USB disconnect, device number 51 15:38:20 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 15:38:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:20 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002a80)={'\x00', 0x0, 0x1, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002a80)) 15:38:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) [ 1113.001502][T28040] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. 15:38:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xf401) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) 15:38:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 15:38:20 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xf401) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) [ 1113.854164][T28065] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xf401) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) [ 1113.950872][T28065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.042782][T28070] bond1 (unregistering): Released all slaves 15:38:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(r0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xf401) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) 15:38:21 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x48a02afb7101048d, {0x42}}, 0x80) 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) 15:38:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1ec, 0x378, 0x378, 0x1ec, 0x378, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'bond0\x00'}, 0x0, 0x104, 0x128, 0x52020000, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x128}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) 15:38:21 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x48a02afb7101048d, {0x42}}, 0x80) 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(r0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1ec, 0x378, 0x378, 0x1ec, 0x378, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'bond0\x00'}, 0x0, 0x104, 0x128, 0x52020000, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x128}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) 15:38:21 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x48a02afb7101048d, {0x42}}, 0x80) [ 1114.294149][T28096] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1114.408407][T28096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.451317][T28093] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1114.495904][T28093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1114.512787][T28105] bond4 (unregistering): Released all slaves [ 1114.544313][T28106] bond1 (unregistering): Released all slaves 15:38:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(r0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1ec, 0x378, 0x378, 0x1ec, 0x378, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'bond0\x00'}, 0x0, 0x104, 0x128, 0x52020000, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x128}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:21 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x48a02afb7101048d, {0x42}}, 0x80) 15:38:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) 15:38:21 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x14, 0x219, 0x0, 0x0, {0x10, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "b2fd682b9a43fdc9b1"}]}, 0x24}}, 0x0) 15:38:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1ec, 0x378, 0x378, 0x1ec, 0x378, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'bond0\x00'}, 0x0, 0x104, 0x128, 0x52020000, {}, [@common=@unspec=@statistic={{0x38}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x128}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) [ 1114.691409][T28119] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:38:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_restrict_self(r0, 0x0) 15:38:22 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x14, 0x219, 0x0, 0x0, {0x10, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "b2fd682b9a43fdc9b1"}]}, 0x24}}, 0x0) [ 1114.797066][T28119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1114.823645][T28123] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1114.980634][T28123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.998811][T28124] bond4 (unregistering): Released all slaves [ 1115.047769][T28127] bond1 (unregistering): Released all slaves 15:38:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) landlock_restrict_self(r0, 0x0) 15:38:22 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000480)) 15:38:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:22 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x14, 0x219, 0x0, 0x0, {0x10, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "b2fd682b9a43fdc9b1"}]}, 0x24}}, 0x0) 15:38:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 15:38:22 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000480)) 15:38:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) landlock_restrict_self(r0, 0x0) 15:38:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:22 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x14, 0x219, 0x0, 0x0, {0x10, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "b2fd682b9a43fdc9b1"}]}, 0x24}}, 0x0) [ 1115.194878][T28146] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1115.235968][T28146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1115.265947][T28150] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 15:38:22 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000480)) 15:38:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1115.340239][T28150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.446223][T28146] bond4 (unregistering): Released all slaves [ 1115.522414][T28150] bond1 (unregistering): Released all slaves 15:38:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) landlock_restrict_self(r0, 0x0) close(r0) 15:38:22 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000480)) 15:38:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) landlock_restrict_self(r0, 0x0) close(r0) 15:38:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) 15:38:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1115.675996][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.682385][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 15:38:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 15:38:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_virt_wifi\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x20}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0xfe6f) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040203, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:38:23 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 15:38:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 15:38:23 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 15:38:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 15:38:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4a}}) 15:38:23 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4a}}) 15:38:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 15:38:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6) 15:38:23 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4a}}) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) 15:38:23 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) 15:38:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) 15:38:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4a}}) 15:38:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) 15:38:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) 15:38:24 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9808836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f7fcd8ac4109850ce4aa147befcffffffffffffffb146ca1e7611f8b3adb41b3902dc1b9b59fbf1b4a80167ca6b113a1600000000000000000400cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e0000e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c4398424b40fbe29ea5752c76a5e6a44d95382a9e04f9a54000000000000000fe2e7dcf8cadd7c1abc1ed7dc0c0673379b419b41f8b33aa6bcafb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e73b650927d193b4062c4640de2781643edc5e59280c59332e92b52675af5e39db11b53ddd8424fdf33ccdb7f89bfa14f9c2a170600000000000000f49340891825efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6e5e82e881b7bb7f1a407fd4130000a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74fbd519e523a7f0e839fe91774f85a65068de244a70687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cfa768c558a5002601742b27b91724dde6a0f96d3e53e67dcc1f9e5f289c7f519e78794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889dd0400f68564bd00a5ff58a75805eadb00000000000000000000000000000000000000da60561dfc2bce7163eb2ec49dfd5199b4ff962ac13b3ca81024a8abb12165c9e13c2cedea2bc7bd78e0551ffc3c56cecd5fdfa197e644ccba65838f88228cc5fe563cd2e34f40de3a4dc3dfb5dba342b4d18e4143d5ec4bfcf4d4e2583f3f94a73a97837ea6328916361c0b126d412aa26cad7a445e499a58957441a183c0f70acce963ef56d580aa66f0495c497b4be98ae828828d8597ec15feefb527aeb99237d47d19aa5880ad7dddf0cca9c608a47a8ee9991830472fb956e8f059ac963cdf1b4b25655a0c468ed2db858f0e1811909918e0f0e625da0f2fe455f1f71e88c5fae767db513e56bf9313c5a1ef99c36d41"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) [ 1117.024164][T27861] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1117.294153][T27861] usb 3-1: Using ep0 maxpacket: 8 [ 1117.434282][T27861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.445464][T27861] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1117.454660][T27861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.464388][T27861] usb 3-1: config 0 descriptor?? [ 1117.716225][T27861] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1118.136454][T27861] usb 3-1: USB disconnect, device number 30 [ 1118.165580][T27861] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 15:38:25 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x0) 15:38:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) 15:38:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:25 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) [ 1119.034281][T27861] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1119.074122][T27860] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1119.304128][T27861] usb 3-1: Using ep0 maxpacket: 8 [ 1119.363850][T27860] usb 2-1: Using ep0 maxpacket: 8 [ 1119.444087][T27861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.455219][T27861] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1119.464888][T27861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.479290][T27861] usb 3-1: config 0 descriptor?? [ 1119.503974][T27860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.515450][T27860] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1119.529621][T27860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.546981][T27860] usb 2-1: config 0 descriptor?? [ 1119.745661][T27861] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1119.805348][T27860] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1120.174766][T27861] usb 3-1: USB disconnect, device number 31 [ 1120.194685][T27861] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1120.222654][ T6698] usb 2-1: USB disconnect, device number 34 [ 1120.239164][ T6698] iowarrior 2-1:0.0: I/O-Warror #1 now disconnected 15:38:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 15:38:27 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 15:38:27 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x35) prctl$PR_SET_SECUREBITS(0x8, 0x0) 15:38:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x0, &(0x7f0000001400)="a105d7fb93dbbc9d8cefc0230053", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 15:38:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) [ 1121.038496][T27861] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1121.063441][ T6698] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1121.313813][ T6698] usb 2-1: Using ep0 maxpacket: 8 [ 1121.343808][T27861] usb 3-1: Using ep0 maxpacket: 8 [ 1121.434008][ T6698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.450751][ T6698] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1121.464121][T27861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.469539][ T6698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.475136][T27861] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1121.475176][T27861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.505219][T27861] usb 3-1: config 0 descriptor?? [ 1121.515377][ T6698] usb 2-1: config 0 descriptor?? [ 1121.776357][ T6698] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1121.784867][T27861] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1122.207768][ T6698] usb 2-1: USB disconnect, device number 35 [ 1122.225591][T28319] iowarrior 2-1:0.0: Error -19 while submitting URB [ 1122.233932][ T6698] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 1122.258939][T27861] usb 3-1: USB disconnect, device number 32 [ 1122.273232][T27861] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected 15:38:29 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 15:38:29 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x35) prctl$PR_SET_SECUREBITS(0x8, 0x0) 15:38:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:29 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 15:38:29 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:29 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = memfd_create(&(0x7f0000000380)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/74, 0x49) 15:38:29 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 15:38:29 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x35) prctl$PR_SET_SECUREBITS(0x8, 0x0) 15:38:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r0}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 15:38:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:30 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x35) prctl$PR_SET_SECUREBITS(0x8, 0x0) 15:38:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:30 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 15:38:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) [ 1123.104253][T27861] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1123.134044][T27860] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1123.353984][T27861] usb 2-1: Using ep0 maxpacket: 8 [ 1123.423977][T27860] usb 3-1: Using ep0 maxpacket: 8 [ 1123.494236][T27861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.505519][T27861] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1123.515486][T27861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.531126][T27861] usb 2-1: config 0 descriptor?? [ 1123.564266][T27860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.575438][T27860] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1123.588770][T27860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.600550][T27860] usb 3-1: config 0 descriptor?? [ 1123.816040][T27861] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1123.854850][T27860] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1124.255998][T22708] usb 2-1: USB disconnect, device number 36 [ 1124.274757][T22708] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 1124.286528][T27860] usb 3-1: USB disconnect, device number 33 [ 1124.301458][T27860] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected 15:38:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:31 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 15:38:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 2: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 15:38:32 executing program 5: r0 = syz_io_uring_setup(0x10c5, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="c8", 0x1}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40008101}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 15:38:32 executing program 5: r0 = syz_io_uring_setup(0x10c5, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="c8", 0x1}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40008101}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0xc, 0x117, 0x3}}], 0xc}}], 0x2, 0x0) 15:38:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0xc, 0x117, 0x3}}], 0xc}}], 0x2, 0x0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 5: r0 = syz_io_uring_setup(0x10c5, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="c8", 0x1}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40008101}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0xc, 0x117, 0x3}}], 0xc}}], 0x2, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x96000, 0x2, 0x11, r1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) 15:38:32 executing program 5: r0 = syz_io_uring_setup(0x10c5, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="c8", 0x1}], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40008101}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0xc, 0x117, 0x3}}], 0xc}}], 0x2, 0x0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:32 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) 15:38:32 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:32 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:32 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) [ 1125.875200][T27860] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1126.143967][T27860] usb 5-1: Using ep0 maxpacket: 8 [ 1126.273999][T27860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1126.282110][T27860] usb 5-1: config 0 has no interface number 0 [ 1126.288596][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1126.300126][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1126.311435][T27860] usb 5-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1126.324903][T27860] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1126.331795][T27860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1126.341311][T27860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.351693][T27860] usb 5-1: config 0 descriptor?? [ 1126.412402][T27860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input61 [ 1126.619248][T22708] usb 5-1: USB disconnect, device number 28 [ 1126.634857][T22708] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:38:34 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) 15:38:34 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) 15:38:34 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:34 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) 15:38:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) 15:38:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) 15:38:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:34 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 15:38:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) [ 1127.493912][T27860] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1127.743850][T27860] usb 5-1: Using ep0 maxpacket: 8 [ 1127.864021][T27860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1127.872142][T27860] usb 5-1: config 0 has no interface number 0 [ 1127.879379][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1127.890591][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.902045][T27860] usb 5-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1127.915923][T27860] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1127.922651][T27860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1127.932060][T27860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.942602][T27860] usb 5-1: config 0 descriptor?? [ 1127.993609][T27860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input62 [ 1128.216024][T27860] usb 5-1: USB disconnect, device number 29 [ 1128.233937][T27860] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:38:35 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000340)) [ 1129.083918][T27860] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1129.343994][T27860] usb 5-1: Using ep0 maxpacket: 8 [ 1129.494129][T27860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1129.502431][T27860] usb 5-1: config 0 has no interface number 0 [ 1129.509387][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1129.520793][T27860] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.532237][T27860] usb 5-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1129.545917][T27860] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1129.552758][T27860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1129.562254][T27860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.582866][T27860] usb 5-1: config 0 descriptor?? [ 1129.626536][T27860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input63 [ 1129.874853][T27860] usb 5-1: USB disconnect, device number 30 [ 1129.893862][T27860] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:38:37 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:37 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 15:38:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:37 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x41000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/94, 0x5e, 0x0, 0x0}, 0x58) 15:38:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:37 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) [ 1130.744108][ T6698] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1130.993948][ T6698] usb 5-1: Using ep0 maxpacket: 8 [ 1131.114311][ T6698] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1131.122420][ T6698] usb 5-1: config 0 has no interface number 0 [ 1131.129726][ T6698] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1131.140993][ T6698] usb 5-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1131.152857][ T6698] usb 5-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1131.166455][ T6698] usb 5-1: config 0 interface 65 has no altsetting 0 [ 1131.173632][ T6698] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1131.183474][ T6698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.194463][ T6698] usb 5-1: config 0 descriptor?? [ 1131.248509][ T6698] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input64 [ 1131.527324][ T6698] usb 5-1: USB disconnect, device number 31 [ 1131.544130][ T6698] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:38:40 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303", @ANYBLOB="91"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) close(r0) 15:38:40 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x41000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/94, 0x5e, 0x0, 0x0}, 0x58) 15:38:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:40 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 15:38:40 executing program 4: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:40 executing program 4: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:40 executing program 4: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180), 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:43 executing program 4: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:43 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x41000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/94, 0x5e, 0x0, 0x0}, 0x58) 15:38:43 executing program 1: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:43 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 15:38:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:43 executing program 4: r0 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x1, 0x0, @raw_data}) 15:38:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:43 executing program 1: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:43 executing program 4: r0 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x1, 0x0, @raw_data}) 15:38:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:43 executing program 1: socket(0x1e, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:38:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:44 executing program 1: unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 15:38:44 executing program 4: r0 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x1, 0x0, @raw_data}) 15:38:44 executing program 1: unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 15:38:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x58}}, 0x0) 15:38:44 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x41000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/94, 0x5e, 0x0, 0x0}, 0x58) 15:38:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:44 executing program 4: r0 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x1, 0x0, @raw_data}) 15:38:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x58}}, 0x0) 15:38:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0xc}}, @ip_retopts={{0xc}}], 0x18}, 0x0) 15:38:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:44 executing program 1: unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 15:38:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0xc}}, @ip_retopts={{0xc}}], 0x18}, 0x0) 15:38:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x58}}, 0x0) 15:38:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x58}}, 0x0) 15:38:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0xc}}, @ip_retopts={{0xc}}], 0x18}, 0x0) 15:38:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000200)={{0x0, 0x3, 0x80}, "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", "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"}) 15:38:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000011f000/0x2000)=nil, 0x400000, 0x0, 0x2}) 15:38:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:45 executing program 1: unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x6c, 0x705, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}]}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 15:38:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0xc}}, @ip_retopts={{0xc}}], 0x18}, 0x0) 15:38:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) 15:38:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) 15:38:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 15:38:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000011f000/0x2000)=nil, 0x400000, 0x0, 0x2}) 15:38:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) 15:38:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:46 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000011f000/0x2000)=nil, 0x400000, 0x0, 0x2}) 15:38:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) 15:38:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x0, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='e', 0x1) 15:38:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 15:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='e', 0x1) 15:38:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:46 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000011f000/0x2000)=nil, 0x400000, 0x0, 0x2}) 15:38:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='e', 0x1) 15:38:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='e', 0x1) 15:38:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 15:38:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) 15:38:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) 15:38:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) 15:38:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000200)=0x40000001, 0x86, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 15:38:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) 15:38:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 15:38:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 15:38:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 15:38:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) [ 1143.963253][T28826] input: syz1 as /devices/virtual/input/input65 [ 1143.973902][T28826] input: failed to attach handler leds to device input65, error: -6 15:38:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 15:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 15:38:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getpriority(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) timer_create(0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8, &(0x7f0000000240)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(r3, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 15:38:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 15:38:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 15:38:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="74f1c50b8ddc41cc4e7e8599f68522990721756f07fe139546a730d733146bca6cc59b18ca2389e6cf9bc14ce7cae7ede21312ccbefd4a0424790c9cd125fd1a49950c4d50ee7434ff5552474168906e923a20a94b56e3700dfa14374bd3cebe6946e475e4803b24280f62babf5ff5b2f2e3925e5ef33c647c07031dad3a6e08bce4d50c22ee6f75f4dbcc6b7f0d7b36e992ed6846d6f35663c9b46e184e400600000000000000fd96b0bf6cbcdd34795f038c5b6b3271a9af16e6fa8941256a3535c4dc121b4c55e2dba252abedab03d07250d5131b6cd7ef4e5bba53c51295591916293af567172da6bb6dedd15c99066ddced96750f21ecc9664db8d109f0a4afbf612a9cfd84733e3165ca7813104fdad287d343fbf2d2787d7d4565ce9939071d22c81d855a26449a5e09469878cbfa1cc1f8c28bd8d607bf8f05138ad17db26de64b0d7a12c95a120e810415dbb38a47151a2dcb3af8e1da3871817a18b215ddd737a0e8da234dbfed5ef0d6dcb2d4810b97311512e320c1c75cd970d9797fa6b413d0442b8ade74faad61d990eaf0a0134ea5c873da9da1c1e018681aef745c287be38c6a87c8e1d950ff772948efc03744b83658c7bd0f7c36383bc7b8ef58dffbab73a522150ce020102dda2084ad335239778a823a7d"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1144.974013][T28835] input: syz1 as /devices/virtual/input/input66 [ 1145.039668][T28835] input: failed to attach handler leds to device input66, error: -6 15:38:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) 15:38:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) [ 1145.260207][T28852] input: syz1 as /devices/virtual/input/input67 [ 1145.343934][T28852] input: failed to attach handler leds to device input67, error: -6 15:38:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) [ 1145.625595][T28864] input: syz1 as /devices/virtual/input/input68 [ 1145.631925][T28864] input: failed to attach handler leds to device input68, error: -6 [ 1145.725448][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 1145.725498][ T27] audit: type=1326 audit(1678721932.879:30892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28842 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x0 15:38:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x0, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) [ 1145.924983][T28875] input: syz1 as /devices/virtual/input/input69 [ 1145.931293][T28875] input: failed to attach handler leds to device input69, error: -6 [ 1145.963580][T28877] input: syz1 as /devices/virtual/input/input70 15:38:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) [ 1146.129512][T28877] input: failed to attach handler leds to device input70, error: -6 15:38:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 15:38:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {}, 0x11}, 0x45c) 15:38:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) 15:38:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) [ 1146.724610][T28894] input: syz1 as /devices/virtual/input/input71 [ 1146.730924][T28894] input: failed to attach handler leds to device input71, error: -6 15:38:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="74f1c50b8ddc41cc4e7e8599f68522990721756f07fe139546a730d733146bca6cc59b18ca2389e6cf9bc14ce7cae7ede21312ccbefd4a0424790c9cd125fd1a49950c4d50ee7434ff5552474168906e923a20a94b56e3700dfa14374bd3cebe6946e475e4803b24280f62babf5ff5b2f2e3925e5ef33c647c07031dad3a6e08bce4d50c22ee6f75f4dbcc6b7f0d7b36e992ed6846d6f35663c9b46e184e400600000000000000fd96b0bf6cbcdd34795f038c5b6b3271a9af16e6fa8941256a3535c4dc121b4c55e2dba252abedab03d07250d5131b6cd7ef4e5bba53c51295591916293af567172da6bb6dedd15c99066ddced96750f21ecc9664db8d109f0a4afbf612a9cfd84733e3165ca7813104fdad287d343fbf2d2787d7d4565ce9939071d22c81d855a26449a5e09469878cbfa1cc1f8c28bd8d607bf8f05138ad17db26de64b0d7a12c95a120e810415dbb38a47151a2dcb3af8e1da3871817a18b215ddd737a0e8da234dbfed5ef0d6dcb2d4810b97311512e320c1c75cd970d9797fa6b413d0442b8ade74faad61d990eaf0a0134ea5c873da9da1c1e018681aef745c287be38c6a87c8e1d950ff772948efc03744b83658c7bd0f7c36383bc7b8ef58dffbab73a522150ce020102dda2084ad335239778a823a7d"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 15:38:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) [ 1147.232207][ T27] audit: type=1326 audit(1678721934.379:30893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x0 [ 1147.681737][ T27] audit: type=1326 audit(1678721934.819:30894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28913 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 15:38:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(r0) 15:38:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) 15:38:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(r0) 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) close(r0) [ 1151.374983][ T27] audit: type=1326 audit(1678721938.529:30895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(0xffffffffffffffff) 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(0xffffffffffffffff) 15:38:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r0, 0x0) close(0xffffffffffffffff) [ 1151.773548][ T27] audit: type=1326 audit(1678721938.569:30896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28925 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x0 [ 1151.845371][ T27] audit: type=1326 audit(1678721938.589:30897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28933 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x0 15:38:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1152.315389][ T27] audit: type=1326 audit(1678721938.589:30898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28927 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 1153.079686][ T27] audit: type=1326 audit(1678721940.229:30899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28966 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4c579 code=0x0 15:39:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="74f1c50b8ddc41cc4e7e8599f68522990721756f07fe139546a730d733146bca6cc59b18ca2389e6cf9bc14ce7cae7ede21312ccbefd4a0424790c9cd125fd1a49950c4d50ee7434ff5552474168906e923a20a94b56e3700dfa14374bd3cebe6946e475e4803b24280f62babf5ff5b2f2e3925e5ef33c647c07031dad3a6e08bce4d50c22ee6f75f4dbcc6b7f0d7b36e992ed6846d6f35663c9b46e184e400600000000000000fd96b0bf6cbcdd34795f038c5b6b3271a9af16e6fa8941256a3535c4dc121b4c55e2dba252abedab03d07250d5131b6cd7ef4e5bba53c51295591916293af567172da6bb6dedd15c99066ddced96750f21ecc9664db8d109f0a4afbf612a9cfd84733e3165ca7813104fdad287d343fbf2d2787d7d4565ce9939071d22c81d855a26449a5e09469878cbfa1cc1f8c28bd8d607bf8f05138ad17db26de64b0d7a12c95a120e810415dbb38a47151a2dcb3af8e1da3871817a18b215ddd737a0e8da234dbfed5ef0d6dcb2d4810b97311512e320c1c75cd970d9797fa6b413d0442b8ade74faad61d990eaf0a0134ea5c873da9da1c1e018681aef745c287be38c6a87c8e1d950ff772948efc03744b83658c7bd0f7c36383bc7b8ef58dffbab73a522150ce020102dda2084ad335239778a823a7d"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) [ 1154.736055][ T27] audit: type=1326 audit(1678721941.889:30900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28974 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58579 code=0x0 15:39:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1159.526691][ T27] audit: type=1326 audit(1678721946.679:30901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 15:39:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) [ 1160.149630][ T27] audit: type=1326 audit(1678721947.299:30902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28992 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 1160.599271][ T27] audit: type=1326 audit(1678721947.749:30903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29005 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 [ 1160.986778][ T27] audit: type=1326 audit(1678721948.139:30904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28986 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x0 15:39:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) 15:39:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MTU={0x8, 0x4, 0x1c3}]}, 0x34}}, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x4, 0xff, 0x7f) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffff9c1, 0x2, 0x6d3f, 0xffffffff}, 0x10) [ 1163.322372][ T27] audit: type=1326 audit(1678721950.469:30905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29020 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4c579 code=0x0 15:39:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r3, r2, 0x0, 0x2e00) 15:39:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1166.262393][ T27] audit: type=1326 audit(1678721953.409:30906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29042 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x0 15:39:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:39:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 15:39:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "6943e887"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x90}}, 0x0) [ 1168.044964][ T27] audit: type=1326 audit(1678721955.199:30907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 15:39:15 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) [ 1168.189094][ T27] audit: type=1326 audit(1678721955.259:30908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29056 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x0 [ 1168.430610][T29074] netem: incorrect ge model size [ 1168.501251][T29074] netem: change failed 15:39:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "6943e887"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x90}}, 0x0) [ 1168.605322][ T27] audit: type=1326 audit(1678721955.759:30909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29051 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4c579 code=0x0 [ 1168.831395][T29083] netem: incorrect ge model size [ 1168.837426][T29083] netem: change failed 15:39:20 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "6943e887"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x90}}, 0x0) 15:39:20 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:20 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) [ 1173.531720][T29094] netem: incorrect ge model size [ 1173.564732][T29094] netem: change failed 15:39:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spi_set_cs\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000380)=""/135, 0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}) syz_clone3(&(0x7f0000000480)={0x10000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f00000027c0)=""/4096, &(0x7f0000000440)=[0x0], 0x1}, 0x58) syz_clone(0x44800500, &(0x7f0000000180)="300472fef33e40675f418907fd41cf0a019626cf21dfaacd80e6cd8727e616afe47345d4dce913ba46583da7d1cd5186bf5ccfad399398f1690ffe75bf8dd13bc9c163d5ef9ba10d28b77420a8bac95e7bf9692fde17a5838f23832f012c49d4058d45181cfcbad83a", 0x69, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000280)="e169f1775fb472f3de3b6d6820911d089ae145a7f448aa6d5c91c64980730d4d2e8b4d0164c747c53e097be68ffffc51a4ffef0b17937460") ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e25, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1174.155222][ T27] audit: type=1326 audit(1678721961.309:30910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29102 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 15:39:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "6943e887"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x90}}, 0x0) 15:39:21 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:21 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:21 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:21 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) [ 1174.562353][T29113] netem: incorrect ge model size [ 1174.580712][T29113] netem: change failed 15:39:22 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:22 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:22 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:22 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) [ 1177.115392][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.121741][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 15:39:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:24 executing program 5: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280), 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r2, 0x0, 0x0) setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) rmdir(0x0) timer_create(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x70b9d620eb40864a) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x41, 0x3}, &(0x7f0000000300)) bind$unix(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/138, 0x8a) signalfd4(r2, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 15:39:24 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000140)) 15:39:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:24 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000140)) 15:39:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:26 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000140)) 15:39:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:26 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3, 0x0, &(0x7f0000000140)) 15:39:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) [ 1179.803234][T29188] binder: BINDER_SET_CONTEXT_MGR already set 15:39:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) [ 1179.871394][T29188] binder: 29185:29188 ioctl 40046207 0 returned -16 15:39:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 15:39:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001080)) 15:39:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 15:39:32 executing program 4: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x29f, 0x7fff, 0x69, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7ff, 0x43, 0x5, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15:39:32 executing program 4: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x29f, 0x7fff, 0x69, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7ff, 0x43, 0x5, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15:39:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 15:39:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 15:39:32 executing program 4: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x29f, 0x7fff, 0x69, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7ff, 0x43, 0x5, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15:39:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 15:39:37 executing program 4: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x29f, 0x7fff, 0x69, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7ff, 0x43, 0x5, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15:39:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:37 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 15:39:37 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)="877277e52c1943f041802c03655924293a664a51f7c9179a7485f54d17c37cf8360ff16658986492b214774202a45d270f55534a9f0076fa8bfd004875cc61e580cd71083906f85d08b7afb37ad036980b8c3663d853e0e979075b95e63601350c79cd092ef7a5903a3b7c6965d98b0018162c1216cbeb0bb8f5829239766765d8dd9afd17085895c86c70a4d33c7a8eaf5a249d755f9cd6c39eee242c44c15248e9425fb12d274b43abc879a4c5a4fad5bd2b7b48e41d18ac", 0xb9}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f00000004c0)={'syz1', "39e4784e275c01bfca7f0f8505023ac34bf012c0b676c62b386db2ee296568061279a70ea201413307bd83bc9d5df3d1a3f68f5263bee55959491ab27845d00dc2effe605baef6ebb27c5dcd0084252ad596627b0468e3588ed94ecfae5c10803b1ec2d5638cb9f9ddff074a14d01ada11cc9f0eb193fbefedbfde5e7d34f21c350bdfb732c45dd7"}, 0x8c) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000140)=""/70, 0x46}], 0x3) splice(r0, 0x0, r3, 0x0, 0xebe, 0x0) 15:39:37 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 15:39:37 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)="877277e52c1943f041802c03655924293a664a51f7c9179a7485f54d17c37cf8360ff16658986492b214774202a45d270f55534a9f0076fa8bfd004875cc61e580cd71083906f85d08b7afb37ad036980b8c3663d853e0e979075b95e63601350c79cd092ef7a5903a3b7c6965d98b0018162c1216cbeb0bb8f5829239766765d8dd9afd17085895c86c70a4d33c7a8eaf5a249d755f9cd6c39eee242c44c15248e9425fb12d274b43abc879a4c5a4fad5bd2b7b48e41d18ac", 0xb9}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f00000004c0)={'syz1', "39e4784e275c01bfca7f0f8505023ac34bf012c0b676c62b386db2ee296568061279a70ea201413307bd83bc9d5df3d1a3f68f5263bee55959491ab27845d00dc2effe605baef6ebb27c5dcd0084252ad596627b0468e3588ed94ecfae5c10803b1ec2d5638cb9f9ddff074a14d01ada11cc9f0eb193fbefedbfde5e7d34f21c350bdfb732c45dd7"}, 0x8c) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000140)=""/70, 0x46}], 0x3) splice(r0, 0x0, r3, 0x0, 0xebe, 0x0) 15:39:37 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 15:39:37 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 15:39:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="81b4c0a49be2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f165fd", 0x10, 0x0, 0x0, @private2, @local, {[@dstopts={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim]}]}}}}}, 0x0) 15:39:43 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)="877277e52c1943f041802c03655924293a664a51f7c9179a7485f54d17c37cf8360ff16658986492b214774202a45d270f55534a9f0076fa8bfd004875cc61e580cd71083906f85d08b7afb37ad036980b8c3663d853e0e979075b95e63601350c79cd092ef7a5903a3b7c6965d98b0018162c1216cbeb0bb8f5829239766765d8dd9afd17085895c86c70a4d33c7a8eaf5a249d755f9cd6c39eee242c44c15248e9425fb12d274b43abc879a4c5a4fad5bd2b7b48e41d18ac", 0xb9}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f00000004c0)={'syz1', "39e4784e275c01bfca7f0f8505023ac34bf012c0b676c62b386db2ee296568061279a70ea201413307bd83bc9d5df3d1a3f68f5263bee55959491ab27845d00dc2effe605baef6ebb27c5dcd0084252ad596627b0468e3588ed94ecfae5c10803b1ec2d5638cb9f9ddff074a14d01ada11cc9f0eb193fbefedbfde5e7d34f21c350bdfb732c45dd7"}, 0x8c) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000140)=""/70, 0x46}], 0x3) splice(r0, 0x0, r3, 0x0, 0xebe, 0x0) 15:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='-', 0x1}]) 15:39:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) unshare(0x6c060000) accept4(r3, 0x0, &(0x7f0000000380), 0x80800) 15:39:43 executing program 1: syz_clone(0x40800000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 15:39:43 executing program 4: pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)="877277e52c1943f041802c03655924293a664a51f7c9179a7485f54d17c37cf8360ff16658986492b214774202a45d270f55534a9f0076fa8bfd004875cc61e580cd71083906f85d08b7afb37ad036980b8c3663d853e0e979075b95e63601350c79cd092ef7a5903a3b7c6965d98b0018162c1216cbeb0bb8f5829239766765d8dd9afd17085895c86c70a4d33c7a8eaf5a249d755f9cd6c39eee242c44c15248e9425fb12d274b43abc879a4c5a4fad5bd2b7b48e41d18ac", 0xb9}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f00000004c0)={'syz1', "39e4784e275c01bfca7f0f8505023ac34bf012c0b676c62b386db2ee296568061279a70ea201413307bd83bc9d5df3d1a3f68f5263bee55959491ab27845d00dc2effe605baef6ebb27c5dcd0084252ad596627b0468e3588ed94ecfae5c10803b1ec2d5638cb9f9ddff074a14d01ada11cc9f0eb193fbefedbfde5e7d34f21c350bdfb732c45dd7"}, 0x8c) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000140)=""/70, 0x46}], 0x3) splice(r0, 0x0, r3, 0x0, 0xebe, 0x0) 15:39:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="81b4c0a49be2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f165fd", 0x10, 0x0, 0x0, @private2, @local, {[@dstopts={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim]}]}}}}}, 0x0) 15:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='-', 0x1}]) 15:39:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 15:39:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="81b4c0a49be2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f165fd", 0x10, 0x0, 0x0, @private2, @local, {[@dstopts={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim]}]}}}}}, 0x0) 15:39:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="81b4c0a49be2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f165fd", 0x10, 0x0, 0x0, @private2, @local, {[@dstopts={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim]}]}}}}}, 0x0) 15:39:43 executing program 1: syz_clone(0x40800000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 15:39:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='-', 0x1}]) 15:39:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1196.964953][T29324] sctp: [Deprecated]: syz-executor.2 (pid 29324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.964953][T29324] Use struct sctp_sack_info instead 15:39:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='-', 0x1}]) 15:39:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 15:39:47 executing program 1: syz_clone(0x40800000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 15:39:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 15:39:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1200.004427][T29346] sctp: [Deprecated]: syz-executor.5 (pid 29346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.004427][T29346] Use struct sctp_sack_info instead 15:39:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) [ 1200.127810][T29344] sctp: [Deprecated]: syz-executor.3 (pid 29344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.127810][T29344] Use struct sctp_sack_info instead [ 1200.162771][T29356] sctp: [Deprecated]: syz-executor.0 (pid 29356) Use of struct sctp_assoc_value in delayed_ack socket option. 15:39:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1200.162771][T29356] Use struct sctp_sack_info instead [ 1200.252133][T29335] sctp: [Deprecated]: syz-executor.2 (pid 29335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.252133][T29335] Use struct sctp_sack_info instead 15:39:47 executing program 1: syz_clone(0x40800000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 15:39:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1200.551315][T29369] sctp: [Deprecated]: syz-executor.2 (pid 29369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.551315][T29369] Use struct sctp_sack_info instead [ 1200.639525][T29361] sctp: [Deprecated]: syz-executor.4 (pid 29361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.639525][T29361] Use struct sctp_sack_info instead 15:39:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1201.088180][T29375] sctp: [Deprecated]: syz-executor.2 (pid 29375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1201.088180][T29375] Use struct sctp_sack_info instead [ 1201.143871][T29379] sctp: [Deprecated]: syz-executor.3 (pid 29379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1201.143871][T29379] Use struct sctp_sack_info instead 15:39:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="b4000000297cf3c9f64d1119f5d0e2b74ae9e407f085a8a4cf388a1a46bb5ea0138e7da1af31598e2142fbf5ccd28ee4d46973d05cd95a3182bcaa0f0d0a489a7a96d592678800aa7aaf3a3f0ada80a53e5d9003eb1b8e9ca754afb02d75149b4d5eb0fbf74c9fec73ed35a7e6030365a0a926cd25ecf3ab9f0a60a557317102a32eae5b55b4e094d0fb924130c0891d32e40fa5c29c5e90429dd5281101a41aa33c5c46e9b3b9f0b5c3ad9cbee01accef4a954bf14ddd7c696350163bb4e916ec9d8e23c363399219fc63bc2b5fbb52e83bcf9b14a9b8d9df630c90e634f9c3c86734ffd4325ae8716946eece6cb477e5f23f2eac1197a42d2452baa62123d3307b5357f7f6eb3db63dc9f30f72e9704e65a108425a11704f136b3c4e32c928ed9c0e27d21644be62d062b470b107459da8d63f3d56f46b1f5a7c2ac24f6b5d8ce8795c776188f5fabf7366d9d0db73b2805e173ab14e97e61149fac7359c3a14ce061cc16feabbcc7f34391fb156"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1201.366805][T29393] sctp: [Deprecated]: syz-executor.5 (pid 29393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1201.366805][T29393] Use struct sctp_sack_info instead 15:39:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="b4000000297cf3c9f64d1119f5d0e2b74ae9e407f085a8a4cf388a1a46bb5ea0138e7da1af31598e2142fbf5ccd28ee4d46973d05cd95a3182bcaa0f0d0a489a7a96d592678800aa7aaf3a3f0ada80a53e5d9003eb1b8e9ca754afb02d75149b4d5eb0fbf74c9fec73ed35a7e6030365a0a926cd25ecf3ab9f0a60a557317102a32eae5b55b4e094d0fb924130c0891d32e40fa5c29c5e90429dd5281101a41aa33c5c46e9b3b9f0b5c3ad9cbee01accef4a954bf14ddd7c696350163bb4e916ec9d8e23c363399219fc63bc2b5fbb52e83bcf9b14a9b8d9df630c90e634f9c3c86734ffd4325ae8716946eece6cb477e5f23f2eac1197a42d2452baa62123d3307b5357f7f6eb3db63dc9f30f72e9704e65a108425a11704f136b3c4e32c928ed9c0e27d21644be62d062b470b107459da8d63f3d56f46b1f5a7c2ac24f6b5d8ce8795c776188f5fabf7366d9d0db73b2805e173ab14e97e61149fac7359c3a14ce061cc16feabbcc7f34391fb156"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1202.192154][T29424] sctp_setsockopt_delayed_ack: 7 callbacks suppressed [ 1202.192173][T29424] sctp: [Deprecated]: syz-executor.4 (pid 29424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.192173][T29424] Use struct sctp_sack_info instead [ 1202.192589][T29416] sctp: [Deprecated]: syz-executor.3 (pid 29416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.192589][T29416] Use struct sctp_sack_info instead 15:39:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1202.427064][T29419] sctp: [Deprecated]: syz-executor.2 (pid 29419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.427064][T29419] Use struct sctp_sack_info instead 15:39:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1202.485966][T29435] sctp: [Deprecated]: syz-executor.5 (pid 29435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.485966][T29435] Use struct sctp_sack_info instead 15:39:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) [ 1202.575219][T29434] sctp: [Deprecated]: syz-executor.1 (pid 29434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.575219][T29434] Use struct sctp_sack_info instead 15:39:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) [ 1202.726040][T29448] sctp: [Deprecated]: syz-executor.0 (pid 29448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.726040][T29448] Use struct sctp_sack_info instead [ 1202.755171][T29433] sctp: [Deprecated]: syz-executor.4 (pid 29433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.755171][T29433] Use struct sctp_sack_info instead 15:39:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) 15:39:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) [ 1202.772144][T29446] sctp: [Deprecated]: syz-executor.3 (pid 29446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.772144][T29446] Use struct sctp_sack_info instead 15:39:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xff80, 0x10}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0xab}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x4}, &(0x7f0000000280)=0x9c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) close(r0) 15:39:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x1}, 0x0) [ 1203.076527][T29458] sctp: [Deprecated]: syz-executor.1 (pid 29458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.076527][T29458] Use struct sctp_sack_info instead [ 1203.130059][T29455] sctp: [Deprecated]: syz-executor.4 (pid 29455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.130059][T29455] Use struct sctp_sack_info instead 15:39:50 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)) 15:39:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x1}, 0x0) 15:39:50 executing program 3: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1203.466317][T29472] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1203.499829][T29472] team0: left allmulticast mode [ 1203.518559][T29472] team_slave_0: left allmulticast mode [ 1203.529817][T29472] team_slave_1: left allmulticast mode [ 1203.539150][T29472] team0: left promiscuous mode [ 1203.551057][T29472] team_slave_0: left promiscuous mode [ 1203.558433][T29472] team_slave_1: left promiscuous mode [ 1203.572104][T29472] bridge0: port 3(team0) entered disabled state [ 1203.582953][T29472] batman_adv: batadv0: Adding interface: team0 [ 1203.589325][T29472] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.618390][T29472] batman_adv: batadv0: Interface activated: team0 15:39:50 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)) 15:39:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) 15:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c700)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 15:39:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 15:39:50 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)) 15:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c700)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) [ 1203.718509][T29472] batman_adv: batadv0: Interface deactivated: team0 15:39:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x1}, 0x0) [ 1203.772904][T29473] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 15:39:51 executing program 4: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)) 15:39:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c700)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) [ 1203.821187][T29473] batman_adv: batadv0: Removing interface: team0 [ 1203.860180][T29473] bridge0: port 3(team0) entered blocking state [ 1203.879637][T29473] bridge0: port 3(team0) entered disabled state [ 1203.908845][T29473] team0: entered allmulticast mode [ 1203.914518][T29473] team_slave_0: entered allmulticast mode [ 1203.921279][T29473] team_slave_1: entered allmulticast mode [ 1204.039182][T29473] team0: entered promiscuous mode [ 1204.046680][T29473] team_slave_0: entered promiscuous mode [ 1204.055475][T29473] team_slave_1: entered promiscuous mode [ 1204.062778][T29473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.074673][T29481] __nla_validate_parse: 4 callbacks suppressed 15:39:51 executing program 3: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 15:39:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c700)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 15:39:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "837ad552eed22b08", "a4326bf47c648997a7347f1767b503c5", 'ZD\x00\b', "ffffffffffffffff"}, 0x28) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='@', 0x1}], 0x1) sendfile(r1, r0, 0x0, 0x9) [ 1204.074691][T29481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:39:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1204.245267][T29501] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1204.274938][T29501] team0: left allmulticast mode [ 1204.279980][T29501] team_slave_0: left allmulticast mode [ 1204.286911][T29501] team_slave_1: left allmulticast mode [ 1204.292575][T29501] team0: left promiscuous mode [ 1204.300037][T29501] team_slave_0: left promiscuous mode [ 1204.312776][T29501] team_slave_1: left promiscuous mode [ 1204.330185][T29501] bridge0: port 3(team0) entered disabled state [ 1204.347837][T29501] batman_adv: batadv0: Adding interface: team0 [ 1204.354994][T29501] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.382879][T29501] batman_adv: batadv0: Interface activated: team0 [ 1204.412621][T29501] batman_adv: batadv0: Interface deactivated: team0 [ 1204.440143][T29504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1204.470047][T29506] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1204.482830][T29506] batman_adv: batadv0: Removing interface: team0 [ 1204.501307][T29506] bridge0: port 3(team0) entered blocking state [ 1204.512470][T29506] bridge0: port 3(team0) entered disabled state 15:39:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) 15:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)={0x1c, 0x12, 0x321, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x1}, 0x0) 15:39:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 15:39:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "837ad552eed22b08", "a4326bf47c648997a7347f1767b503c5", 'ZD\x00\b', "ffffffffffffffff"}, 0x28) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='@', 0x1}], 0x1) sendfile(r1, r0, 0x0, 0x9) 15:39:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "837ad552eed22b08", "a4326bf47c648997a7347f1767b503c5", 'ZD\x00\b', "ffffffffffffffff"}, 0x28) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='@', 0x1}], 0x1) sendfile(r1, r0, 0x0, 0x9) [ 1204.521763][T29506] team0: entered allmulticast mode [ 1204.531363][T29506] team_slave_0: entered allmulticast mode [ 1204.545061][T29506] team_slave_1: entered allmulticast mode [ 1204.591618][T29506] team0: entered promiscuous mode 15:39:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "837ad552eed22b08", "a4326bf47c648997a7347f1767b503c5", 'ZD\x00\b', "ffffffffffffffff"}, 0x28) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='@', 0x1}], 0x1) sendfile(r1, r0, 0x0, 0x9) [ 1204.599140][T29506] team_slave_0: entered promiscuous mode [ 1204.638070][T29506] team_slave_1: entered promiscuous mode 15:39:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) 15:39:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1204.690023][T29506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.725348][T29515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:39:52 executing program 4: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 15:39:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 15:39:52 executing program 3: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1204.981331][T29533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1205.021553][T29534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1205.061257][T29531] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1205.071507][T29531] batman_adv: batadv0: Adding interface: team0 [ 1205.080955][T29531] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.108840][T29531] batman_adv: batadv0: Interface activated: team0 [ 1205.122935][T29531] batman_adv: batadv0: Interface deactivated: team0 [ 1205.148281][T29536] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1205.165226][T29536] team0: left allmulticast mode [ 1205.171976][T29536] team_slave_0: left allmulticast mode [ 1205.179339][T29536] team_slave_1: left allmulticast mode [ 1205.185364][T29536] team0: left promiscuous mode [ 1205.190960][T29536] team_slave_0: left promiscuous mode [ 1205.203565][T29536] team_slave_1: left promiscuous mode [ 1205.212769][T29536] bridge0: port 3(team0) entered disabled state [ 1205.228373][T29536] batman_adv: batadv0: Adding interface: team0 [ 1205.236139][T29536] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.270299][T29536] batman_adv: batadv0: Interface activated: team0 [ 1205.280758][T29536] batman_adv: batadv0: Interface deactivated: team0 [ 1205.310012][T29537] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1205.334591][T29537] batman_adv: batadv0: Removing interface: team0 [ 1205.359037][T29537] bridge0: port 3(team0) entered blocking state [ 1205.368595][T29537] bridge0: port 3(team0) entered disabled state [ 1205.376749][T29537] team0: entered allmulticast mode [ 1205.382238][T29537] team_slave_0: entered allmulticast mode [ 1205.388206][T29537] team_slave_1: entered allmulticast mode [ 1205.397072][T29537] team0: entered promiscuous mode [ 1205.402423][T29537] team_slave_0: entered promiscuous mode [ 1205.411087][T29537] team_slave_1: entered promiscuous mode [ 1205.420249][T29537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.429013][T29539] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1205.439403][T29539] batman_adv: batadv0: Removing interface: team0 [ 1205.456964][T29539] bridge0: port 3(team0) entered blocking state [ 1205.475400][T29539] bridge0: port 3(team0) entered disabled state 15:39:52 executing program 4: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 15:39:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) [ 1205.494532][T29539] team0: entered allmulticast mode [ 1205.503525][T29539] team_slave_0: entered allmulticast mode [ 1205.516301][T29539] team_slave_1: entered allmulticast mode 15:39:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 15:39:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1205.571418][T29539] team0: entered promiscuous mode [ 1205.578031][T29539] team_slave_0: entered promiscuous mode [ 1205.598893][T29539] team_slave_1: entered promiscuous mode [ 1205.611146][T29539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.643978][T29542] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1205.670963][T29542] team0: left allmulticast mode [ 1205.683533][T29542] team_slave_0: left allmulticast mode 15:39:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) [ 1205.691898][T29542] team_slave_1: left allmulticast mode [ 1205.703106][T29542] team0: left promiscuous mode [ 1205.708579][T29542] team_slave_0: left promiscuous mode 15:39:52 executing program 3: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1205.741208][T29542] team_slave_1: left promiscuous mode [ 1205.763460][T29542] bridge0: port 3(team0) entered disabled state [ 1205.822089][T29542] batman_adv: batadv0: Adding interface: team0 [ 1205.828954][T29542] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.855187][T29542] batman_adv: batadv0: Interface activated: team0 [ 1205.877259][T29542] batman_adv: batadv0: Interface deactivated: team0 [ 1205.892712][T29545] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1205.901988][T29545] batman_adv: batadv0: Removing interface: team0 [ 1205.921620][T29545] bridge0: port 3(team0) entered blocking state [ 1205.928942][T29545] bridge0: port 3(team0) entered disabled state [ 1205.937012][T29545] team0: entered allmulticast mode [ 1205.942933][T29545] team_slave_0: entered allmulticast mode [ 1205.949290][T29545] team_slave_1: entered allmulticast mode [ 1205.959023][T29545] team0: entered promiscuous mode [ 1205.965455][T29545] team_slave_0: entered promiscuous mode [ 1205.971558][T29545] team_slave_1: entered promiscuous mode [ 1205.983113][T29545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.999817][T29548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.050854][T29550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:39:53 executing program 4: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 15:39:53 executing program 0: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1206.125679][T29557] team0: left allmulticast mode [ 1206.131173][T29557] team_slave_0: left allmulticast mode [ 1206.139040][T29557] team_slave_1: left allmulticast mode [ 1206.151494][T29557] team0: left promiscuous mode [ 1206.168820][T29557] team_slave_0: left promiscuous mode [ 1206.193887][T29557] team_slave_1: left promiscuous mode [ 1206.208223][T29557] bridge0: port 3(team0) entered disabled state [ 1206.235989][T29557] batman_adv: batadv0: Adding interface: team0 [ 1206.242675][T29557] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.274160][T29557] batman_adv: batadv0: Interface activated: team0 [ 1206.287845][T29557] batman_adv: batadv0: Interface deactivated: team0 [ 1206.302989][T29560] batman_adv: batadv0: Removing interface: team0 15:39:53 executing program 5: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) [ 1206.360291][T29560] bridge0: port 3(team0) entered blocking state [ 1206.367937][T29560] bridge0: port 3(team0) entered disabled state [ 1206.377233][T29560] team0: entered allmulticast mode [ 1206.382770][T29560] team_slave_0: entered allmulticast mode [ 1206.394559][T29560] team_slave_1: entered allmulticast mode [ 1206.425148][T29560] team0: entered promiscuous mode [ 1206.435043][T29560] team_slave_0: entered promiscuous mode [ 1206.442457][T29560] team_slave_1: entered promiscuous mode [ 1206.459891][T29560] 8021q: adding VLAN 0 to HW filter on device team0 15:39:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) [ 1206.471657][T29562] batman_adv: batadv0: Adding interface: team0 [ 1206.481600][T29562] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.508894][T29562] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active 15:39:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7c3b6ad5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x10) 15:39:53 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 1206.637240][T29564] team0: left allmulticast mode [ 1206.645478][T29564] team_slave_0: left allmulticast mode [ 1206.651211][T29564] team_slave_1: left allmulticast mode [ 1206.669212][T29564] team0: left promiscuous mode [ 1206.676117][T29564] team_slave_0: left promiscuous mode [ 1206.703349][T29564] team_slave_1: left promiscuous mode [ 1206.747026][T29564] bridge0: port 3(team0) entered disabled state [ 1206.757775][T29564] batman_adv: batadv0: Adding interface: team0 [ 1206.764909][T29564] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.804017][T29564] batman_adv: batadv0: Interface activated: team0 [ 1206.822977][T29564] batman_adv: batadv0: Interface deactivated: team0 [ 1206.856645][T29565] batman_adv: batadv0: Removing interface: team0 [ 1206.896116][T29565] bridge0: port 3(team0) entered blocking state [ 1206.928567][T29565] bridge0: port 3(team0) entered disabled state [ 1206.979930][T29565] team0: entered allmulticast mode [ 1206.985781][T29565] team_slave_0: entered allmulticast mode [ 1206.993772][T29565] team_slave_1: entered allmulticast mode [ 1207.004444][T29565] team0: entered promiscuous mode [ 1207.010034][T29565] team_slave_0: entered promiscuous mode [ 1207.023966][T29565] team_slave_1: entered promiscuous mode [ 1207.053336][T29565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.082908][T29566] batman_adv: batadv0: Removing interface: team0 15:39:54 executing program 0: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1207.106102][T29566] bridge0: port 3(team0) entered blocking state [ 1207.143423][T29566] bridge0: port 3(team0) entered disabled state [ 1207.183408][T29566] team0: entered allmulticast mode [ 1207.213815][T29566] team_slave_0: entered allmulticast mode [ 1207.245826][T29566] team_slave_1: entered allmulticast mode [ 1207.287049][T29566] team0: entered promiscuous mode [ 1207.313788][T29566] team_slave_0: entered promiscuous mode [ 1207.319965][T29566] team_slave_1: entered promiscuous mode [ 1207.345202][T29566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.381502][T29581] team0: left allmulticast mode [ 1207.388138][T29581] team_slave_0: left allmulticast mode [ 1207.452316][T29581] team_slave_1: left allmulticast mode [ 1207.458983][T29581] team0: left promiscuous mode [ 1207.465893][T29581] team_slave_0: left promiscuous mode 15:39:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 15:39:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bf2a, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1207.504314][T29581] team_slave_1: left promiscuous mode [ 1207.543120][T29581] bridge0: port 3(team0) entered disabled state 15:39:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 15:39:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) [ 1207.601205][T29581] batman_adv: batadv0: Adding interface: team0 [ 1207.608318][T29581] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.635532][T29581] batman_adv: batadv0: Interface activated: team0 15:39:54 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 15:39:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) [ 1207.661790][T29581] batman_adv: batadv0: Interface deactivated: team0 [ 1207.682041][T29582] batman_adv: batadv0: Removing interface: team0 [ 1207.734513][T29582] bridge0: port 3(team0) entered blocking state 15:39:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) [ 1207.812922][T29582] bridge0: port 3(team0) entered disabled state [ 1207.842290][T29582] team0: entered allmulticast mode [ 1207.864404][T29582] team_slave_0: entered allmulticast mode [ 1207.871891][T29582] team_slave_1: entered allmulticast mode [ 1207.893168][T29582] team0: entered promiscuous mode [ 1207.899001][T29582] team_slave_0: entered promiscuous mode [ 1207.906851][T29582] team_slave_1: entered promiscuous mode [ 1207.959583][T29598] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1208.001912][T29598] CPU: 0 PID: 29598 Comm: syz-executor.2 Not tainted 6.3.0-rc2-syzkaller #0 [ 1208.010623][T29598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1208.020678][T29598] Call Trace: [ 1208.023968][T29598] [ 1208.026906][T29598] dump_stack_lvl+0x136/0x150 [ 1208.031611][T29598] dump_header+0x10a/0xd70 [ 1208.036057][T29598] oom_kill_process+0x25d/0x600 [ 1208.040946][T29598] out_of_memory+0x35c/0x1660 [ 1208.045658][T29598] ? oom_killer_disable+0x2b0/0x2b0 [ 1208.050872][T29598] mem_cgroup_out_of_memory+0x206/0x270 [ 1208.056453][T29598] ? mem_cgroup_margin+0x130/0x130 [ 1208.061586][T29598] memory_max_write+0x2f9/0x3c0 [ 1208.066459][T29598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1208.072553][T29598] ? lock_release+0x700/0x700 [ 1208.077248][T29598] cgroup_file_write+0x1e2/0x7b0 [ 1208.082312][T29598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1208.088447][T29598] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1208.093836][T29598] ? __virt_addr_valid+0x61/0x2e0 [ 1208.098909][T29598] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1208.104310][T29598] kernfs_fop_write_iter+0x3f1/0x600 [ 1208.109632][T29598] vfs_write+0x9ed/0xe10 [ 1208.113901][T29598] ? kernel_write+0x670/0x670 [ 1208.118601][T29598] ? __fget_files+0x26a/0x480 [ 1208.123331][T29598] ksys_write+0x12b/0x250 [ 1208.127673][T29598] ? __ia32_sys_read+0xb0/0xb0 [ 1208.132449][T29598] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1208.139059][T29598] __do_fast_syscall_32+0x65/0xf0 [ 1208.144094][T29598] do_fast_syscall_32+0x33/0x70 [ 1208.148983][T29598] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.155327][T29598] RIP: 0023:0xf7f56579 [ 1208.159418][T29598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1208.179030][T29598] RSP: 002b:00000000f7f0f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1208.187447][T29598] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 1208.195436][T29598] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.203426][T29598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.211661][T29598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.219824][T29598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.228189][T29598] [ 1208.255171][T29602] hub 9-0:1.0: USB hub found [ 1208.290342][T29602] hub 9-0:1.0: 8 ports detected [ 1208.355083][T29582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.391444][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1208.803527][T29598] memory: usage 13508kB, limit 0kB, failcnt 198 [ 1208.815030][T29598] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1208.856294][T29598] Memory cgroup stats for /syz1: [ 1208.857499][T29598] anon 610304 [ 1208.857499][T29598] file 10424320 [ 1208.857499][T29598] kernel 2752512 [ 1208.857499][T29598] kernel_stack 196608 [ 1208.857499][T29598] pagetables 344064 [ 1208.857499][T29598] sec_pagetables 0 [ 1208.857499][T29598] percpu 21696 [ 1208.857499][T29598] sock 16384 [ 1208.857499][T29598] vmalloc 0 [ 1208.857499][T29598] shmem 10424320 [ 1208.857499][T29598] zswap 0 [ 1208.857499][T29598] zswapped 0 [ 1208.857499][T29598] file_mapped 249856 [ 1208.857499][T29598] file_dirty 0 [ 1208.857499][T29598] file_writeback 0 [ 1208.857499][T29598] swapcached 0 [ 1208.857499][T29598] anon_thp 0 [ 1208.857499][T29598] file_thp 0 [ 1208.857499][T29598] shmem_thp 0 [ 1208.857499][T29598] inactive_anon 0 [ 1208.857499][T29598] active_anon 11034624 [ 1208.857499][T29598] inactive_file 0 [ 1208.857499][T29598] active_file 0 [ 1208.857499][T29598] unevictable 0 [ 1208.857499][T29598] slab_reclaimable 97216 [ 1208.857499][T29598] slab_unreclaimable 2036320 [ 1208.857499][T29598] slab 2133536 [ 1208.857499][T29598] workingset_refault_anon 0 [ 1208.857499][T29598] workingset_refault_file 0 [ 1208.857499][T29598] workingset_activate_anon 0 [ 1208.857499][T29598] workingset_activate_file 0 [ 1208.857499][T29598] workingset_restore_anon 0 [ 1208.857499][T29598] workingset_restore_file 0 [ 1208.857499][T29598] workingset_nodereclaim 0 [ 1208.857499][T29598] pgscan 12384 [ 1208.857499][T29598] pgsteal 0 [ 1208.857499][T29598] pgscan_kswapd 0 [ 1208.857499][T29598] pgscan_direct 12384 [ 1208.857499][T29598] pgscan_khugepaged 0 [ 1208.857499][T29598] pgsteal_kswapd 0 [ 1208.857499][T29598] pgsteal_direct 0 [ 1208.857499][T29598] pgsteal_khugepaged 0 [ 1208.857499][T29598] pgfault 370785 [ 1208.857499][T29598] pgmajfault 0 [ 1208.857499][T29598] pgrefill 0 [ 1208.857499][T29598] pgactivate 14487 [ 1208.857499][T29598] pgdeactivate 0 [ 1208.857499][T29598] pglazyfree 0 [ 1208.857499][T29598] pglazyfreed 0 [ 1208.857499][T29598] zswpin 0 [ 1208.857499][T29598] zswpout 0 [ 1209.068720][T29598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15495,uid=0 [ 1209.093566][T29598] Memory cgroup out of memory: Killed process 15495 (syz-executor.1) total-vm:50336kB, anon-rss:304kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:0 15:39:58 executing program 5: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) 15:39:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 15:39:58 executing program 0: mount(&(0x7f00000002c0)=ANY=[], 0x0, &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='cgroup.procs\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000480), 0x84480) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0, &(0x7f0000000340)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000fffff0000e000a001400000002800000121f", 0x2e}], 0x1}, 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r5) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 15:39:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 15:39:58 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 15:39:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bf2a, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1211.256014][T29614] validate_nla: 8 callbacks suppressed [ 1211.256026][T29614] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1211.306491][T29614] team0: left allmulticast mode [ 1211.311565][T29614] team_slave_0: left allmulticast mode 15:39:58 executing program 4: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) [ 1211.363487][T29614] team_slave_1: left allmulticast mode [ 1211.369565][T29614] team0: left promiscuous mode [ 1211.376774][T29614] team_slave_0: left promiscuous mode [ 1211.423855][T29614] team_slave_1: left promiscuous mode [ 1211.448341][T29625] hub 9-0:1.0: USB hub found [ 1211.454077][T29625] hub 9-0:1.0: 8 ports detected [ 1211.472858][T29614] bridge0: port 3(team0) entered disabled state [ 1211.554398][T29622] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1211.600317][T29614] batman_adv: batadv0: Adding interface: team0 [ 1211.607452][T29614] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.621150][T29622] CPU: 0 PID: 29622 Comm: syz-executor.2 Not tainted 6.3.0-rc2-syzkaller #0 [ 1211.641585][T29622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1211.651815][T29622] Call Trace: [ 1211.655099][T29622] [ 1211.658034][T29622] dump_stack_lvl+0x136/0x150 [ 1211.662720][T29622] dump_header+0x10a/0xd70 [ 1211.667137][T29622] ? mem_cgroup_print_oom_meminfo+0x440/0x440 [ 1211.673216][T29622] out_of_memory+0xd6b/0x1660 [ 1211.677922][T29622] ? oom_killer_disable+0x2b0/0x2b0 [ 1211.683128][T29622] mem_cgroup_out_of_memory+0x206/0x270 [ 1211.688688][T29622] ? mem_cgroup_margin+0x130/0x130 [ 1211.693844][T29622] memory_max_write+0x2f9/0x3c0 [ 1211.698724][T29622] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1211.704812][T29622] ? lock_release+0x700/0x700 [ 1211.709535][T29622] cgroup_file_write+0x1e2/0x7b0 [ 1211.714502][T29622] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1211.720587][T29622] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1211.725979][T29622] ? __virt_addr_valid+0x61/0x2e0 [ 1211.731113][T29622] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1211.736981][T29622] kernfs_fop_write_iter+0x3f1/0x600 [ 1211.742289][T29622] vfs_write+0x9ed/0xe10 [ 1211.746541][T29622] ? kernel_write+0x670/0x670 [ 1211.751231][T29622] ? __fget_files+0x26a/0x480 [ 1211.755949][T29622] ksys_write+0x12b/0x250 [ 1211.760286][T29622] ? __ia32_sys_read+0xb0/0xb0 [ 1211.765060][T29622] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1211.771671][T29622] __do_fast_syscall_32+0x65/0xf0 [ 1211.776702][T29622] do_fast_syscall_32+0x33/0x70 [ 1211.781561][T29622] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.787896][T29622] RIP: 0023:0xf7f56579 [ 1211.791966][T29622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1211.811841][T29622] RSP: 002b:00000000f7f0f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1211.820307][T29622] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 1211.828371][T29622] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1211.836377][T29622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1211.844482][T29622] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1211.852657][T29622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1211.860651][T29622] [ 1211.865317][T29614] batman_adv: batadv0: Interface activated: team0 [ 1211.895014][T29614] batman_adv: batadv0: Interface deactivated: team0 [ 1211.956402][T29621] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1212.066282][T29621] batman_adv: batadv0: Removing interface: team0 [ 1212.119647][T29621] bridge0: port 3(team0) entered blocking state [ 1212.133384][T29621] bridge0: port 3(team0) entered disabled state [ 1212.141615][T29621] team0: entered allmulticast mode [ 1212.147657][T29621] team_slave_0: entered allmulticast mode [ 1212.156643][T29621] team_slave_1: entered allmulticast mode [ 1212.172572][T29621] team0: entered promiscuous mode [ 1212.178295][T29621] team_slave_0: entered promiscuous mode [ 1212.195344][T29621] team_slave_1: entered promiscuous mode [ 1212.221400][T29621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.241394][T29626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1212.415862][T29622] memory: usage 11704kB, limit 0kB, failcnt 198 [ 1212.422653][T29622] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1212.443519][T29622] Memory cgroup stats for /syz1: [ 1212.445733][T29622] anon 0 [ 1212.445733][T29622] file 10424320 [ 1212.445733][T29622] kernel 1544192 [ 1212.445733][T29622] kernel_stack 0 [ 1212.445733][T29622] pagetables 0 [ 1212.445733][T29622] sec_pagetables 0 [ 1212.445733][T29622] percpu 21312 [ 1212.445733][T29622] sock 16384 [ 1212.445733][T29622] vmalloc 0 [ 1212.445733][T29622] shmem 10424320 [ 1212.445733][T29622] zswap 0 [ 1212.445733][T29622] zswapped 0 [ 1212.445733][T29622] file_mapped 249856 [ 1212.445733][T29622] file_dirty 0 [ 1212.445733][T29622] file_writeback 0 [ 1212.445733][T29622] swapcached 0 [ 1212.445733][T29622] anon_thp 0 [ 1212.445733][T29622] file_thp 0 [ 1212.445733][T29622] shmem_thp 0 [ 1212.445733][T29622] inactive_anon 0 [ 1212.445733][T29622] active_anon 10424320 [ 1212.445733][T29622] inactive_file 0 [ 1212.445733][T29622] active_file 0 [ 1212.445733][T29622] unevictable 0 [ 1212.445733][T29622] slab_reclaimable 33968 [ 1212.445733][T29622] slab_unreclaimable 1485592 [ 1212.445733][T29622] slab 1519560 [ 1212.445733][T29622] workingset_refault_anon 0 [ 1212.445733][T29622] workingset_refault_file 0 [ 1212.445733][T29622] workingset_activate_anon 0 [ 1212.445733][T29622] workingset_activate_file 0 [ 1212.445733][T29622] workingset_restore_anon 0 [ 1212.445733][T29622] workingset_restore_file 0 [ 1212.445733][T29622] workingset_nodereclaim 0 [ 1212.445733][T29622] pgscan 12384 [ 1212.445733][T29622] pgsteal 0 [ 1212.445733][T29622] pgscan_kswapd 0 [ 1212.445733][T29622] pgscan_direct 12384 [ 1212.445733][T29622] pgscan_khugepaged 0 [ 1212.445733][T29622] pgsteal_kswapd 0 [ 1212.445733][T29622] pgsteal_direct 0 [ 1212.445733][T29622] pgsteal_khugepaged 0 [ 1212.445733][T29622] pgfault 370785 [ 1212.445733][T29622] pgmajfault 0 [ 1212.445733][T29622] pgrefill 0 [ 1212.445733][T29622] pgactivate 14487 [ 1212.445733][T29622] pgdeactivate 0 15:39:59 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 1212.445733][T29622] pglazyfree 0 [ 1212.445733][T29622] pglazyfreed 0 [ 1212.445733][T29622] zswpin 0 [ 1212.445733][T29622] zswpout 0 [ 1212.445733][T29622] thp_fault_alloc 29 15:40:00 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 1212.939295][T29622] Out of memory and no killable processes... [ 1213.148432][T29639] hub 9-0:1.0: USB hub found [ 1213.155500][T29639] hub 9-0:1.0: 8 ports detected 15:40:00 executing program 5: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) 15:40:01 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 15:40:01 executing program 4: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) 15:40:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) [ 1214.899232][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.910795][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.919963][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.928781][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.936387][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1214.943708][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1215.542210][T29661] chnl_net:caif_netlink_parms(): no params data found [ 1215.669096][T29661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.686254][T29661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.701118][T29661] bridge_slave_0: entered allmulticast mode [ 1215.711586][T29661] bridge_slave_0: entered promiscuous mode [ 1215.727749][T29661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.744000][T29661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.751394][T29661] bridge_slave_1: entered allmulticast mode [ 1215.768151][T29661] bridge_slave_1: entered promiscuous mode [ 1215.818996][T29661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.831547][T29661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.877944][T29661] team0: Port device team_slave_0 added [ 1215.887644][T29661] team0: Port device team_slave_1 added [ 1215.914917][T29661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.921900][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.948319][T29661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.961712][T29661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.969195][T29661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.997746][T29661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.052236][T29661] hsr_slave_0: entered promiscuous mode [ 1216.059122][T29661] hsr_slave_1: entered promiscuous mode [ 1216.075140][T29661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1216.082730][T29661] Cannot create hsr debugfs directory [ 1216.325346][T29661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.433415][T29661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.654675][T29661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.794847][T29661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.033994][ T5116] Bluetooth: hci3: command 0x0409 tx timeout [ 1218.217012][T29661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.228057][T29661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1218.239033][T29661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.249757][T29661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1218.316653][T29661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.333238][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1218.341116][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1218.354617][T29661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.365113][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.374141][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.382609][T26518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.389831][T26518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.399234][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1218.414056][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.422884][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.432126][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.439305][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.447975][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1218.464932][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1218.474103][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1218.485389][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1218.495127][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1218.510584][T29661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1218.521971][T29661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.534852][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1218.543531][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1218.552921][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1218.561999][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1218.571424][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1218.580261][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1218.590394][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1218.610009][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.618413][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1218.632073][T29661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.653600][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1218.662409][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1218.683252][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1218.692255][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1218.704413][T29661] veth0_vlan: entered promiscuous mode [ 1218.714735][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1218.722578][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1218.731920][T29661] veth1_vlan: entered promiscuous mode [ 1218.760085][T29661] veth0_macvtap: entered promiscuous mode [ 1218.769179][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1218.778199][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1218.787132][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1218.796314][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1218.806358][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1218.816996][T29661] veth1_macvtap: entered promiscuous mode [ 1218.834942][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.846015][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.860268][T29661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.869234][T22708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1218.877742][T22708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1218.886684][T22708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1218.896903][T29661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.907739][T29661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.924926][T29661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.934354][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1218.943211][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1218.953597][T29661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.964779][T29661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.973492][T29661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.982718][T29661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.053170][ T2798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.079683][ T2798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.083992][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 15:40:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 15:40:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 15:40:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bf2a, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 15:40:06 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5", 0x92, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x253, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 15:40:06 executing program 5: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) 15:40:06 executing program 4: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0) [ 1219.097185][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1219.097261][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.119756][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1219.127382][ T5116] Bluetooth: hci3: command 0x041b tx timeout 15:40:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001200)={0x0, 0x1000000, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0xfcb, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 15:40:06 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x8}}}}}}}]}}, 0x0) [ 1219.448567][T29690] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1219.495239][T29690] CPU: 1 PID: 29690 Comm: syz-executor.2 Not tainted 6.3.0-rc2-syzkaller #0 [ 1219.503958][T29690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1219.514010][T29690] Call Trace: [ 1219.517286][T29690] [ 1219.520230][T29690] dump_stack_lvl+0x136/0x150 [ 1219.524911][T29690] dump_header+0x10a/0xd70 [ 1219.529344][T29690] oom_kill_process+0x25d/0x600 [ 1219.534233][T29690] out_of_memory+0x35c/0x1660 [ 1219.538914][T29690] ? oom_killer_disable+0x2b0/0x2b0 [ 1219.544115][T29690] mem_cgroup_out_of_memory+0x206/0x270 [ 1219.551234][T29690] ? mem_cgroup_margin+0x130/0x130 [ 1219.556370][T29690] memory_max_write+0x2f9/0x3c0 [ 1219.561228][T29690] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1219.567323][T29690] ? lock_release+0x700/0x700 [ 1219.572052][T29690] cgroup_file_write+0x1e2/0x7b0 [ 1219.577033][T29690] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1219.583112][T29690] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1219.588516][T29690] ? __virt_addr_valid+0x61/0x2e0 [ 1219.593614][T29690] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1219.599036][T29690] kernfs_fop_write_iter+0x3f1/0x600 [ 1219.604385][T29690] vfs_write+0x9ed/0xe10 [ 1219.609018][T29690] ? kernel_write+0x670/0x670 [ 1219.613715][T29690] ? __fget_files+0x26a/0x480 [ 1219.618404][T29690] ksys_write+0x12b/0x250 [ 1219.622740][T29690] ? __ia32_sys_read+0xb0/0xb0 [ 1219.627507][T29690] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1219.634123][T29690] __do_fast_syscall_32+0x65/0xf0 [ 1219.639166][T29690] do_fast_syscall_32+0x33/0x70 [ 1219.644048][T29690] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1219.650485][T29690] RIP: 0023:0xf7f56579 [ 1219.654596][T29690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1219.674216][T29690] RSP: 002b:00000000f7f0f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1219.682654][T29690] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 1219.690627][T29690] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.698614][T29690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.706589][T29690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.714565][T29690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.722641][T29690] [ 1219.791677][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1220.264531][T29690] memory: usage 11772kB, limit 0kB, failcnt 221 [ 1220.270836][T29690] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.279105][T29690] Memory cgroup stats for /syz1: [ 1220.279346][T29690] anon 49152 [ 1220.279346][T29690] file 10424320 [ 1220.279346][T29690] kernel 1564672 [ 1220.279346][T29690] kernel_stack 0 [ 1220.279346][T29690] pagetables 8192 [ 1220.279346][T29690] sec_pagetables 0 [ 1220.279346][T29690] percpu 21312 [ 1220.279346][T29690] sock 16384 [ 1220.279346][T29690] vmalloc 0 [ 1220.279346][T29690] shmem 10424320 [ 1220.279346][T29690] zswap 0 [ 1220.279346][T29690] zswapped 0 [ 1220.279346][T29690] file_mapped 249856 [ 1220.279346][T29690] file_dirty 0 [ 1220.279346][T29690] file_writeback 0 [ 1220.279346][T29690] swapcached 0 [ 1220.279346][T29690] anon_thp 0 [ 1220.279346][T29690] file_thp 0 [ 1220.279346][T29690] shmem_thp 0 [ 1220.279346][T29690] inactive_anon 0 [ 1220.279346][T29690] active_anon 10473472 [ 1220.279346][T29690] inactive_file 0 [ 1220.279346][T29690] active_file 0 [ 1220.279346][T29690] unevictable 0 [ 1220.279346][T29690] slab_reclaimable 34352 [ 1220.279346][T29690] slab_unreclaimable 1496544 [ 1220.279346][T29690] slab 1530896 [ 1220.279346][T29690] workingset_refault_anon 0 [ 1220.279346][T29690] workingset_refault_file 0 [ 1220.279346][T29690] workingset_activate_anon 0 [ 1220.279346][T29690] workingset_activate_file 0 [ 1220.279346][T29690] workingset_restore_anon 0 [ 1220.279346][T29690] workingset_restore_file 0 [ 1220.279346][T29690] workingset_nodereclaim 0 [ 1220.279346][T29690] pgscan 12384 [ 1220.279346][T29690] pgsteal 0 [ 1220.279346][T29690] pgscan_kswapd 0 [ 1220.279346][T29690] pgscan_direct 12384 [ 1220.279346][T29690] pgscan_khugepaged 0 [ 1220.279346][T29690] pgsteal_kswapd 0 [ 1220.279346][T29690] pgsteal_direct 0 [ 1220.279346][T29690] pgsteal_khugepaged 0 [ 1220.279346][T29690] pgfault 370927 [ 1220.279346][T29690] pgmajfault 0 [ 1220.279346][T29690] pgrefill 0 [ 1220.279346][T29690] pgactivate 14487 [ 1220.279346][T29690] pgdeactivate 0 [ 1220.279346][T29690] pglazyfree 0 [ 1220.279346][T29690] pglazyfreed 0 [ 1220.279346][T29690] zswpin 0 [ 1220.279346][T29690] zswpout 0 15:40:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) [ 1220.279346][T29690] thp_fault_alloc 29 15:40:07 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) [ 1221.204222][ T5116] Bluetooth: hci3: command 0x040f tx timeout [ 1221.295967][T29690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29661,uid=0 [ 1221.359919][T29690] Memory cgroup out of memory: Killed process 29661 (syz-executor.1) total-vm:50336kB, anon-rss:304kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:0 15:40:08 executing program 4: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:08 executing program 5: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:08 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bf2a, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1222.556105][T29724] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1222.570649][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1222.627343][T29724] CPU: 0 PID: 29724 Comm: syz-executor.2 Not tainted 6.3.0-rc2-syzkaller #0 [ 1222.636077][T29724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1222.646140][T29724] Call Trace: [ 1222.649433][T29724] [ 1222.652368][T29724] dump_stack_lvl+0x136/0x150 [ 1222.657062][T29724] dump_header+0x10a/0xd70 [ 1222.661491][T29724] ? mem_cgroup_print_oom_meminfo+0x440/0x440 [ 1222.667579][T29724] out_of_memory+0xd6b/0x1660 [ 1222.672274][T29724] ? oom_killer_disable+0x2b0/0x2b0 [ 1222.677520][T29724] mem_cgroup_out_of_memory+0x206/0x270 [ 1222.683085][T29724] ? mem_cgroup_margin+0x130/0x130 [ 1222.688225][T29724] memory_max_write+0x2f9/0x3c0 [ 1222.693090][T29724] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1222.699280][T29724] ? lock_release+0x700/0x700 [ 1222.703976][T29724] cgroup_file_write+0x1e2/0x7b0 [ 1222.709026][T29724] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1222.715280][T29724] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1222.720688][T29724] ? __virt_addr_valid+0x61/0x2e0 [ 1222.725735][T29724] ? cgroup_get_from_path+0x6a0/0x6a0 [ 1222.731129][T29724] kernfs_fop_write_iter+0x3f1/0x600 [ 1222.736443][T29724] vfs_write+0x9ed/0xe10 [ 1222.740716][T29724] ? kernel_write+0x670/0x670 [ 1222.745412][T29724] ? __fget_files+0x26a/0x480 [ 1222.750124][T29724] ksys_write+0x12b/0x250 [ 1222.755591][T29724] ? __ia32_sys_read+0xb0/0xb0 [ 1222.760449][T29724] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1222.767069][T29724] __do_fast_syscall_32+0x65/0xf0 [ 1222.772115][T29724] do_fast_syscall_32+0x33/0x70 [ 1222.776979][T29724] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1222.783336][T29724] RIP: 0023:0xf7f56579 [ 1222.787409][T29724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1222.807211][T29724] RSP: 002b:00000000f7f0f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1222.815634][T29724] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 1222.823610][T29724] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1222.831764][T29724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1222.839734][T29724] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1222.847711][T29724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1222.855706][T29724] [ 1222.919032][T29724] memory: usage 11716kB, limit 0kB, failcnt 238 [ 1222.925498][T29724] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1222.932499][T29724] Memory cgroup stats for /syz1: [ 1222.932735][T29724] anon 0 [ 1222.932735][T29724] file 10424320 [ 1222.932735][T29724] kernel 1556480 [ 1222.932735][T29724] kernel_stack 0 [ 1222.932735][T29724] pagetables 0 [ 1222.932735][T29724] sec_pagetables 0 [ 1222.932735][T29724] percpu 21312 [ 1222.932735][T29724] sock 16384 [ 1222.932735][T29724] vmalloc 0 [ 1222.932735][T29724] shmem 10424320 [ 1222.932735][T29724] zswap 0 [ 1222.932735][T29724] zswapped 0 [ 1222.932735][T29724] file_mapped 249856 [ 1222.932735][T29724] file_dirty 0 [ 1222.932735][T29724] file_writeback 0 [ 1222.932735][T29724] swapcached 0 [ 1222.932735][T29724] anon_thp 0 [ 1222.932735][T29724] file_thp 0 [ 1222.932735][T29724] shmem_thp 0 [ 1222.932735][T29724] inactive_anon 0 [ 1222.932735][T29724] active_anon 10424320 [ 1222.932735][T29724] inactive_file 0 [ 1222.932735][T29724] active_file 0 [ 1222.932735][T29724] unevictable 0 [ 1222.932735][T29724] slab_reclaimable 34352 [ 1222.932735][T29724] slab_unreclaimable 1496544 [ 1222.932735][T29724] slab 1530896 [ 1222.932735][T29724] workingset_refault_anon 0 [ 1222.932735][T29724] workingset_refault_file 0 [ 1222.932735][T29724] workingset_activate_anon 0 [ 1222.932735][T29724] workingset_activate_file 0 [ 1222.932735][T29724] workingset_restore_anon 0 [ 1222.932735][T29724] workingset_restore_file 0 [ 1222.932735][T29724] workingset_nodereclaim 0 [ 1222.932735][T29724] pgscan 12384 [ 1222.932735][T29724] pgsteal 0 [ 1222.932735][T29724] pgscan_kswapd 0 [ 1222.932735][T29724] pgscan_direct 12384 [ 1222.932735][T29724] pgscan_khugepaged 0 [ 1222.932735][T29724] pgsteal_kswapd 0 [ 1222.932735][T29724] pgsteal_direct 0 [ 1222.932735][T29724] pgsteal_khugepaged 0 [ 1222.932735][T29724] pgfault 370927 [ 1222.932735][T29724] pgmajfault 0 [ 1222.932735][T29724] pgrefill 0 [ 1222.932735][T29724] pgactivate 14487 [ 1222.932735][T29724] pgdeactivate 0 [ 1222.932735][T29724] pglazyfree 0 [ 1222.932735][T29724] pglazyfreed 0 [ 1222.932735][T29724] zswpin 0 [ 1222.932735][T29724] zswpout 0 [ 1222.932735][T29724] thp_fault_alloc 29 15:40:10 executing program 4: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:10 executing program 5: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) [ 1223.273866][ T5116] Bluetooth: hci3: command 0x0419 tx timeout 15:40:10 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) [ 1223.375935][T29724] Out of memory and no killable processes... 15:40:11 executing program 5: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:12 executing program 1: r0 = openat$ttynull(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5409, 0x0) 15:40:12 executing program 4: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:12 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) 15:40:12 executing program 5: unshare(0x4000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8979) getsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, &(0x7f0000000000)) 15:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x27, 0x5}]}}}]}, 0x44}}, 0x0) 15:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x27, 0x5}]}}}]}, 0x44}}, 0x0) 15:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x27, 0x5}]}}}]}, 0x44}}, 0x0) 15:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x27, 0x5}]}}}]}, 0x44}}, 0x0) 15:40:13 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8}) 15:40:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) [ 1228.117594][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1228.127241][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1228.141757][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1228.150702][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1228.159384][T29660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1228.440003][ T5141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.504239][T29779] chnl_net:caif_netlink_parms(): no params data found [ 1228.588989][ T5141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.723723][ T5141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.749113][T29779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.765007][T29779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.772256][T29779] bridge_slave_0: entered allmulticast mode [ 1228.823437][T29779] bridge_slave_0: entered promiscuous mode [ 1228.861028][ T5141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.909657][T29779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.943812][T29779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.951099][T29779] bridge_slave_1: entered allmulticast mode [ 1228.982385][T29779] bridge_slave_1: entered promiscuous mode [ 1229.073059][T29779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.204666][T29779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.366456][T29779] team0: Port device team_slave_0 added [ 1229.388255][T29779] team0: Port device team_slave_1 added [ 1229.446307][T29779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.453285][T29779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.480553][T29779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.495168][T29779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.502146][T29779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.529455][T29779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.577618][T29779] hsr_slave_0: entered promiscuous mode [ 1229.584844][T29779] hsr_slave_1: entered promiscuous mode [ 1229.590819][T29779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.599400][T29779] Cannot create hsr debugfs directory [ 1230.234050][T29660] Bluetooth: hci3: command 0x0409 tx timeout [ 1230.351802][ T5141] hsr_slave_0: left promiscuous mode [ 1230.359493][ T5141] hsr_slave_1: left promiscuous mode [ 1230.365807][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.373333][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.383974][ T5141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.391465][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.401428][ T5141] bridge_slave_1: left allmulticast mode [ 1230.409417][ T5141] bridge_slave_1: left promiscuous mode [ 1230.415642][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.427145][ T5141] bridge_slave_0: left allmulticast mode [ 1230.432825][ T5141] bridge_slave_0: left promiscuous mode [ 1230.439093][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.454706][ T5141] veth1_macvtap: left promiscuous mode [ 1230.460529][ T5141] veth0_macvtap: left promiscuous mode [ 1230.466434][ T5141] veth1_vlan: left promiscuous mode [ 1230.471809][ T5141] veth0_vlan: left promiscuous mode [ 1230.750845][ T5141] team0 (unregistering): Port device team_slave_1 removed [ 1230.771956][ T5141] team0 (unregistering): Port device team_slave_0 removed [ 1230.785243][ T5141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.802186][ T5141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.876236][ T5141] bond0 (unregistering): Released all slaves [ 1232.313835][T29660] Bluetooth: hci3: command 0x041b tx timeout [ 1232.444387][T29779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1232.453387][T29779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1232.465709][T29779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1232.476388][T29779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1232.536956][T29779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.553704][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1232.561501][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1232.573839][T29779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.584537][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1232.593422][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1232.602207][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.610892][ T6698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.619494][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1232.632961][T26511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1232.642794][T26511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.652749][T26511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.659862][T26511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.669003][T26511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1232.693424][T29779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1232.705315][T29779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.718713][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1232.729075][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1232.739039][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1232.748323][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1232.757120][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1232.766066][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1232.774746][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1232.783916][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1232.792368][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1232.813993][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1232.821877][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1232.829831][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1232.837946][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1232.849810][T29779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.876623][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1232.887702][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.908565][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1232.918110][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.926984][T29779] veth0_vlan: entered promiscuous mode [ 1232.936737][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.945432][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1232.958841][T29779] veth1_vlan: entered promiscuous mode [ 1232.980607][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1232.989680][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1232.998335][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1233.007529][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1233.020550][T29779] veth0_macvtap: entered promiscuous mode [ 1233.032226][T29779] veth1_macvtap: entered promiscuous mode [ 1233.049309][T29779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.060002][T29779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.072224][T29779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.080889][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1233.089708][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1233.098490][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1233.107437][T12907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1233.119083][T29779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.130097][T29779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.141873][T29779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.151070][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1233.159848][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1233.171081][T29779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.183452][T29779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.192505][T29779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.201493][T29779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.276750][T20969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.300732][T20969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:40:20 executing program 1: r0 = openat$ttynull(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5409, 0x0) 15:40:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80085617, 0x0) 15:40:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8}) 15:40:20 executing program 3: getrandom(&(0x7f0000000000)=""/236, 0xfffffffffffffe8e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000359000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) 15:40:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) [ 1233.324680][ T5141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.333007][T26518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1233.333099][ T5141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.353038][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:40:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) 15:40:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80085617, 0x0) 15:40:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8}) 15:40:20 executing program 1: r0 = openat$ttynull(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5409, 0x0) 15:40:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80085617, 0x0) 15:40:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x8}) 15:40:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80085617, 0x0) 15:40:20 executing program 1: r0 = openat$ttynull(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5409, 0x0) 15:40:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) 15:40:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) [ 1234.394717][T29660] Bluetooth: hci3: command 0x040f tx timeout 15:40:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) writev(r0, 0x0, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_io_uring_setup(0x182, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0xcc) 15:40:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) 15:40:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) 15:40:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/29, 0x1d) getdents64(r0, &(0x7f0000000080)=""/119, 0x77) 15:40:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) [ 1236.474142][T29660] Bluetooth: hci3: command 0x0419 tx timeout 15:40:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:23 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:23 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:23 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000d00)=[@request_death], 0x0, 0x0, 0x0}) 15:40:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 2: r0 = socket(0x2b, 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x11e, 0x1, 0x0, 0x7) 15:40:24 executing program 2: r0 = socket(0x2b, 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x11e, 0x1, 0x0, 0x7) 15:40:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:24 executing program 2: r0 = socket(0x2b, 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x11e, 0x1, 0x0, 0x7) 15:40:25 executing program 2: r0 = socket(0x2b, 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x11e, 0x1, 0x0, 0x7) 15:40:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x101], [0x400, 0x4a, 0x7, 0x9, 0x1000, 0x1e8, 0x6, 0x0, 0x2, 0x800, 0x7, 0xf64c, 0x942, 0xffffff7f, 0x2, 0xbd66, 0x7fffffff, 0xffffff01, 0x9, 0xffffff81, 0x4, 0x3, 0x401, 0xfffff304, 0x4, 0xfffffff7, 0x5, 0x6, 0x81, 0x8d5, 0x4e0, 0x4, 0x9, 0x9, 0x0, 0x9, 0x4, 0x1, 0x2, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff81, 0x7fff, 0x8, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f], [0x0, 0x9, 0xfffffffe, 0x2, 0x1, 0xba0, 0x1, 0x101, 0x1, 0x6, 0x0, 0x2b0b, 0x0, 0x8000, 0x0, 0x2717, 0x4, 0xffffffff, 0x81, 0x10, 0x8, 0x8, 0x1f, 0x6ff41472, 0x5db6, 0x3, 0x10000, 0x3ff, 0xffffffff, 0x4, 0x10000, 0x8, 0xffffff01, 0x8001, 0x8, 0x4, 0x9, 0xd4, 0x9, 0xe91b, 0x7fffffff, 0x8, 0x8, 0x0, 0x4, 0x8, 0x20, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x400, 0x3f, 0xfb7a, 0x7fffffff, 0x10000, 0x40, 0xffffffff, 0x8, 0x7, 0x0, 0x40], [0x2, 0x80000001, 0x2, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0x1, 0x3, 0x4, 0x20, 0x6fc0bb2b, 0x9, 0x1, 0x80000001, 0xde83, 0x4, 0x4, 0x800, 0x8b3a, 0x40, 0x7, 0x1, 0xfab5bc7, 0x0, 0xfff, 0x6, 0x8, 0x1, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x401, 0x1, 0x7, 0x7fffffff, 0x9, 0xa3, 0x0, 0x8, 0x7fff, 0x6, 0x3ff, 0x2, 0x5, 0x91, 0xdbb, 0xffff0000, 0x9, 0x5, 0x7, 0x336, 0x1, 0x2c55, 0x4, 0x101, 0x1df, 0x1, 0x692849c6, 0x738, 0x7]}, 0x45c) 15:40:25 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x8d) socket(0x27, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2, &(0x7f0000000680)=@raw=[@call, @generic={0x0, 0x9, 0x2}], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x9, 0x0, 0x7}, 0x10}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x40, &(0x7f00000008c0)=""/64, 0x5d807cee207afb26, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x8, 0x10, &(0x7f0000000940)={0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, 0x1]}, 0x80) accept4$unix(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000ac0)=0x6e, 0x0) getresgid(0x0, 0x0, &(0x7f0000000b80)) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000d80)='./file0\x00', 0x0, 0x40, &(0x7f0000000dc0)) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) 15:40:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 1238.154399][T29999] input: syz1 as /devices/virtual/input/input72 15:40:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 15:40:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1670e68) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x2, 0x0, 0x7}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x21}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x112280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000042000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc051, r0, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xed8) 15:40:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x101], [0x400, 0x4a, 0x7, 0x9, 0x1000, 0x1e8, 0x6, 0x0, 0x2, 0x800, 0x7, 0xf64c, 0x942, 0xffffff7f, 0x2, 0xbd66, 0x7fffffff, 0xffffff01, 0x9, 0xffffff81, 0x4, 0x3, 0x401, 0xfffff304, 0x4, 0xfffffff7, 0x5, 0x6, 0x81, 0x8d5, 0x4e0, 0x4, 0x9, 0x9, 0x0, 0x9, 0x4, 0x1, 0x2, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff81, 0x7fff, 0x8, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f], [0x0, 0x9, 0xfffffffe, 0x2, 0x1, 0xba0, 0x1, 0x101, 0x1, 0x6, 0x0, 0x2b0b, 0x0, 0x8000, 0x0, 0x2717, 0x4, 0xffffffff, 0x81, 0x10, 0x8, 0x8, 0x1f, 0x6ff41472, 0x5db6, 0x3, 0x10000, 0x3ff, 0xffffffff, 0x4, 0x10000, 0x8, 0xffffff01, 0x8001, 0x8, 0x4, 0x9, 0xd4, 0x9, 0xe91b, 0x7fffffff, 0x8, 0x8, 0x0, 0x4, 0x8, 0x20, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x400, 0x3f, 0xfb7a, 0x7fffffff, 0x10000, 0x40, 0xffffffff, 0x8, 0x7, 0x0, 0x40], [0x2, 0x80000001, 0x2, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0x1, 0x3, 0x4, 0x20, 0x6fc0bb2b, 0x9, 0x1, 0x80000001, 0xde83, 0x4, 0x4, 0x800, 0x8b3a, 0x40, 0x7, 0x1, 0xfab5bc7, 0x0, 0xfff, 0x6, 0x8, 0x1, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x401, 0x1, 0x7, 0x7fffffff, 0x9, 0xa3, 0x0, 0x8, 0x7fff, 0x6, 0x3ff, 0x2, 0x5, 0x91, 0xdbb, 0xffff0000, 0x9, 0x5, 0x7, 0x336, 0x1, 0x2c55, 0x4, 0x101, 0x1df, 0x1, 0x692849c6, 0x738, 0x7]}, 0x45c) 15:40:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 15:40:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 15:40:25 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) [ 1238.515362][T30013] input: syz1 as /devices/virtual/input/input73 [ 1238.554924][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 15:40:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x374, 0x210, 0xb, 0x148, 0x210, 0x148, 0x2e0, 0x240, 0x240, 0x2e0, 0x212, 0x3, 0x0, {[{{@ip={@loopback=0x7f009c00, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1ec, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@NFQUEUE1={0x24}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00'}, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x423) [ 1238.562341][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 15:40:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x101], [0x400, 0x4a, 0x7, 0x9, 0x1000, 0x1e8, 0x6, 0x0, 0x2, 0x800, 0x7, 0xf64c, 0x942, 0xffffff7f, 0x2, 0xbd66, 0x7fffffff, 0xffffff01, 0x9, 0xffffff81, 0x4, 0x3, 0x401, 0xfffff304, 0x4, 0xfffffff7, 0x5, 0x6, 0x81, 0x8d5, 0x4e0, 0x4, 0x9, 0x9, 0x0, 0x9, 0x4, 0x1, 0x2, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff81, 0x7fff, 0x8, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f], [0x0, 0x9, 0xfffffffe, 0x2, 0x1, 0xba0, 0x1, 0x101, 0x1, 0x6, 0x0, 0x2b0b, 0x0, 0x8000, 0x0, 0x2717, 0x4, 0xffffffff, 0x81, 0x10, 0x8, 0x8, 0x1f, 0x6ff41472, 0x5db6, 0x3, 0x10000, 0x3ff, 0xffffffff, 0x4, 0x10000, 0x8, 0xffffff01, 0x8001, 0x8, 0x4, 0x9, 0xd4, 0x9, 0xe91b, 0x7fffffff, 0x8, 0x8, 0x0, 0x4, 0x8, 0x20, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x400, 0x3f, 0xfb7a, 0x7fffffff, 0x10000, 0x40, 0xffffffff, 0x8, 0x7, 0x0, 0x40], [0x2, 0x80000001, 0x2, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0x1, 0x3, 0x4, 0x20, 0x6fc0bb2b, 0x9, 0x1, 0x80000001, 0xde83, 0x4, 0x4, 0x800, 0x8b3a, 0x40, 0x7, 0x1, 0xfab5bc7, 0x0, 0xfff, 0x6, 0x8, 0x1, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x401, 0x1, 0x7, 0x7fffffff, 0x9, 0xa3, 0x0, 0x8, 0x7fff, 0x6, 0x3ff, 0x2, 0x5, 0x91, 0xdbb, 0xffff0000, 0x9, 0x5, 0x7, 0x336, 0x1, 0x2c55, 0x4, 0x101, 0x1df, 0x1, 0x692849c6, 0x738, 0x7]}, 0x45c) 15:40:25 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x1, 0x100}) 15:40:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x374, 0x210, 0xb, 0x148, 0x210, 0x148, 0x2e0, 0x240, 0x240, 0x2e0, 0x212, 0x3, 0x0, {[{{@ip={@loopback=0x7f009c00, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1ec, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@NFQUEUE1={0x24}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00'}, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x423) 15:40:25 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x1, 0x100}) [ 1238.778347][T30033] input: syz1 as /devices/virtual/input/input74 15:40:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x374, 0x210, 0xb, 0x148, 0x210, 0x148, 0x2e0, 0x240, 0x240, 0x2e0, 0x212, 0x3, 0x0, {[{{@ip={@loopback=0x7f009c00, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1ec, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@NFQUEUE1={0x24}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00'}, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x423) 15:40:26 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x1, 0x100}) 15:40:26 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x101], [0x400, 0x4a, 0x7, 0x9, 0x1000, 0x1e8, 0x6, 0x0, 0x2, 0x800, 0x7, 0xf64c, 0x942, 0xffffff7f, 0x2, 0xbd66, 0x7fffffff, 0xffffff01, 0x9, 0xffffff81, 0x4, 0x3, 0x401, 0xfffff304, 0x4, 0xfffffff7, 0x5, 0x6, 0x81, 0x8d5, 0x4e0, 0x4, 0x9, 0x9, 0x0, 0x9, 0x4, 0x1, 0x2, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff81, 0x7fff, 0x8, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f], [0x0, 0x9, 0xfffffffe, 0x2, 0x1, 0xba0, 0x1, 0x101, 0x1, 0x6, 0x0, 0x2b0b, 0x0, 0x8000, 0x0, 0x2717, 0x4, 0xffffffff, 0x81, 0x10, 0x8, 0x8, 0x1f, 0x6ff41472, 0x5db6, 0x3, 0x10000, 0x3ff, 0xffffffff, 0x4, 0x10000, 0x8, 0xffffff01, 0x8001, 0x8, 0x4, 0x9, 0xd4, 0x9, 0xe91b, 0x7fffffff, 0x8, 0x8, 0x0, 0x4, 0x8, 0x20, 0x0, 0xffff8001, 0x6, 0x2, 0x1000, 0x7, 0x400, 0x3f, 0xfb7a, 0x7fffffff, 0x10000, 0x40, 0xffffffff, 0x8, 0x7, 0x0, 0x40], [0x2, 0x80000001, 0x2, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0x1, 0x3, 0x4, 0x20, 0x6fc0bb2b, 0x9, 0x1, 0x80000001, 0xde83, 0x4, 0x4, 0x800, 0x8b3a, 0x40, 0x7, 0x1, 0xfab5bc7, 0x0, 0xfff, 0x6, 0x8, 0x1, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x401, 0x1, 0x7, 0x7fffffff, 0x9, 0xa3, 0x0, 0x8, 0x7fff, 0x6, 0x3ff, 0x2, 0x5, 0x91, 0xdbb, 0xffff0000, 0x9, 0x5, 0x7, 0x336, 0x1, 0x2c55, 0x4, 0x101, 0x1df, 0x1, 0x692849c6, 0x738, 0x7]}, 0x45c) 15:40:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x374, 0x210, 0xb, 0x148, 0x210, 0x148, 0x2e0, 0x240, 0x240, 0x2e0, 0x212, 0x3, 0x0, {[{{@ip={@loopback=0x7f009c00, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1ec, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@NFQUEUE1={0x24}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00'}, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x423) 15:40:26 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0, "db79b1ebb0906c0d"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3ad005facc0109", 0x7}], 0x1) 15:40:26 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x1, 0x100}) 15:40:26 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:26 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0, "db79b1ebb0906c0d"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3ad005facc0109", 0x7}], 0x1) 15:40:26 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) [ 1239.619717][T30051] input: syz1 as /devices/virtual/input/input75 15:40:26 executing program 3: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) 15:40:26 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0, "db79b1ebb0906c0d"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3ad005facc0109", 0x7}], 0x1) 15:40:27 executing program 0: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0, "db79b1ebb0906c0d"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="3ad005facc0109", 0x7}], 0x1) 15:40:28 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x38}}, 0x0) 15:40:28 executing program 3: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x38}}, 0x0) 15:40:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x38}}, 0x0) 15:40:28 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:28 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x38}}, 0x0) 15:40:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:30 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:30 executing program 3: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, &(0x7f0000000140), &(0x7f0000000440)=0x20) 15:40:30 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:30 executing program 5: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e", 0x5c, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 15:40:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@empty}}, 0xe8) 15:40:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@empty}}, 0xe8) 15:40:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@empty}}, 0xe8) 15:40:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@empty}}, 0xe8) 15:40:30 executing program 0: sysfs$1(0x1, &(0x7f0000000000)='&#%\xf2\x00') 15:40:31 executing program 0: sysfs$1(0x1, &(0x7f0000000000)='&#%\xf2\x00') 15:40:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) 15:40:31 executing program 0: sysfs$1(0x1, &(0x7f0000000000)='&#%\xf2\x00') 15:40:32 executing program 5: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000780)='ns/cgroup\x00') r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000780)='ns/cgroup\x00') 15:40:32 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)='M', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)='/', 0x1}], 0x1}}], 0x2, 0xe5d) 15:40:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:32 executing program 0: sysfs$1(0x1, &(0x7f0000000000)='&#%\xf2\x00') 15:40:32 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) fcntl$setownex(r0, 0xf, 0x0) 15:40:32 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)='M', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)='/', 0x1}], 0x1}}], 0x2, 0xe5d) 15:40:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 15:40:32 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) fcntl$setownex(r0, 0xf, 0x0) [ 1245.276586][T30278] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 15:40:32 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)='M', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)='/', 0x1}], 0x1}}], 0x2, 0xe5d) [ 1245.506293][T30278] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 15:40:33 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) fcntl$setownex(r0, 0xf, 0x0) 15:40:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)='M', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)='/', 0x1}], 0x1}}], 0x2, 0xe5d) 15:40:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) [ 1245.898385][T30296] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 15:40:33 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) fcntl$setownex(r0, 0xf, 0x0) 15:40:33 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) 15:40:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 1246.147894][T30297] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 15:40:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 1246.240826][T30298] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 1246.353682][T30322] blktrace: Concurrent blktraces are not allowed on nbd0 15:40:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) [ 1246.870187][T30377] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1246.960416][T30384] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1247.117032][T30395] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 15:40:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) [ 1247.547251][T30307] warn_alloc: 4 callbacks suppressed [ 1247.547269][T30307] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1247.572427][T30307] CPU: 1 PID: 30307 Comm: syz-executor.4 Not tainted 6.3.0-rc2-syzkaller #0 [ 1247.581143][T30307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1247.591221][T30307] Call Trace: [ 1247.594522][T30307] [ 1247.597471][T30307] dump_stack_lvl+0x136/0x150 [ 1247.602177][T30307] warn_alloc+0x213/0x360 [ 1247.606612][T30307] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 1247.612166][T30307] __vmalloc_node_range+0xf1c/0x1300 [ 1247.617455][T30307] ? create_io_thread+0xaf/0xf0 [ 1247.622304][T30307] ? delayed_vfree_work+0x70/0x70 [ 1247.627335][T30307] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1247.632887][T30307] ? trace_kmem_cache_alloc+0xab/0x100 [ 1247.638364][T30307] ? create_io_thread+0xaf/0xf0 [ 1247.643214][T30307] copy_process+0x1320/0x7640 [ 1247.647902][T30307] ? create_io_thread+0xaf/0xf0 [ 1247.652840][T30307] ? kasan_save_stack+0x32/0x40 [ 1247.657693][T30307] ? kasan_save_stack+0x22/0x40 [ 1247.662564][T30307] ? kasan_set_track+0x25/0x30 [ 1247.667324][T30307] ? __kasan_kmalloc+0xa2/0xb0 [ 1247.672083][T30307] ? create_io_worker+0x10c/0x630 [ 1247.677194][T30307] ? io_wqe_enqueue+0x6c2/0xc20 [ 1247.682064][T30307] ? io_queue_iowq+0x24b/0x530 [ 1247.686841][T30307] ? __cleanup_sighand+0xb0/0xb0 [ 1247.691790][T30307] ? lockdep_hardirqs_on+0x7d/0x100 [ 1247.697009][T30307] ? create_io_worker+0x10c/0x630 [ 1247.702065][T30307] ? io_worker_handle_work+0x1a00/0x1a00 [ 1247.707730][T30307] create_io_thread+0xaf/0xf0 [ 1247.712435][T30307] ? pidfd_pid+0x90/0x90 [ 1247.716715][T30307] ? io_worker_handle_work+0x1a00/0x1a00 [ 1247.722369][T30307] ? __init_swait_queue_head+0xca/0x150 [ 1247.727944][T30307] create_io_worker+0x260/0x630 [ 1247.732824][T30307] io_wqe_enqueue+0x6c2/0xc20 [ 1247.737535][T30307] ? create_io_worker+0x630/0x630 [ 1247.742590][T30307] ? io_file_get_flags+0x228/0x3e0 [ 1247.747749][T30307] io_queue_iowq+0x24b/0x530 [ 1247.752369][T30307] io_queue_sqe_fallback+0xfe/0xa90 [ 1247.757583][T30307] io_submit_sqes+0x160f/0x1e70 [ 1247.762462][T30307] __do_sys_io_uring_enter+0x975/0x2790 [ 1247.768029][T30307] ? io_submit_sqes+0x1e70/0x1e70 [ 1247.773064][T30307] ? xfd_validate_state+0x5d/0x180 [ 1247.778241][T30307] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 1247.784161][T30307] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1247.790854][T30307] __do_fast_syscall_32+0x65/0xf0 [ 1247.795884][T30307] do_fast_syscall_32+0x33/0x70 [ 1247.800742][T30307] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1247.807073][T30307] RIP: 0023:0xf7f75579 [ 1247.811164][T30307] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1247.830802][T30307] RSP: 002b:00000000f7f4f5cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1247.839236][T30307] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005ed2 [ 1247.847206][T30307] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000180 [ 1247.855178][T30307] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1247.863148][T30307] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1247.871295][T30307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.879282][T30307] 15:40:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) [ 1247.917883][T30524] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1247.988904][T30525] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 1248.004057][T30307] Mem-Info: [ 1248.009132][T30307] active_anon:53269 inactive_anon:4128 isolated_anon:0 [ 1248.009132][T30307] active_file:703 inactive_file:6881 isolated_file:0 [ 1248.009132][T30307] unevictable:768 dirty:12 writeback:0 [ 1248.009132][T30307] slab_reclaimable:16758 slab_unreclaimable:110659 [ 1248.009132][T30307] mapped:19391 shmem:14110 pagetables:1034 [ 1248.009132][T30307] sec_pagetables:0 bounce:0 [ 1248.009132][T30307] kernel_misc_reclaimable:0 [ 1248.009132][T30307] free:1361938 free_pcp:10396 free_cma:0 15:40:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 15:40:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 15:40:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 1248.424269][T30307] Node 0 active_anon:213180kB inactive_anon:16496kB active_file:2812kB inactive_file:27512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77536kB dirty:44kB writeback:0kB shmem:54876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:21636kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no [ 1248.471799][T30307] Node 1 active_anon:96kB inactive_anon:16kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1248.517503][T30686] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1248.707700][T30689] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1248.973980][T30307] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.283966][T30307] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 1249.297032][T30307] Node 0 DMA32 free:1481224kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:212788kB inactive_anon:16468kB active_file:2812kB inactive_file:26336kB unevictable:1536kB writepending:40kB present:3129332kB managed:2684996kB mlocked:0kB bounce:0kB free_pcp:28624kB local_pcp:14796kB free_cma:0kB [ 1249.507914][T30307] lowmem_reserve[]: 0 0 1 1 1 [ 1249.554040][T30307] Node 0 Normal free:4kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:392kB inactive_anon:28kB active_file:0kB inactive_file:1176kB unevictable:0kB writepending:4kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1249.793806][T30307] lowmem_reserve[]: 0 0 0 0 0 [ 1249.815998][T30307] Node 1 Normal free:3936204kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:208kB inactive_anon:16kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:11060kB local_pcp:6500kB free_cma:0kB [ 1250.434011][T30307] lowmem_reserve[]: 0 0 0 0 0 [ 1250.462121][T30307] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1250.509499][T30307] Node 0 DMA32: 5286*4kB (ME) 2460*8kB (UME) 719*16kB (UM) 761*32kB (UME) 589*64kB (UME) 229*128kB (UME) 133*256kB (UME) 40*512kB (UME) 22*1024kB (UME) 7*2048kB (UME) 305*4096kB (UM) = 1484360kB [ 1250.561790][T30307] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1250.594961][T30307] Node 1 Normal: 145*4kB (UM) 35*8kB (UE) 21*16kB (UME) 103*32kB (UME) 25*64kB (UME) 4*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 958*4096kB (M) = 3936204kB [ 1250.629534][T30307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.645559][T30307] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1250.658431][T30307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:40:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) 15:40:37 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) [ 1250.690720][T30307] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1250.730080][T30307] 21696 total pagecache pages [ 1250.751976][T30307] 0 pages in swap cache [ 1250.766152][T30307] Free swap = 0kB [ 1250.779439][T30307] Total swap = 0kB [ 1250.791307][T30307] 2097051 pages RAM [ 1250.805746][T30307] 0 pages HighMem/MovableOnly [ 1250.812438][T30307] 392156 pages reserved [ 1250.826859][T30307] 0 pages cma reserved 15:40:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) 15:40:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 15:40:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 15:40:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 1251.333071][T30889] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1251.361157][T30896] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1251.417612][T30905] blktrace: Concurrent blktraces are not allowed on nbd3 15:40:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:39 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f00000002c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0xc) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$ndb(&(0x7f0000001300), 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000480)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0x401, 0x6, 0x8}) syz_clone3(0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth1_to_hsr\x00'}) syz_io_uring_setup(0x22c0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 1253.171177][T31248] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:40:40 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) [ 1253.405853][T31335] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1253.449353][T31349] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1253.526782][T31248] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 15:40:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) [ 1253.899045][T31367] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1254.079775][T31367] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:40:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) [ 1254.572233][T31373] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1254.769427][T31375] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:40:42 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mq_notify(r1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @thr={&(0x7f00000002c0)="600f9896c08f01e9e2bc00e81255be5df99d0f68ac6968945e1068e19e510fdd5a4247", &(0x7f0000000300)="c6f0c10293a326"}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x56c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r2}, 0x0) fchdir(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x5ed2, 0x0, 0x8, &(0x7f0000000180)={[0x1ff, 0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x10, 0x80000001, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000780)={0x6, 'caif0\x00', {0x20}}) [ 1254.936143][T31377] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 15:40:42 executing program 5: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) [ 1255.460047][T31416] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1255.566468][T31418] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:40:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:43 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000280)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000092380222175d874e4592cbc0dbff06497d9432c6f2b3286f3610"], 0x28}, 0x1, 0x0, 0x0, 0x20004194}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) r5 = socket$inet6(0xa, 0x80000, 0x1004) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ftruncate(0xffffffffffffffff, 0x80200002) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x6c060000) 15:40:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000000000007fd17e5ffff0801040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff1d2b591469d42302b10a28", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback=0x7f00000d}, 0x10) 15:40:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 1256.862824][T31527] input: syz1 as /devices/virtual/input/input76 15:40:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 15:40:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 15:40:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 15:40:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1257.458106][T31538] input: syz1 as /devices/virtual/input/input77 [ 1257.546936][T31541] input: syz1 as /devices/virtual/input/input78 15:40:46 executing program 5: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x38}}, 0x0) 15:40:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:46 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x38}}, 0x0) [ 1259.886575][T31553] input: syz1 as /devices/virtual/input/input81 [ 1259.890736][T31548] input: syz1 as /devices/virtual/input/input80 [ 1259.902685][T31551] input: syz1 as /devices/virtual/input/input79 15:40:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x38}}, 0x0) 15:40:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:47 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1260.210136][T31569] input: syz1 as /devices/virtual/input/input82 [ 1260.214203][T31572] input: syz1 as /devices/virtual/input/input83 [ 1260.235452][T31574] input: syz1 as /devices/virtual/input/input84 15:40:47 executing program 5: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:47 executing program 0: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x38}}, 0x0) 15:40:47 executing program 4: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 15:40:47 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003400ffcf000008000000000008"], 0x1a}}, 0x0) [ 1260.811092][T31593] input: syz1 as /devices/virtual/input/input85 15:40:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003400ffcf000008000000000008"], 0x1a}}, 0x0) 15:40:48 executing program 0: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:48 executing program 2: r0 = io_uring_setup(0xa, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 15:40:48 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003400ffcf000008000000000008"], 0x1a}}, 0x0) [ 1261.274014][T31619] [ 1261.277174][T31619] ============================= [ 1261.282148][T31619] WARNING: suspicious RCU usage [ 1261.287142][T31619] 6.3.0-rc2-syzkaller #0 Not tainted [ 1261.292466][T31619] ----------------------------- [ 1261.297585][T31619] lib/maple_tree.c:856 suspicious rcu_dereference_check() usage! [ 1261.305442][T31619] [ 1261.305442][T31619] other info that might help us debug this: [ 1261.305442][T31619] [ 1261.315985][T31619] [ 1261.315985][T31619] rcu_scheduler_active = 2, debug_locks = 1 [ 1261.324387][T31619] 6 locks held by syz-executor.1/31619: [ 1261.329961][T31619] #0: ffff88807bec8d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 1261.339418][T31619] #1: ffff88802c264460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1261.348643][T31619] #2: ffff88802b189088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1261.358775][T31619] #3: ffff888017803cb8 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1261.369012][T31619] #4: ffffffff8c90b388 (ksm_thread_mutex){+.+.}-{3:3}, at: run_store+0xd5/0xa30 [ 1261.378308][T31619] #5: ffff888049f49d58 (&mm->mmap_lock){++++}-{3:3}, at: run_store+0x2a9/0xa30 [ 1261.387523][T31619] [ 1261.387523][T31619] stack backtrace: [ 1261.393454][T31619] CPU: 0 PID: 31619 Comm: syz-executor.1 Not tainted 6.3.0-rc2-syzkaller #0 [ 1261.402181][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1261.412262][T31619] Call Trace: [ 1261.415562][T31619] [ 1261.418515][T31619] dump_stack_lvl+0x136/0x150 [ 1261.423234][T31619] lockdep_rcu_suspicious+0x208/0x3a0 [ 1261.428662][T31619] mas_walk+0x473/0x6e0 [ 1261.432886][T31619] ? sysfs_file_ops+0x1c0/0x1c0 [ 1261.437778][T31619] mas_find+0x150/0x200 [ 1261.441981][T31619] run_store+0x2e7/0xa30 [ 1261.446266][T31619] ? merge_across_nodes_store+0x340/0x340 [ 1261.452051][T31619] ? merge_across_nodes_store+0x340/0x340 [ 1261.457814][T31619] ? sysfs_file_ops+0x1c0/0x1c0 [ 1261.462706][T31619] kobj_attr_store+0x54/0x80 [ 1261.467421][T31619] ? kobj_attr_show+0x70/0x70 [ 1261.472137][T31619] sysfs_kf_write+0x114/0x170 [ 1261.476851][T31619] kernfs_fop_write_iter+0x3f1/0x600 [ 1261.482177][T31619] vfs_write+0x9ed/0xe10 [ 1261.486522][T31619] ? kernel_write+0x670/0x670 [ 1261.491480][T31619] ? __fget_files+0x26a/0x480 [ 1261.496279][T31619] ksys_write+0x12b/0x250 [ 1261.500613][T31619] ? __ia32_sys_read+0xb0/0xb0 [ 1261.505394][T31619] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 1261.512006][T31619] __do_fast_syscall_32+0x65/0xf0 [ 1261.517045][T31619] do_fast_syscall_32+0x33/0x70 [ 1261.521920][T31619] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1261.528270][T31619] RIP: 0023:0xf7f70579 [ 1261.532341][T31619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1261.551957][T31619] RSP: 002b:00000000f7f6b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1261.560467][T31619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 1261.568445][T31619] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.576419][T31619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.584393][T31619] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1261.592378][T31619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.600383][T31619] 15:40:49 executing program 5: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:49 executing program 2: r0 = io_uring_setup(0xa, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 15:40:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003400ffcf000008000000000008"], 0x1a}}, 0x0) 15:40:49 executing program 0: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 15:40:49 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)=0x2000000) 15:40:49 executing program 4: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:49 executing program 2: r0 = io_uring_setup(0xa, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 15:40:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:49 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)=0x2000000) 15:40:49 executing program 2: r0 = io_uring_setup(0xa, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 15:40:49 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)=0x2000000) 15:40:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x48}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1262.398054][T31659] vhci_hcd: default hub control req: 4800 v0000 i0000 l0 15:40:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:50 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)=0x2000000) 15:40:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x48}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:50 executing program 4: unshare(0x6c060000) syz_clone(0x69803180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 15:40:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x48}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1263.084121][T31672] vhci_hcd: default hub control req: 4800 v0000 i0000 l0 15:40:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) [ 1263.257720][T31684] vhci_hcd: default hub control req: 4800 v0000 i0000 l0 15:40:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x48}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) [ 1263.467924][T31696] vhci_hcd: default hub control req: 4800 v0000 i0000 l0 15:40:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:53 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@ipv6_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4, 0x10}]}, 0x20}}, 0x0) 15:40:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 15:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x40a00, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000a00)=""/56) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/raw\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae07, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x27, 0x800, 0x5c4, &(0x7f00000004c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='sessionid\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='maps\x00') io_submit(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/213) 15:40:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@ipv6_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4, 0x10}]}, 0x20}}, 0x0) [ 1266.578679][T31725] validate_nla: 7 callbacks suppressed [ 1266.578696][T31725] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 15:40:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@ipv6_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4, 0x10}]}, 0x20}}, 0x0) [ 1266.728441][T31732] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 15:40:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@ipv6_getroute={0x20, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4, 0x10}]}, 0x20}}, 0x0) 15:40:54 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) [ 1266.801047][T31735] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 1266.923130][T31740] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 15:40:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 15:40:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000002d00)={0x10, 0x20}, 0x10}, {&(0x7f0000005880)={0x18, 0x27, 0x1, 0x0, 0x0, "", [@generic="bb31db2f0a"]}, 0x18}, {&(0x7f0000005e00)={0xc4, 0x1b, 0x235, 0x0, 0x0, "", [@nested={0xb1, 0x0, 0x0, 0x1, [@generic="5772eae222aeba740c3c7790e0671706a1f0363565143e53c1e2514780c5ebf85e6f2d0c6487f5029d97c4126dfd996dff1f2e672e43793f7b21512acd5e644b947bb74c864704d94dda82ea739411e4335f3e50032d4677fb67257c58ec7439900949cee7f8fb83834ab1ea6a762c7937216e464aeeef50552e5332aac3d6e9a78f4d052e4233ee45f8988fa5ff97c3fb3d913f116f142d9c433cf3bcad4460f2f1ed1cf2f3a199318c27229e"]}]}, 0xc4}], 0x4}, 0x0) 15:40:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 15:40:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:40:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = memfd_secret(0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30, 0x81, 0x9}, &(0x7f00000001c0)=0x18) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1267.914643][T31746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1268.104327][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1268.150318][T31746] unsupported nlmsg_type 40 [ 1268.204150][T31746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000002d00)={0x10, 0x20}, 0x10}, {&(0x7f0000005880)={0x18, 0x27, 0x1, 0x0, 0x0, "", [@generic="bb31db2f0a"]}, 0x18}, {&(0x7f0000005e00)={0xc4, 0x1b, 0x235, 0x0, 0x0, "", [@nested={0xb1, 0x0, 0x0, 0x1, [@generic="5772eae222aeba740c3c7790e0671706a1f0363565143e53c1e2514780c5ebf85e6f2d0c6487f5029d97c4126dfd996dff1f2e672e43793f7b21512acd5e644b947bb74c864704d94dda82ea739411e4335f3e50032d4677fb67257c58ec7439900949cee7f8fb83834ab1ea6a762c7937216e464aeeef50552e5332aac3d6e9a78f4d052e4233ee45f8988fa5ff97c3fb3d913f116f142d9c433cf3bcad4460f2f1ed1cf2f3a199318c27229e"]}]}, 0xc4}], 0x4}, 0x0) [ 1268.394169][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) [ 1268.443891][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1268.495443][T31766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000002d00)={0x10, 0x20}, 0x10}, {&(0x7f0000005880)={0x18, 0x27, 0x1, 0x0, 0x0, "", [@generic="bb31db2f0a"]}, 0x18}, {&(0x7f0000005e00)={0xc4, 0x1b, 0x235, 0x0, 0x0, "", [@nested={0xb1, 0x0, 0x0, 0x1, [@generic="5772eae222aeba740c3c7790e0671706a1f0363565143e53c1e2514780c5ebf85e6f2d0c6487f5029d97c4126dfd996dff1f2e672e43793f7b21512acd5e644b947bb74c864704d94dda82ea739411e4335f3e50032d4677fb67257c58ec7439900949cee7f8fb83834ab1ea6a762c7937216e464aeeef50552e5332aac3d6e9a78f4d052e4233ee45f8988fa5ff97c3fb3d913f116f142d9c433cf3bcad4460f2f1ed1cf2f3a199318c27229e"]}]}, 0xc4}], 0x4}, 0x0) 15:40:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) [ 1268.735362][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1268.793938][T31771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000002d00)={0x10, 0x20}, 0x10}, {&(0x7f0000005880)={0x18, 0x27, 0x1, 0x0, 0x0, "", [@generic="bb31db2f0a"]}, 0x18}, {&(0x7f0000005e00)={0xc4, 0x1b, 0x235, 0x0, 0x0, "", [@nested={0xb1, 0x0, 0x0, 0x1, [@generic="5772eae222aeba740c3c7790e0671706a1f0363565143e53c1e2514780c5ebf85e6f2d0c6487f5029d97c4126dfd996dff1f2e672e43793f7b21512acd5e644b947bb74c864704d94dda82ea739411e4335f3e50032d4677fb67257c58ec7439900949cee7f8fb83834ab1ea6a762c7937216e464aeeef50552e5332aac3d6e9a78f4d052e4233ee45f8988fa5ff97c3fb3d913f116f142d9c433cf3bcad4460f2f1ed1cf2f3a199318c27229e"]}]}, 0xc4}], 0x4}, 0x0) [ 1268.844174][T31771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1269.011770][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:56 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r1}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 15:40:56 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r1}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 15:40:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 15:40:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x1000000}}}, 0x90) 15:40:56 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r1}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 15:40:57 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r1}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 15:40:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x1000000}}}, 0x90) 15:40:57 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000000)=""/62, &(0x7f0000000840)=""/119}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000800)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 15:40:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x1000000}}}, 0x90) 15:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_dellink={0x20, 0x11, 0x501}, 0x20}}, 0x0) 15:40:57 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) [ 1270.128413][T31799] binder: 31792:31799 ioctl 400c620e 20000300 returned -22 15:40:57 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48850}, 0x40081) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x18c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x18c}}, 0x4000851) r3 = pidfd_getfd(r0, r2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x140, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "28c8fa3a61"}, @NL80211_KEY_MODE={0x5, 0x9, 0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6a257000cebfd0ce4902c51cbb"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "20a2b7f1fe"}, @NL80211_KEY_SEQ={0xc, 0x4, "170d42e281d29f43"}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "b23d7c6788fd49aeb84bf86402e8c9b5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "604972d78d"}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f40badc148"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "367a59ad46b901d552da216b6c"}], @NL80211_ATTR_SSID={0x16, 0x34, @random="3e0a880c3fb91c8aab75b3b9363043c47990"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xc, 0x34, @random="8614c028e49b89a7"}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x84}, 0x4844) r4 = pidfd_getfd(r0, r0, 0x0) epoll_wait(r4, &(0x7f0000000700)=[{}, {}], 0x2, 0x3) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000740)={0x2}) pidfd_send_signal(0xffffffffffffffff, 0x3, &(0x7f0000000780)={0x3e, 0x6, 0x3}, 0x0) syz_clone3(&(0x7f00000009c0)={0x45000000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x1}, &(0x7f00000008c0)=""/128, 0x80, &(0x7f0000000940)=""/38, 0x0, 0x0, {r4}}, 0x58) 15:40:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 15:40:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x1000000}}}, 0x90) 15:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_dellink={0x20, 0x11, 0x501}, 0x20}}, 0x0) [ 1270.265501][T31805] binder: 31800:31805 ioctl 400c620e 20000300 returned -22 15:40:57 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_dellink={0x20, 0x11, 0x501}, 0x20}}, 0x0) [ 1270.428030][T31818] binder: 31815:31818 ioctl 400c620e 20000300 returned -22 15:40:57 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 15:40:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082}]}) 15:40:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_dellink={0x20, 0x11, 0x501}, 0x20}}, 0x0) 15:40:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) [ 1270.614196][T31827] binder: 31823:31827 ioctl 400c620e 20000300 returned -22 15:40:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e502d40000000000109022400010000000009040000010309150009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00@\f'], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:40:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:40:57 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2c8d00, 0x0, 0x2}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:40:57 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 15:40:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:40:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:58 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2c8d00, 0x0, 0x2}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:40:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082}]}) 15:40:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 15:40:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004c040000000000002d000000000000005504000001ed0a002500000017ffffffbf040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000010000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aae7b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a7313ac7bfc87d19dc32600e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae1452f31ba6415fb1e359a959b86621972a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127cde7e41285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1f9bc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d689f0fe13e9e60419c6138aefcd286f218dd8db8a85474a506dafe9ae46d34042b109cdd37339cb9b3618d84e16febf518cf90ffe14cfda08599555b9546747390c450a513a121f8f4c23ab5bb47e3863310660c41496c531f6cc044b7c4dd98bffa38bf30005893e3a174454a094b033e00dccd308c4b0a6fb0d911279fa6f0234a5f2c6e7e771d40a3b81b21961d56"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:40:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x7628, &(0x7f000000cf3d)=""/195}, 0x48) [ 1271.034076][ T5165] usb 5-1: new high-speed USB device number 32 using dummy_hcd